Data Matters

SEPTEMBER 23, 2021

On August 20, 2021, China’s National People’s Congress passed the Personal Information Protection Law (PIPL), which will become effective starting November 1, 2021. As an overarching law in China with respect to data privacy, PIPL shares many similarities with the EU General Data Protection Regulation (GDPR).

Data Privacy 97

Data Privacy Compliance Privacy Personal data 97

Hunton Privacy

JUNE 14, 2018

Recently, Colorado’s governor signed into law House Bill 18-1128 “concerning strengthening protections for consumer data privacy” (the “Bill”), which takes effect September 1, 2018.

Data breaches 65

Data breaches Security Passwords Military 65

Hunton Privacy

JUNE 11, 2018

Recently, Louisiana amended its Database Security Breach Notification Law (the “amended law”). The amended law goes into effect on August 1, 2018. The amended law goes into effect on August 1, 2018. The Attorney General will allow an extension after receiving a written explanation of the reasons for delay.

Data breaches 52

Data breaches Security Encryption Authentication 52

Hunton Privacy

FEBRUARY 21, 2017

million USD) to notify affected Australian residents and the Australian Information Commissioner (the “Commissioner”) in the event of an “eligible data breach.”. If the assessment determines that an eligible data breach has occurred, entities must notify the Commissioner and affected individuals “as soon as practicable.”.

Data breaches 45

Data breaches Privacy Communications Access 45

IT Governance

AUGUST 26, 2021

A new approach to work requires careful consideration – and one of your biggest concerns should be your compliance posture. This might be fine if your only concern is productivity, but if you also have regulatory compliance challenges, you may feel compelled to install such software. Preventing data breaches.

Compliance 119

Compliance Data breaches Privacy Risk 119

Data Protection Report

AUGUST 4, 2023

As data breaches and cyber-attacks continue to surge and attackers become more sophisticated, a comprehensive data breach response plan and robust data security measures are becoming increasingly important.

Data breaches 98

Data breaches Personal data Risk Compliance 98

DLA Piper Privacy Matters

SEPTEMBER 6, 2023

Authors: Carolyn Bigg, Gwyneth To and Rachel De Souza Start preparing now to comply with India’s new data protection law. The DPDP Act is India’s first comprehensive law on the protection of personal data and comes six years after the Supreme Court of India first declared a fundamental right to privacy in the Puttaswarmy case in 2017.

Personal data 111

Personal data GDPR Data breaches Compliance 111

AIIM

JANUARY 17, 2018

You might also be interested in: Mitigate Data Privacy and Security Risks with Machine Learning. GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law. Privacy by Design: The Intersection of Law and Technology. What Do the GDPR and new Privacy Laws Mean for U.S.

GDPR 83

GDPR Compliance Data collection Privacy 83

Hunton Privacy

JUNE 9, 2022

515 , making Vermont the twenty-first state to enact legislation based on the National Association of Insurance Commissioners Insurance Data Security Model Law (“MDL-668”). Cybersecurity Event Investigation and Notification Requirements. Certain Licensees Are Exempt from the Law’s Requirements.

Insurance 107

Insurance Security Information Security Cybersecurity 107

Hunton Privacy

AUGUST 22, 2023

reports that in early August 2023, the Indian Parliament passed the Digital Personal Data Protection Act (the “Act”), bringing to a close a 5-year process to enact an omnibus data privacy law in India. The Act significantly updates a previous draft, and departs substantially from the GDPR model of privacy laws.

Personal data 90

Personal data Data breaches GDPR Government 90

Hunton Privacy

FEBRUARY 3, 2023

This is the first enforcement action taken under the FTC’s Health Breach Notification Rule, which was issued in 2009. The FTC’s Health Breach Notification Rule defines a “breach of security” as “acquisition of [unsecured PHR identifiable health information] without the authorization of the individual.”

Compliance 61

Compliance Privacy Cybersecurity Marketing 61

IT Governance

DECEMBER 14, 2018

Whenever someone mentions the GDPR (General Data Protection Regulation) , one of the first things they discuss is the potential for huge fines that it brings. The ICO is a non-departmental public body that’s responsible for overseeing data protection laws in the UK. The first is when an organisation suffers a data breach.

GDPR 85

GDPR Compliance Data breaches Personal data 85

Hunton Privacy

JANUARY 6, 2022

reports that on December 16, 2021, the Indian Joint Parliamentary Committee (the “JPC”) submitted its report on India’s draft Data Protection Bill (the “Bill”). One key change relates to notification to the DPA within 72 hours of discovery of a data breach, which the Bill makes mandatory for every breach affecting Indian data subjects.

Personal data 129

Personal data Data breaches Government GDPR 129

Hunton Privacy

AUGUST 8, 2022

In July 2022, Maria Ostashenko from ALRUD Law Firm reports that the Russian Parliament passed, and the President of the Russian Federation signed into law, major reforms in data protection and information governance. The reforms include: Significant changes to Federal Law No.

Information governance 106

Information governance Government Personal data Data breaches 106

Data Protection Report

JULY 16, 2021

On July 6, 2021, Connecticut enacted a new law (Public Act 21-119) that creates a safe harbor for companies that followed certain cybersecurity protocols in the event there’s a security breach. The new Connecticut law is similar to the one Ohio enacted in 2018. The new Connecticut law goes into effect on October 1, 2021.

Cybersecurity 120

Cybersecurity Data breaches Compliance Information Security 120

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Yet many organizations still struggle to meet compliance requirements, and EU data protection authorities do not hesitate to hand out penalties. Irish regulators hit Meta with a EUR 1.2

GDPR 83

GDPR Compliance Personal data Privacy 83

DLA Piper Privacy Matters

FEBRUARY 3, 2021

Mandatory data breach notification. Organisations must now notify the Personal Data Protection Commission (PDPC) and affected individuals if a data breach results in, or is likely to result in, significant harm to affected individuals, or affects 500 or more individuals. New criminal offences.

Personal data 98

Personal data Data breaches Compliance Privacy 98

Hunton Privacy

JANUARY 26, 2022

On November 14, 2021, the Cyberspace Administration of China (“CAC”) released for public comment its draft Regulations on Network Data Security Management (the “Draft Regulations”). In addition, the Draft Regulations add new requirements related to data processing activities. Data Handler and Entrusted Party.

Security 116

Security Data breaches Personal data Cybersecurity 116

Data Protection Report

JULY 21, 2023

On July 20, 2023 HHS and the Federal Trade Commission (“FTC”) issued a joint letter to approximately 130 companies regarding their online data collection processes.

Data collection 98

Data collection Government Risk IT 98

Data Protection Report

DECEMBER 12, 2023

In our previous post , we discussed specific considerations for common boilerplate provisions in data processing agreements (DPAs). Due to the sensitivity of data transfers and privacy laws, DPAs require careful drafting to ensure the data processor complies with appropriate privacy obligations and is responsible for any non-compliance.

Artificial Intelligence 62

Artificial Intelligence Compliance Privacy Security 62

Thales Cloud Protection & Licensing

MARCH 6, 2018

Every year, new regulations and compliance orders come into play that impact businesses across the world. This year, the major regulation that will be implemented, is the European Union’s General Data Protection Regulation (GDPR) , which takes effect on May 25, 2018. And this isn’t just happening in New York.

Compliance 88

Compliance GDPR Encryption Data Privacy 88

Data Matters

OCTOBER 13, 2022

Sullivan, a former federal prosecutor, appears to be the first corporate executive criminally prosecuted—let alone convicted—for his response to a data security incident perpetrated by criminals. In the wake of the 2014 breach, the Federal Trade Commission (“FTC”) initiated an investigation into Uber’s data security program and practices.

Data breaches 167

Data breaches Government Privacy Cybersecurity 167

DLA Piper Privacy Matters

JULY 1, 2020

The amendments, which come into effect on 1 December 2020 , introduce some of the most significant changes to New Zealand’s privacy law since the enactment of the Privacy Act, including: mandatory data breach reporting; restrictions on offshore transfers of personal information; and. Data breach reporting.

Privacy 105

Privacy Data breaches GDPR Compliance 105

DLA Piper Privacy Matters

MAY 7, 2021

The Personal Data Protection Act B.E. Another reason for supporting a postponement is that the Personal Data Protection Committee (PDPC) has yet to be established. Such standard has recently been set out under the Notification of the Ministry of Digital Economy and Society Re: Personal Data Security Standards B.E.

Personal data 105

Personal data Data breaches Compliance Privacy 105

Hunton Privacy

JULY 9, 2020

On July 1, 2020, the Dubai International Financial Centre (“DIFC”) Data Protection Law No. 5 of 2020 came into effect (“New DP Law”). The New DP Law replaces DIFC Law No. In the latter case, the New DP Law only applies to those processing activities taking place within the DIFC.

Personal data 127

Personal data GDPR Data breaches Compliance 127

Data Protection Report

MARCH 21, 2023

Law n°2023-22 of 24 January 2023 (the “ Law ”)aims to fulfil those objectives by, inter alia , inserting Article L.12-10-1 This new legal provision, entering into force from 24 April 2023, makes indemnification pursuant to an insurance contract for damage caused by breach of an automated data processing system (“ADPS”, i.e

Insurance 104

Insurance Data breaches Personal data GDPR 104

Hunton Privacy

JULY 10, 2020

Mandatory Data Breach Notification. The Privacy Bill introduces a mandatory requirement for businesses to report certain data breaches ( i.e. , those that pose a risk of harm, loss or damage to affected individuals) to the New Zealand Privacy Commissioner and affected individuals. Cross-Border Data Transfers.

Privacy 90

Privacy Data breaches Compliance Risk 90

DLA Piper Privacy Matters

JANUARY 19, 2021

The third annual DLA Piper GDPR fines and data breach survey which we launched today reflects how the current circumstances have affected the privacy landscape across the 31 European countries surveyed. The report includes key GDPR metrics compiled from data from the 27 EU Member States plus the UK, Norway, Iceland and Liechtenstein.

Data breaches 103

Data breaches GDPR Personal data Privacy 103

DLA Piper Privacy Matters

DECEMBER 3, 2021

The United Arab Emirates (“UAE”) has enacted its long awaited federal level data protection law. As part of its 50 th anniversary, the UAE has issued a set of sweeping legal reforms, including the much anticipated Federal Decree-Law No. This article examines some of its key features.

Personal data 105

Personal data Data breaches GDPR Compliance 105

DLA Piper Privacy Matters

FEBRUARY 28, 2022

The Data Protection Commission (DPC) has published its 2021 Annual Report , highlighting key observations, emerging guidance, and large-scale inquiries and decisions of 2021. The DPC received a total of 6,549 valid notifications of personal data breaches in 2021. Complaints Handling.

Financial Services 97

Financial Services Data breaches Personal data Compliance 97

Data Protection Report

JANUARY 9, 2023

With the year 2022 firmly in the rear view, and as we look to start the new year in 2023, Norton Rose Fulbright’s Regulatory Compliance and Investigations team looks back and rounds up the five key cyber and data protection developments that took place in Southeast Asia in 2022. . in damages to its customer over data leak.

Cybersecurity 112

Cybersecurity Personal data Data breaches Ransomware 112

IT Governance

APRIL 3, 2018

The General Data Protection Regulation (GDPR)’s compliance deadline is looming. Every organisation that processes personal data must be in compliance with the new law by 25 May or risk substantial regulatory fines from the Information Commissioner’s Office and legal action from aggrieved data subjects.

GDPR 75

GDPR Compliance Personal data Risk 75

Hunton Privacy

FEBRUARY 8, 2021

On January 28, 2021, international Data Privacy Day, the newly formed Brazilian data protection authority ( Agência Nacional de Proteção de Dados , the “ANPD”) published its regulatory strategy for 2021-2023 and work plan for 2021-2022 (in Portuguese). Rules concerning notification of data breaches to the ANPD and data subjects.

Data breaches 138

Data breaches Data Privacy Compliance Privacy 138

Data Matters

JANUARY 2, 2020

While much of the New Year attention has been focused on California due to the effective date of the California Consumer Privacy Act , a new Oregon law also went into effect on January 1, 2020 complicating compliance with data breach obligations. It also requires vendors to provide notice to the data owner within 10 days.

Data breaches 68

Data breaches Privacy Personal data Compliance 68

Data Protection Report

JANUARY 20, 2020

2019 saw continued growth and change in data protection and cyber-security across the Asia-Pacific. Following the implementation of the GDPR in May, 2018, many jurisdictions moved to review and strengthen existing data privacy and cyber-security laws. Data localisation requirements are also imposed on foreign service providers.

Personal data 127

Personal data Security Data Privacy GDPR 127

Hunton Privacy

APRIL 12, 2021

On April 8, 2021, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth submitted comments in response to the Ministry of Public Security (“MPS”) of Vietnam’s Draft Decree on Personal Data Protection (“Draft Decree”). If enacted, it would establish the first comprehensive data protection and privacy law for Vietnam.

Personal data 87

Personal data Privacy Data breaches Compliance 87

Hunton Privacy

JULY 8, 2020

On July 1, 2020, the Dutch Data Protection Authority ( Autoriteit Persoonsgegevens , the “Dutch DPA”) published its 2019 annual report (the “Report”). The Report shows that in 2019, the Dutch DPA focused on enforcement actions, after having raised awareness about the EU General Data Protection Regulation (the “GDPR”) in 2018.

Personal data 96

Personal data Data breaches Sales GDPR 96