Data Matters

SEPTEMBER 30, 2020

Facebook Ireland and Maximillian Schrems , Case C-311/18 (July 16, 2020). national security law did not provide equivalent privacy protections to those available in the EU. national security law protects EU personal data. In other words, the national security of Europe depends on benefits from U.S. agencies is compelling.

Paper 128

Paper Government Security Privacy 128

Hunton Privacy

JUNE 8, 2020

On June 3, 2020, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth LLP published its report, What Good and Effective Data Privacy Accountability Looks Like: Mapping Organizations’ Practices to the CIPL Accountability Framework (“Report”).

Data Privacy 113

Data Privacy Privacy Compliance Risk 113

Thales Cloud Protection & Licensing

AUGUST 15, 2019

1, 2020, grants to the state’s over 40 million people a range of rights comparable to the rights given to European citizens with the General Data Protection Regulation (GDPR)–the two legislations are not that similar, but they do share some general features, GDPR is an omnibus law, while CCPA is more limited.

Privacy 92

Privacy GDPR Digital transformation Sales 92

Data Matters

OCTOBER 1, 2020

Securities and Exchange Commission (SEC)’s Division of Trading and Markets issued its first no-action letter (Letter) to the Financial Industry Regulatory Authority, Inc. FINRA), 1 related to digital asset securities. Securities Act of 1933 (Securities Act) and the Exchange Act. On September 25, the U.S. Background.

Security 68

Security Blockchain Marketing Risk 68

Reltio

NOVEMBER 13, 2020

Video Examples and Practice Exercises. See many examples of Reltio in action and practice what you’ve learned in the Configuration Fundamentals course. . A dozen additional MDM courses are currently under development in areas such as Data Cleanse, Data Modeling, Architecture, Security and more! On-demand learning.

MDM 52

MDM Libraries Access IT 52

Hunton Privacy

MAY 4, 2021

While the framework of this version of the Draft PIPL is the same as the prior version issued on October 21, 2020, below we summarize the material changes in the second version of the Draft PIPL. The Draft PIPL will be open for public comments until May 28, 2021. Legal Basis for Processing Personal Information. Specific Data Processor.

Personal data 94

Personal data IT Information Security Privacy 94

Thales Cloud Protection & Licensing

NOVEMBER 24, 2020

Wed, 11/25/2020 - 05:55. Global GPS giant Garmin and leading camera-maker Canon are two recent examples of ransomware attacks on large businesses. For example, the average cost to remediate a ransomware attack costs US$1,448,458 and US$732,520 for those that did not pay the ransom. Decoupling Encryption Keys From Encrypted Data.

Encryption 62

Encryption Ransomware Systems administration Cloud 62

Data Matters

APRIL 10, 2020

While the world seems to have ground to a halt in so many ways, time still marches on, and along with it, the California Consumer Privacy Act (“CCPA”) enforcement date (July 1, 2020) inches ever closer. The AG’s revisions make only moderate changes to the last round of regulations issued in February 2020.

Privacy 68

Privacy Sales Insurance Compliance 68

Data Matters

NOVEMBER 16, 2020

On November 2, 2020, Singapore’s legislature finally approved amendments to the Personal Data Protection Act (PDPA). The changes become law once a government gazette is passed (possibly before the end of 2020). Carry out data breach drills or tabletop exercises. NEW mandatory data breach notification requirement.

Data Privacy 68

Data Privacy Privacy Data breaches Personal data 68

Data Protection Report

JANUARY 6, 2020

2020 could well be a year of data export turmoil – so brace yourself! Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs.

Privacy 84

Privacy GDPR Data breaches Risk 84

IT Governance

APRIL 1, 2020

That means ensuring that you remain productive and – just as important – safe, both in terms of your organisation’s security posture and your mental wellbeing. The popularity of the app has surged during the COVID-19 crisis, but since Monday it has faced a string of accusations about its security.

Security 83

Security Data breaches Risk Passwords 83

DLA Piper Privacy Matters

AUGUST 3, 2020

On 5 June 2020, the Japanese Diet approved a bill to partially amend the Act on the Protection of Personal Information (the “ APPI” ). Further, the amended APPI allows data subjects to choose the method (in writing or through electronic means such as by email) to receive personal data upon exercising the right of access.

Personal data 122

Personal data Data breaches Compliance Analytics 122

IT Governance

MARCH 17, 2020

Cyber security experts have found that the 2019 novel coronavirus (COVID-19) has led to a surge in phishing scams , with both individuals and organisations at risk. For example, millions of employees will likely to be forced to work remotely, as the UK government prepares for a lockdown scenario. REFUSE*CV*VACCINE* [link].

Phishing 114

Phishing Risk Communications Government 114

Data Protection Report

JUNE 7, 2021

This approach was disputed by the European Data Protection Board (EDPB) and the European Data Protection Supervisor in their joint opinion on the Commission’s draft SCCs which was published in November 2020 (the Joint Opinion) who consider that even theoretical access to personal data is of concern. Article 4 of Implementing Decision ).

Personal data 119

Personal data GDPR Data breaches Access 119

Hunton Privacy

SEPTEMBER 10, 2020

On September 7, 2020, the European Data Protection Board (“EDPB”) released draft Guidelines 07/2020 on the concepts of controller and processor in the EU General Data Protection Regulation (“GDPR”) (the “Guidelines”). The Guidelines replace the previous opinion of the Article 29 Working Party on these concepts. Background.

GDPR 95

GDPR Personal data Data breaches Compliance 95

AIIM

APRIL 12, 2022

The classic example is the insurer that won’t pay for care that a doctor determines a patient needs. Due to the pandemic, in 2020, US telemedicine visits exploded by 683% (US Department of Health and Human Resources). Information Security. Security is not a one-and-done exercise, though.

Computer and Electronics 104

Computer and Electronics Insurance Marketing Paper 104

Hunton Privacy

FEBRUARY 24, 2020

On February 19, 2020, the Information Commissioner’s Office (“ICO”) launched a consultation on its draft AI auditing framework guidance for organizations (“Guidance”). The Guidance is open for consultation until April 1, 2020 and responses can be submitted via the ICO’s online survey.

Personal data 57

Personal data Artificial Intelligence Risk Privacy 57

ForAllSecure

JANUARY 28, 2021

Look for example or test binaries that are fuzzable. Luckily after a little digging in the repository, I found a collection of test binaries that took input from file and exercised interesting parts of the library such as parsing and transforming data. June 26 2020, Root cause of bug diagnosed.

Libraries 52

Libraries Data structuring Government IT 52

ForAllSecure

JANUARY 28, 2021

Look for example or test binaries that are fuzzable. Luckily after a little digging in the repository, I found a collection of test binaries that took input from file and exercised interesting parts of the library such as parsing and transforming data. June 26 2020, Root cause of bug diagnosed.

Libraries 52

Libraries Data structuring Government IT 52

AIIM

MAY 12, 2022

Late last year, the Securities and Exchange Commission announced that J.P. Morgan Securities LLC had agreed to pay $125 million to help settle charges of “widespread and longstanding failures by the firm and its employees to maintain and preserve written communications” over the course of several years.

Communications 115

Communications Information governance Compliance Government 115

Data Protection Report

JANUARY 6, 2020

2020 could well be a year of data export turmoil – so brace yourself! Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs.

Privacy 52

Privacy GDPR Data breaches Risk 52

Data Protection Report

FEBRUARY 28, 2020

However, most of the operational provisions, including provisions relating to the rights of a data subject, the obligations of a data controller and the penalties for non-compliance, will become effective on 27 May 2020, 1 year after the PDPA is published. Security obligations. Penalties. Transitional provisions.

Personal data 92

Personal data Compliance Privacy Access 92

Data Matters

JUNE 25, 2021

The Final Schrems II Recommendations, together with the new Standard Contractual Clauses (“ SCCs” ) adopted by the European Commission on 4 June 2021, will now allow organizations to proceed with addressing international data transfers following the landmark Schrems II ruling by the Court of Justice of the European Union in July 2020.

Personal data 79

Personal data Access Communications Cloud 79

Hunton Privacy

JUNE 9, 2020

On June 5, 2020, the Belgian Data Protection Authority (the “Belgian DPA”) published guidance on its website (the “Guidance”) regarding temperature checks during the COVID-19 crisis. This would be the case, for example, where processing is not absolutely necessary to achieve the purpose.

GDPR 87

GDPR Personal data Access IT 87

The Last Watchdog

MAY 11, 2020

Related: How the Middle East has advanced mobile security regulations Over the past couple of decades, meaningful initiatives to improve online privacy and security, for both companies and consumers, incrementally gained traction in the tech sector and among key regulatory agencies across Europe, the Middle East and North America.

Computer and Electronics 113

Computer and Electronics Encryption Cybersecurity Privacy 113

IT Governance

MARCH 11, 2019

For example, Sections 6 and 7 of the DPA 2018 clarify the meaning of the terms ‘controller’, ‘public authority’ and ‘public body’. That is, the “prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security”.

GDPR 79

GDPR Personal data Compliance Government 79

Collibra

JANUARY 14, 2021

The new work-from-home norm and consumer contract tracing apps are 2020 solutions that further complicate how organizations’ have traditionally safeguarded data. Elements such as fingerprints, customer contact information, social security number, or employee background checks. public, internal, confidential).

Compliance 93

Compliance Government Risk Privacy 93

Data Matters

JUNE 11, 2020

Securities and Exchange Commission’s (the SEC) examination and enforcement programs. For example, the Investment Group may have an employee serving on the board of directors of the company or a shareholder committee. Investment Groups may also obtain MNPI as part of the investment process.

Risk 76

Risk Compliance Access IT 76

HL Chronicle of Data Protection

OCTOBER 26, 2018

For example, organizations are to satisfy the core notice obligations by posting the notice on their public-facing website. The provision does not address workplace-related anti-discrimination activities based on the exercise of CCPA rights. In addition, various provisions appear to not fit employment relationships.

Privacy 40

Privacy Sales Compliance Personal data 40

Data Protection Report

SEPTEMBER 27, 2018

Following Europe’s lead and some recent high profile scandals involving the use of personal information, California passed the California Consumer Privacy Act which goes into effect on January 1, 2020. Used to detect security incidents and protect against malicious, fraudulent or illegal activity. You can find our coverage of it here.)

GDPR 40

GDPR Personal data Privacy Compliance 40

DLA Piper Privacy Matters

NOVEMBER 12, 2020

Annex 2 to the Recommendations provides a number of use cases providing examples of the technical, organisational and contractual measures that may be adopted to provide ‘supplementary measures’ where the third country does not provide sufficient guarantees within its legal framework. Recommendations on the European Essential Guarantees.

Paper 98

Paper Personal data Privacy Access 98

Collibra

MARCH 12, 2020

The CCPA officially went into effect on January 1, 2020, impacting over 40 million California residents and thousands of businesses who use personal information (PI) around the globe. Businesses cannot discriminate against a consumer for exercising their rights. Is the data secure? Aspects of the CCPA include: Right to know.

Data Privacy 59

Data Privacy Privacy Government Compliance 59

Data Matters

JUNE 29, 2018

1, 2020, unless changed in the interim. The potential negative effects on innovation and widespread business practices are likely to prompt considerable interest in making necessary corrections and other amendments to the law before it takes effect in 2020 as well as in possible preemptive federal legislation. biometric information.

GDPR 79

GDPR Privacy Sales Data breaches 79

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. The CCPA goes into effect January 1, 2020. Its final status, however, is far from clear. CCPA Background. 17-0039). Who Is Covered? Businesses.

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Data Protection Report

SEPTEMBER 17, 2019

Executive Summary : The wait is over: Only five CCPA amendments with limited scope get passed by the California legislature, leaving the CCPA largely intact to go into effect on January 1, 2020. This will be the version that will go into effect on January 1, 2020. Summary of CCPA Amendments. – § 1798.100.

B2B 40

B2B Privacy Communications Encryption 40

HL Chronicle of Data Protection

NOVEMBER 30, 2018

Come 2020, the California Consumer Privacy Act (“CCPA”) may significantly impact businesses’ data practices, with new and burdensome compliance obligations such as “sale” opt-out requirements and, in certain circumstances, restrictions on tiered pricing and service levels.

Marketing 40

Marketing Privacy Sales Compliance 40

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. The CCPA goes into effect January 1, 2020. Its final status, however, is far from clear. CCPA Background. 17-0039). Who Is Covered? Businesses.

Privacy 58

Privacy Sales Education Compliance 58