Collibra

JUNE 23, 2023

Government agencies — from DC to Duluth, NYC to LA — are struggling. The ever-growing digitalization of our world has raised significant concerns about data privacy and security, particularly for agencies that manage and process sensitive and confidential information. There’s no going back. They must choose both.

Privacy 84

Privacy Government Data Privacy Data breaches 84

Hunton Privacy

MAY 17, 2023

On May 4, 2023, the Florida Senate and House of Representatives voted in favor of sending the Florida Digital Bill of Rights (“FDBR”) and other amendments related to government moderation of social media and protection of children in online spaces ( S.B. Government Moderation of Social Media S.B. Related Statutory Amendments in S.B.

Privacy 83

Privacy Personal data Sales Government 83

Data Matters

OCTOBER 26, 2021

The ICO’s response to the UK government’s proposals further presents another pivotal moment for UK data protection law. Being the UK’s lead regulator, the ICO’s response is significant and the UK government will need to take into account its responses before draft legislation takes shape.

Government 97

Government GDPR IT Personal data 97

IBM Big Data Hub

APRIL 24, 2024

These are just some examples of how organizations support data privacy , the principle that people should have control of their personal data, including who can see it, who can collect it, and how it can be used. One cannot overstate the importance of data privacy for businesses today.

Data Privacy 81

Data Privacy Privacy GDPR Personal data 81

Hunton Privacy

JANUARY 24, 2022

On August 17, 2020, NOYB filed 101 identical complaints before 30 European Economic Area (“EEA”) data protection authorities regarding the use of Google Analytics and Facebook Connect by various companies. The complaints related to the question of whether transfers of EU personal data to Google and Facebook in the U.S.

Analytics 83

Analytics GDPR Personal data Data collection 83

Data Protection Report

JULY 12, 2022

In brief, on April 5, 2021, a security researcher contacted Wegmans about a serious flaw the left some of Wegmans’ customers’ personal data available to the public. During its investigation, Wegmans found a second misconfigured container, which was also open to public access.

Passwords 105

Passwords Data collection Personal data Cloud 105

IBM Big Data Hub

JANUARY 22, 2024

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Any company operating in the EU or handling EU residents’ data must adhere to GDPR requirements. A data subject is the human being who owns the data.

GDPR 83

GDPR Compliance Personal data Privacy 83

DLA Piper Privacy Matters

OCTOBER 3, 2022

Given data classification and grading are mandatory requirements under the Data Security Law and Personal Information Protection Law, organisations should prioritise understanding their data collected and data processing activities within the coming months. Data classification. Next Steps.

Data collection 98

Data collection Personal data Access Compliance 98

Data Protection Report

JUNE 8, 2022

Moreover, the ADPPA requires companies to minimize their data collection practices to only collecting data that is necessary to the functioning of their businesses. Under the existing draft bill, users would also have the right to correct, access, or erase their own data.

Data Privacy 96

Data Privacy Privacy Government Data collection 96

Hunton Privacy

NOVEMBER 13, 2020

On November 12, 2020, the European Commission published a draft implementing decision on standard contractual clauses for the transfer of personal data to third countries pursuant to the EU General Data Protection Regulation (“GDPR”), along with its draft set of new standard contractual clauses (the “SCCs”). Key Takeaways.

Personal data 105

Personal data GDPR Data collection Access 105

IBM Big Data Hub

FEBRUARY 23, 2024

The GDPR puts forth a litany of rules for how organizations in and outside of Europe handle the personal data of EU residents. The details of any organization’s plan to become fully GDPR compliant will vary based on the data the organization collects and what it does with that data.

GDPR 77

GDPR Compliance Personal data Privacy 77

IBM Big Data Hub

MAY 28, 2024

To fulfill these principles, data protection strategies generally focus on the following three areas: Data security —protecting digital information from unauthorized access, corruption or theft throughout its entire lifecycle. Data breach victims also frequently face steep regulatory fines or legal penalties.

Data breaches 74

Data breaches GDPR Compliance Encryption 74

DLA Piper Privacy Matters

DECEMBER 1, 2022

Two different Luxembourg-based companies, and their beneficial owners, brought actions before the Luxembourg District Court arguing that the general public’s access to the information should be restricted, because the disclosure would create a disproportionate risk of interference with the fundamental rights of the beneficial owners.

Privacy 102

Privacy Personal data Risk Data collection 102

Data Protection Report

JANUARY 25, 2022

One aspect of the metaverse that raises privacy concerns is the vast amount of personal data that may be collected on participating individuals. Companies can monitor physiological responses and biometric data such as facial expressions, vocal inflections, and vital signs in real time while participants are in their metaverse.

Privacy 116

Privacy Artificial Intelligence Personal data Data collection 116

DLA Piper Privacy Matters

NOVEMBER 17, 2022

On 14 November 2022, the Office of the Privacy Commissioner for Personal Data (“PCPD”) published two investigation reports for non-compliance of the Personal Data (Privacy) Ordinance (“PDPO”): EC Healthcare’s failure to obtain consent for the use, disclosure, and transfer of patient’s personal data across its group entities; and.

Personal data 52

Personal data Data Privacy Compliance Privacy 52

DLA Piper Privacy Matters

JUNE 13, 2022

The s upplementary measures implemented by Google – whether contractual, organizational, or technical – are ineffective against access requests by US intelligence services. The setup of Google Analytics does not prevent the transfer of personal data outside the EU since all personal data collected via Google Analytics is hosted in the US.

Analytics 98

Analytics IT Personal data Encryption 98

DLA Piper Privacy Matters

NOVEMBER 16, 2021

The draft Network Data Security Management Regulation (“ Draft Regulation ”) was published for consultation on 14 November 2021, and is very wide-ranging in the compliance areas covered. This is a significant reminder to organisations to start data mapping and assessment of all China data sooner rather than later.

Compliance 118

Compliance Personal data Security Risk 118

Hunton Privacy

DECEMBER 1, 2020

On November 26, 2020, the French Data Protection Authority (the “CNIL”) announced that it imposed a fine of €2.25 million on Carrefour France and a fine of €800,000 on Carrefour Banque for various violations of the EU General Data Protection Regulation (“GDPR”) and Article 82 of the French Data Protection Act governing the use of cookies.

GDPR 91

GDPR Personal data Data collection Marketing 91

AIIM

JANUARY 17, 2018

Notification processes in the event of personal data breach. Subject to specific circumstances data controllers and processors may be required to conduct a privacy impact assessment.

GDPR 83

GDPR Compliance Data collection Privacy 83

Data Matters

JUNE 18, 2021

The European Commission has formally launched its legislative initiative aimed at increasing access to and further use of data, so that more public and private actors can benefit from technologies such as Big Data and machine learning. a more flexible framework for access and use of private data sources by public bodies; b.

IT 74

IT Cloud Big data Personal data 74

Data Protection Report

JANUARY 20, 2020

In addition, 2019 saw regulators publishing findings in respect of some of the largest data incidents of 2018. Singapore’s Personal Data Protection Commission (“ PDPC ”) imposed the highest fines to date in respect of a cyber-attack on SingHealth’s patient database system affecting 1.5 million patients.

Personal data 128

Personal data Security Data Privacy GDPR 128

eSecurity Planet

DECEMBER 1, 2021

China’s Personal Information and Privacy Law (PIPL), enacted early last month, is designed to give more than 1.4 billion people greater control over the data collected by private companies and what those companies can do with the data while preserving the Chinese government’s broad access to their citizens’ personal information.

Data Privacy 131

Data Privacy Privacy GDPR Data collection 131

Hunton Privacy

DECEMBER 1, 2009

anti-terrorism authorities access to financial data of individuals located in the EU under certain circumstances. The agreement contains restrictions on access to the data that have been negotiated between the EU and the U.S. ( authorities will not have access to data concerning intra-European transactions; and U.S.

Personal data 40

Personal data Access Data collection Government 40

DLA Piper Privacy Matters

APRIL 20, 2021

Level 3: personal financial information. Level 4: payments data. Level 5: important data. Different compliance obligations – relating to data collection, use, storage, transfer, deletion and general security, i.e. throughout the lifecycle of the data – are specified for each level of data.

Compliance 111

Compliance Security Financial Services Data collection 111

Hunton Privacy

SEPTEMBER 15, 2021

On September 10, 2021, the UK Government Department for Digital, Culture, Media & Sport (“DCMS”) launched a consultation on its proposed reforms to the UK data protection regime. Organizations are encouraged to provide input on a range of data protection proposals, some of which are outlined below.

GDPR 109

GDPR Personal data Risk Communications 109

DLA Piper Privacy Matters

AUGUST 23, 2021

Instead the PIPL is a robust data privacy framework designed to safeguard individuals’ personal data against abuse, but at the same time to reflect cultural and business attitudes to data in China, as well as new technologies (including advances in AI, biometrics and data analytics), and to enable flows of personal data.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Data Protection Report

SEPTEMBER 16, 2021

As Singapore moves towards living with COVID-19 as an endemic disease, the Government has issued guidance for employers on the COVID-19 measures to be implemented at the workplace. PDPC advisory on the collection of personal data at the workplace for COVID-19 contact tracing.

Personal data 52

Personal data Data collection Risk Access 52

Data Matters

JULY 18, 2020

While the Privacy Shield program and SCCs are not the only approved legal transfer mechanisms under the GDPR, they are, perhaps, the most widely-used, and as result, a key facilitator of international trade and cross-border data flows (particularly, on either side of the Atlantic).

Privacy 68

Privacy Personal data GDPR Data Privacy 68

Data Protection Report

MAY 4, 2020

Following the example of many European countries, the French government plans to introduce a contact tracing app, known as “StopCovid”. No personal data is transferred between any two smartphones and no directly personally identifiable data is transferred to the central server. public transport).

Risk 116

Risk Personal data GDPR Compliance 116

HL Chronicle of Data Protection

JUNE 13, 2019

The scope of application of the Data Security Measures. The data covered by the Data Security Measures includes personal data and important data. Requirements for personal data collection statements. Other items required by laws and administrative regulations.

Personal data 40

Personal data IT Data collection Compliance 40

IT Governance

NOVEMBER 14, 2018

Responsibilities of the data controller. A data controller takes top-level responsibility for data collection. If you have the authority to determine that information needs to be collected, you are a data controller. How long to retain the data or whether to make non-routine amendments to the data.

GDPR 107

GDPR Retail Data collection Personal data 107

Data Protection Report

OCTOBER 18, 2022

In particular, the CJEU found that: US surveillance laws [2] do not limit access to data for surveillance purposes to what is “necessary and proportionate”; and. EU data subjects are not granted actionable redress in the courts against US authorities, meaning that EU data subjects therefore have no rights to effective remedy.

Personal data 52

Personal data Privacy Risk Government 52

IT Governance

JUNE 19, 2019

Likewise, a retailer might use personal data collected about an individual to provide targeted ads. Note that the processing must also be extensive (continual monitoring as opposed to occasional checks) and have significant effects (the data reveals something sensitive about the individual). Data matching.

GDPR 73

GDPR Personal data Risk Data breaches 73

Data Matters

SEPTEMBER 28, 2021

Eric Meyer, Chief Technologist of the FTC, spoke about the FTC’s role in combatting data abuse, and referenced potential approaches to penalties, including forced disclosure of algorithms used to wrongly retrieve data and potential internet access bans.

Privacy 88

Privacy Security IoT Data breaches 88

Data Protection Report

DECEMBER 1, 2022

Balancing online safety and data protection risks. Under the Online Safety Bill, online service providers will be required to mitigate the spread of harmful content and ensure appropriate measures are in place to limit access to age-restricted content. generally not allowed without a separate further consent).

Personal data 52

Personal data Compliance Privacy Risk 52

Data Matters

DECEMBER 9, 2021

ownership, control, or management by persons that support a foreign adversary’s military, intelligence, or proliferation activities. ownership, control, or management of connected software applications by persons subject to coercion or cooption by a foreign adversary. the scope and sensitivity of the data collected.

Communications 88

Communications Manufacturing Data collection Risk 88

Hunton Privacy

DECEMBER 18, 2018

On December 13, 2018, the Dutch Data Protection Authority (“ Autoriteit Persoonsgegevens ”) (the “Dutch DPA”) published a report on the complaints it has received since the EU General Data Protection Regulation (“GDPR”) became applicable on May 25, 2018 (the “Report”). View the Report and the press release (in Dutch).

GDPR 59

GDPR Personal data Data collection Business Services 59