AIIM

NOVEMBER 5, 2018

Moreover, there seems to be momentum developing for a more comprehensive US Federal Privacy initiative consistent with GDPR. The current US data privacy regime is somewhat fragmented and sectoral in nature and is perceived to be an impediment to competing in the digital economy. Content Analytics (Privacy Information Management).

Privacy 80

Privacy Artificial Intelligence GDPR Analytics 80

Data Matters

JULY 8, 2019

Ensuring that a company is properly prepared for and responds to privacy and cyber security threats is a key corporate governance responsibility for directors and senior officers. Maintain an asset inventory of key information and data systems to assess how the business can be impacted by cyber threats.

GDPR 74

GDPR Privacy Data breaches Risk 74

IT Governance

FEBRUARY 9, 2021

Given the amount of data that marketing agencies collect, it’s essential that staff have a hands-on role in protecting their organisation – which is why an ISMS (information security management system) is essential. The system helps organisations manage, monitor and improve their security practices in one place.

Marketing 123

Marketing Security GDPR Privacy 123

DLA Piper Privacy Matters

MAY 19, 2020

In 2017, the DPC’s Special Investigation Unit (SIU) investigated the governance of Tusla, examining the processing of personal data in child protection cases. It found that there had been insufficient governance planning when Tusla was established, taking into account the volume of cases which it subsumed in 2014.

GDPR 122

GDPR Personal data Government Paper 122

DLA Piper Privacy Matters

OCTOBER 31, 2019

An updated draft of China’s Amended Personal Information Security Specification (“Amended PIS Specification”) and proposed new amendments to the privacy specification for mobile apps (“App Privacy Specification”) were published this week, alongside brand new draft privacy regulations for the banking sector.

Data Privacy 49

Data Privacy Privacy Data collection Data breaches 49

Hunton Privacy

DECEMBER 2, 2020

On November 25, 2020, the European Commission published its Proposal for a Regulation on European Data Governance (the “Data Governance Act”). The Data Governance Act is part of a set of measures announced in the 2020 European Strategy for Data , which is aimed at putting the EU at the forefront of the data empowered society.

Government 70

Government Personal data Compliance GDPR 70

Data Matters

JANUARY 28, 2022

The advisory was promptly endorsed by the National Cyber Security Centre, a division of Government Communications Headquarters (“GCHQ”), a UK intelligence agency. government, especially in light of ongoing tensions between the U.S. This is an important public action by the U.S. and Russia in Ukraine. The post U.S.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Hunton Privacy

JULY 5, 2023

NYDFS clarified that where a cybersecurity program or part of a cybersecurity program is adopted from an affiliate, the “senior governing body” ( e.g. , a board or equivalent governing body) may be that of the affiliate. As described below, senior governing bodies would have new oversight responsibilities under the amendments.

Cybersecurity 113

Cybersecurity IT Compliance Financial Services 113

Data Matters

NOVEMBER 12, 2019

Mactaggart, As privacy practitioners, we share your passion and dedication to the development of information privacy and data protection law in the United States. Your commitment to these issues is clear, and we commend the seriousness of your work in addressing privacy rights in accordance with your vision.

Privacy 68

Privacy Data breaches Compliance Personal data 68

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Not only does this help track privacy and security efforts, but it can also demonstrate compliance if an audit or breach occurs. Privacy policies should use plain language that anyone can understand.

GDPR 82

GDPR Compliance Personal data Privacy 82

Hunton Privacy

JUNE 29, 2018

On June 28, 2018, the Governor of California signed AB 375 , the California Consumer Privacy Act of 2018 (the “Act”). The Act introduces key privacy requirements for businesses, and was passed quickly by California lawmakers in an effort to remove a ballot initiative of the same name from the November 6, 2018, statewide ballot.

Privacy 55

Privacy Sales Personal data Communications 55

Hunton Privacy

FEBRUARY 29, 2016

Privacy Shield. Privacy Shield, was reached on February 2, 2016, between the U.S. Privacy Shield are equivalent to the EU data protection standards. Privacy Shield. government’s access to personal data. government’s access to personal data. government. The agreement in support of the new EU-U.S.

Privacy 56

Privacy Personal data Access Government 56

Collibra

MARCH 12, 2020

Collibra recently partnered with Kelle O’Neal, CEO of First San Francisco Partners (FSFP), to host a joint webinar “ Meeting the CCPA Challenge ” about the complexities of the California Consumer Protection Act (CCPA) for the International Association of Privacy Professionals (IAPP). Competition is fierce. Right to equal service.

Data Privacy 59

Data Privacy Privacy Government Compliance 59

Collibra

JANUARY 14, 2021

Data Privacy Day is celebrated on 28th of January every year. It is a global event to remind us of our responsibilities as consumers and organizations to be aware of how we share, store and protect personal information. Each control is managed within the governance function together with expected answers.

Compliance 89

Compliance Government Risk Privacy 89

DLA Piper Privacy Matters

NOVEMBER 29, 2021

The DPO must be invited to strategic meetings and requested to provide advice on all processing where his/her intervention or presence must be systematic, notably in case of evolution of processing, conduct of a data protection impact assessment(“DPIA”), revision of existing privacy policies or drafting of new policies, data breaches etc.

GDPR 116

GDPR Compliance Personal data Communications 116

AIIM

JANUARY 17, 2018

This is the eighth post in a series on privacy by Andrew Pery. You might also be interested in: Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. Privacy by Design: The Intersection of Law and Technology. What Do the GDPR and new Privacy Laws Mean for U.S.

GDPR 83

GDPR Compliance Data collection Privacy 83

Hunton Privacy

NOVEMBER 26, 2018

Department of Commerce’s National Telecommunications and Information Administration (“NTIA”) in response to its request for public comments on developing the administration’s approach to consumer privacy. privacy framework: Privacy Outcomes.

Privacy 61

Privacy Risk Personal data GDPR 61

IT Governance

OCTOBER 3, 2019

You must tell people when you’re collecting their personal information to give them the opportunity to exercise their data subject rights. These rights enable individuals to access the personal data organisations store on them and to challenge the way their information is used. Make sure people know they’re being recorded.

GDPR 110

GDPR Privacy Retail Personal data 110

Data Matters

JANUARY 22, 2018

The Act also contains several provisions that extend beyond the Section 702 program, including: Privacy and Civil Liberties Oversight Enhancements. The Act permits the largely vacant Privacy and Civil Liberties Oversight Board to exercise the chairman’s authority with a unanimous vote if the chairman’s position is unfilled.

Privacy 68

Privacy Encryption Communications Information Security 68

IT Governance

JUNE 13, 2019

This essentially means that you must consider privacy and information security risks at the outset of all projects that involve personal data. With cyber attacks on the rise, a growing public interest in data privacy and the strengthened penalties introduced by the GDPR, it makes sense to prioritise information security.

GDPR 90

GDPR Personal data Compliance Privacy 90

DLA Piper Privacy Matters

NOVEMBER 5, 2019

Episode 6: Further developments in PRC data privacy regulations. On the other hand, contact lists on personal mobile devices are now deemed sensitive personal information. Helpful clarification is provided as to when and how Personal Information Security Impact Assessments (PIIAs) must be conducted.

Data collection 45

Data collection Data breaches Privacy Information Security 45

AIIM

JULY 24, 2018

This is the 11th post in a series on privacy by Andrew Pery. Data Privacy and Open Data: Secondary Uses under GDPR. Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. Privacy by Design: The Intersection of Law and Technology.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

IG Guru

APRIL 3, 2020

Department of Health and Human Services (HHS) announced, effective immediately, that it will exercise its enforcement discretion and will not impose penalties for violations of certain provisions of the HIPAA Privacy Rule against health care providers or their business associates for the […].

Privacy 52

Privacy CMS IT Information governance 52

Hunton Privacy

JULY 25, 2019

As previously reported on July 12, 2019, Facebook will pay a $5 billion penalty to the Federal Trade Commission to resolve a privacy probe into whether Facebook violated a prior FTC consent decree requiring the company to better protect user privacy. In addition to the penalty, the settlement order, finalized by the U.S.

Privacy 60

Privacy Passwords Compliance Encryption 60

Data Matters

OCTOBER 30, 2017

They can, however, engage in probing internal due diligence of their companies’ cyber governance and compliance posture before it is too late — that is, before a cyber event occurs. Responsibility for corporate cybersecurity extends from the chief information security officer’s office, to the C-suite, to the corporate boardroom.

Compliance 60

Compliance Cybersecurity Risk Government 60

Hunton Privacy

JANUARY 15, 2021

On December 16, 2020, the Committee of Experts within India’s Ministry of Electronics and Information Technology (MeitY) (the “Committee”) issued a revised report on the Non-Personal Data Governance Framework (the “NPDF”) for India (the “Revised Committee Report”).

Personal data 68

Personal data Government Privacy IT 68

Hunton Privacy

AUGUST 22, 2016

The revised policies are intended to transform how privacy is addressed across the branches of the federal government. Proactive Risk Management : Focusing on modernizing the way in which the government identifies, categorizes and handles privacy and security risks.

Privacy 45

Privacy Compliance Records Management Risk 45

IT Governance

APRIL 3, 2018

Data protection governance – the extent to which data protection accountability, responsibility, policies and procedures, performance measurement controls and reporting mechanisms to monitor compliance are in place and operating throughout your firm. Risk management – is privacy risk included in your corporate risk register?

GDPR 75

GDPR Compliance Personal data Risk 75

IT Governance

APRIL 12, 2018

The newly updated EU GDPR Compliance Gap Assessment Tool identifies ten key areas that your organisation should analyse to establish its current stance against the requirements: Governance – awareness of the leadership team, management and functional management.

GDPR 63

GDPR Compliance Personal data Risk 63

Hunton Privacy

MARCH 17, 2017

The CNIL’s methodology first stresses the need for organizations to appoint a leader to pilot governance of data protection within their structure. This person will internally carry out informational, advisory and control tasks. verifying the data security measures implemented. The six steps are summarized below.

GDPR 75

GDPR Personal data Compliance Privacy 75

Security Affairs

DECEMBER 30, 2019

Open Media pointed out that that Windows XP is the last operating system developed by Microsoft that was approved by the Kremlin for use on official Russian government computers. Microsoft Windows 10 is only allowed only for government systems that don’t manage secret information. intelligence agencies.

Government 72

Government Communications Military Manufacturing 72

Hunton Privacy

JUNE 14, 2022

On April 29, 2022, the National Information Security Standardization Technical Committee of China issued a draft version of the Cybersecurity Standard Practice Guidelines – Technical Specification on Certification of Personal Information Cross-border Transfer Activities (the “Guidelines”).

Cybersecurity 108

Cybersecurity Information Security Access Government 108

Hunton Privacy

OCTOBER 2, 2018

The CNIL then issued recommendations to minimize privacy risks to individuals (data subjects) when their personal data is processed using blockchain technology. In addition, the CNIL examined solutions to enable data subjects to exercise their data protection rights. How to Minimize Risks To Data Subjects.

Blockchain 101

Blockchain GDPR Personal data Compliance 101

IT Governance

OCTOBER 17, 2019

Understand your GDPR and PECR compliance gaps by contacting IT Governance for a privacy audit. Our Certified ISO 27001 ISMS Lead Auditor Training Course equips you with the skills to conduct second-party (supplier) and third-party (external and certification) ISMS (information security management system) audits.

Compliance 89

Compliance Government GDPR IT 89

DLA Piper Privacy Matters

MAY 1, 2018

Canada’s long-awaited federal private-sector data breach reporting regulations have now been published by the Canadian government and will take effect November 1, 2018. Organizations should consider taking proactive steps before the security breach reporting/notification requirements come into effect.

Data breaches 40

Data breaches Compliance Privacy Risk 40

Hunton Privacy

OCTOBER 27, 2020

Departments Exercising Personal Information Protection. The Departments responsible for personal information protection (“Departments”) include the Cyberspace Administration of China (“CAC”), the relevant department of the State Council and the relevant department of local government at the level of county or above.

Cybersecurity 111

Cybersecurity Data breaches Personal data Government 111

Hunton Privacy

OCTOBER 18, 2016

Recently, the Centre for Information Policy Leadership (“CIPL”) at Hunton & Williams LLP, a privacy and information policy think tank based in Brussels, London and Washington, D.C., Government bodies, regulators and industry should be involved in educating the public regarding digital literacy.

Paper 49

Paper Education Privacy Personal data 49