2019, Examples, Exercises and Government - Information Management Today

EDPB publishes guidance on calculating GDPR fines

Data Protection Report

JUNE 9, 2022

For example, a data controller collects data without proper legal basis and when it is later hacked, it fails to notify the supervisory authority. 1) Category of infringement under Article 83(4) – (6) GDPR. Categories of personal data affected (e.g. diagram provided in the Guidelines. Step 2: Assess the Starting Point Sum. (1)

GDPR

GDPR Compliance Personal data IT

The Privacy Officers’ New Year’s Resolutions

Data Protection Report

JANUARY 6, 2020

2019 saw a number of developments in the area of cookies which can’t be ignored. In the UK, the Information Commissioner’s Office (ICO) has been very outspoken on the ad tech industry’s use of special category personal data and onwards data sharing without explicit consent. Data retention is a rising trend in GDPR enforcement.

Privacy

Privacy GDPR Data breaches Risk

The Privacy Officers’ New Year’s Resolutions

Data Protection Report

JANUARY 6, 2020

2019 saw a number of developments in the area of cookies which can’t be ignored. In the UK, the Information Commissioner’s Office (ICO) has been very outspoken on the ad tech industry’s use of special category personal data and onwards data sharing without explicit consent. Data retention is a rising trend in GDPR enforcement.

Privacy

Privacy GDPR Data breaches Risk

Webinars

Generative AI Deep Dive: Advancing from Proof of Concept to Production

MORE WEBINARS

And then there were five: CCPA amendments pass legislature

Data Protection Report

SEPTEMBER 17, 2019

The California legislative session for 2019 ended on September 13 and the following five amendments to the California Consumer Privacy Act (CCPA) were passed: AB 25, 874, 1146, 1355, and 1564. The amendments change and clarify a business’ obligation to permit consumers to submit requests to exercise their CCPA rights.

B2B

B2B Privacy Communications Encryption

The debate on the Data Protection Bill in the House of Lords

Data Protector

OCTOBER 11, 2017

Banks must still be allowed to process data to prevent fraud; regulators must still be allowed to process data to investigate malpractice and corruption; sports governing bodies must be allowed to process data to keep the cheats out; and journalists must still be able to investigate scandal and malpractice. change it substantially.

GDPR

GDPR Personal data Government IT

Regulatory Update: NAIC Summer 2020 National Meeting

Data Matters

SEPTEMBER 3, 2020

Following the adoption of the Common Framework for the Supervision of Internationally Active Insurance Groups (ComFrame) in November 2019, the Group Solvency Issues (E) Working Group (GSI Working Group) performed a gap assessment to identify areas where existing state insurance solvency regulations do not meet the minimum standards under ConFrame.

Insurance

Insurance Paper Artificial Intelligence Big data

EU data governance regulation – a wave of digital, regulatory and antitrust reform begins – Part 1

Data Protection Report

DECEMBER 17, 2020

On 25 November 2020, the European Commission ( EC ) published its proposed Data Governance Regulation (the DGR ), which will create a new legal framework to encourage the development of a European single market for data. What are the objectives of the Data Governance Regulation? This is part one of a series of three blog posts.

Government

Government Personal data Marketing Artificial Intelligence

The Burden of Privacy In Discovery

Data Matters

SEPTEMBER 29, 2021

Although these proportionality factors began as an integral part of the definition of the scope of discovery, for more than two decades these limitations resided in a separate subsection of the Rule, resulting in considerable confusion and less-than-rigorous enforcement. For example, in John B.

Privacy

Privacy e-Discovery Computer and Electronics e-Delivery

FRANCE : THE CNIL ADOPTS REVISED GUIDELINES AND FINAL RECOMMENDATIONS ON COOKIES AND OTHER TRACKERS

DLA Piper Privacy Matters

OCTOBER 6, 2020

The adoption of the Revised Guidelines and Recommendations is part of the CNIL’s 2019-2020 plan for the online advertising sector, which goal is to provide clearer guidance to the advertising sector while enabling users to have greater control over the use of cookies and trackers.

GDPR

GDPR Communications Access Data collection

Mic Drop: California AG releases long-awaited CCPA Rulemaking

Data Protection Report

OCTOBER 11, 2019

On October 10, 2019, with just weeks to go until the law goes into effect, the California Attorney General released the long-awaited draft regulations for the California Consumer Privacy Act (CCPA). The proposed rules shed light on how the California AG is interpreting and will be enforcing key sections of the CCPA. 999.305(d)).

Sales

Sales Retail Privacy Access

The ICO Updates Its Data Sharing Code of Practice

HL Chronicle of Data Protection

AUGUST 5, 2019

On 9 July 2019 the UK data protection authority (ICO) updated its Data Sharing Code of Practice (first published in 2011) (Code). The Code, made under section 121 of the UK’s Data Protection Act (DPA), is publicly available for consultation until 9 September 2019. Scope of application and aim. Specific data sharing cases.

GDPR

GDPR IT Personal data Compliance

EU: New EDPB Guidelines on the territorial scope of the GDPR

DLA Piper Privacy Matters

NOVEMBER 28, 2018

The proposed Guidelines are open for public consultation until 18 January 2019. However, the non-EU entity may not be considered as having an establishment in the EU merely because, for example: Its website is accessible from the EU; It has designated a representative in accordance with Article 27 of GDPR; or.

GDPR

GDPR Personal data Sales Communications

Project Svalbard: The Future of Have I Been Pwned

Troy Hunt

JUNE 10, 2019

And there are the governments around the world using it to protect their departments , the law enforcement agencies leveraging it for their investigations and all sorts of other use cases I never, ever saw coming (my legitimisation of HIBP post from last year has a heap of other examples). haveibeenpwned Ho. 10 — ???

Data breaches

Data breaches Passwords IT Mining

Key takeaways for the private sector from The Bridges v South Wales police facial recognition case

Data Protection Report

AUGUST 27, 2020

The claim concerned the lawfulness of AFT that had been deployed by SWP on around 50 occasions between May 2017 and May 2019. Those using AFT in the private sector should therefore consider creating internal rules governing the use of AFT. This case was brought by Edward Bridges who is a civil liberties campaigner living in Cardiff.

Risk

Risk Retail IT GDPR

Information Management Today

EDPB publishes guidance on calculating GDPR fines

The Privacy Officers’ New Year’s Resolutions

Webinars

Trending Sources

The Privacy Officers’ New Year’s Resolutions

Webinars

And then there were five: CCPA amendments pass legislature

The debate on the Data Protection Bill in the House of Lords

Regulatory Update: NAIC Summer 2020 National Meeting

EU data governance regulation – a wave of digital, regulatory and antitrust reform begins – Part 1

The Burden of Privacy In Discovery

FRANCE : THE CNIL ADOPTS REVISED GUIDELINES AND FINAL RECOMMENDATIONS ON COOKIES AND OTHER TRACKERS

Mic Drop: California AG releases long-awaited CCPA Rulemaking

The ICO Updates Its Data Sharing Code of Practice

EU: New EDPB Guidelines on the territorial scope of the GDPR

Project Svalbard: The Future of Have I Been Pwned

Key takeaways for the private sector from The Bridges v South Wales police facial recognition case

Stay Connected