IT Governance

NOVEMBER 12, 2018

Under the GDPR (General Data Protection Regulation) an organisation must not keep data for longer than it is needed. Article 5(1)(e) of the GDPR states: “1. Setting data retention periods. There are no specific retention periods set under the GDPR, so it is up to your organisation to establish or identify them.

GDPR 96

GDPR Personal data Paper Archiving 96

Hunton Privacy

DECEMBER 1, 2020

On November 26, 2020, the French Data Protection Authority (the “CNIL”) announced that it imposed a fine of €2.25 million on Carrefour France and a fine of €800,000 on Carrefour Banque for various violations of the EU General Data Protection Regulation (“GDPR”) and Article 82 of the French Data Protection Act governing the use of cookies.

GDPR 91

GDPR Personal data Data collection Marketing 91

The Schedule

MAY 9, 2019

A few weeks ago, Chuck Piotrwoski of PIOT presented a great webinar on the General Data Protection Regulation (GDPR). Chuck broke down GDPR into several basic principles: data about a person belongs to the person. archive, the personal data collected for this transaction is protected by GDPR.

GDPR 40

GDPR Personal data Privacy Data collection 40

Data Matters

FEBRUARY 7, 2019

On 23 January 2019, the European Data Protection Board (EDPB) adopted an opinion on the interplay between the EU Clinical Trials Regulation (CTR) and the EU General Data Protection Regulation (GDPR). Legal basis for the processing of personal data in a clinical trial (primary use). Rather, for a controller (e.g.,

GDPR 83

GDPR Personal data Archiving Privacy 83

DLA Piper Privacy Matters

FEBRUARY 12, 2020

With the EU General Data Protection Regulation (GDPR) having been applicable for almost two years now, data protection supervisory authorities (DPAs) are entering into full enforcement mode all over Europe, resulting in significantly higher fines compared to the pre-GDPR world.

GDPR 59

GDPR Compliance Archiving Personal data 59

IT Governance

APRIL 30, 2018

Something that’s drawn a lot of attention in the lead up to the General Data Protection Regulation (GDPR) compliance deadline is “the right to erasure”, also known as the “right to be forgotten”. You have processed the personal data to offer information society services to a child. a health professional).

GDPR 70

GDPR Personal data Archiving Compliance 70

AIIM

NOVEMBER 16, 2017

GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law. What Do the GDPR and new Privacy Laws Mean for U.S. 50% of organizations not ready for GDPR. Compliance starts with data discovery. The Privacy and Security Dichotomy. Privacy by Design: The Intersection of Law and Technology.

GDPR 102

GDPR Compliance Privacy Paper 102

DLA Piper Privacy Matters

NOVEMBER 6, 2019

On 30 October 2019, the Berlin Commissioner for Data Protection and Freedom of Information ( Berliner Beauftragte für Datenschutz und Informationsfreiheit – “ Berlin DPA ”) imposed an administrative fine of about EUR 14.5 million against Deutsche Wohnen SE for infringements of the General Data Protection Regulation (GDPR).

GDPR 98

GDPR Personal data Archiving Compliance 98

Data Protection Report

NOVEMBER 12, 2019

On October 30, 2019 the Berlin Commissioner for Data Protection and Freedom of Information ( Berliner Beauftragte für Datenschutz und Informationsfreiheit – Berlin DPA ) issued a €14.5 million fine on a German real estate company, die Deutsche Wohnen SE ( Deutsche Wohnen ), the highest German GDPR fine to date.

GDPR 40

GDPR Personal data Records Management Archiving 40

DLA Piper Privacy Matters

SEPTEMBER 4, 2020

They provide more practical guidance and update the CNIL previous Recommendations dated 11 October 2005 on the conditions of archiving personal data [2]. The CNIL’s Guidelines apply to all private companies and public organizations processing personal data. An organization based on the personal data lifecycle.

Personal data 95

Personal data Archiving GDPR Government 95

DLA Piper Privacy Matters

JULY 23, 2019

The European Data Protection Board ( “EDPB” ) has published guidelines on the processing of personal data through video devices (the “ Guidelines “) (currently subject to a public consultation process). technical and organisational measures required for such data processing.

Personal data 40

Personal data GDPR Access Marketing 40

Hunton Privacy

JUNE 11, 2019

On June 6, 2019, the French Data Protection Authority (the “CNIL”) announced that it levied a fine of €400,000 on SERGIC, a French real estate service provider, for failure to (1) implement appropriate security measures and (2) define data retention periods for the personal data of unsuccessful rental candidates.

Personal data 104

Personal data Security GDPR Archiving 104

IT Governance

SEPTEMBER 7, 2023

This week, we discuss security issues at the Electoral Commission, Meta’s appeal against daily GDPR fines, and a breach affecting 10 million users of the French unemployment agency Pôle emploi. Also available on Spotify , Amazon Music , Apple Podcasts and SoundCloud. The fines are due to continue until 3 November.

Government 115

Government IT Personal data GDPR 115

Hunton Privacy

FEBRUARY 7, 2019

On January 23, 2019, the European Data Protection Board (“EDPB”) released an opinion on the interplay between the European Clinical Trials Regulation (“CTR”) and the EU General Data Protection Regulation (“GDPR”) (the “Opinion”).

GDPR 48

GDPR Personal data Archiving Compliance 48

Security Affairs

NOVEMBER 2, 2020

. “The ICO has fined Marriott International Inc £18.4million for failing to keep millions of customers’ personal data secure.” ” In July 2019, the UK’s data privacy regulator announced that the giant hotel chain Marriott International faces a £99 million ($123 million) fines under GDPR over 2014 data breach. .”

Data breaches 128

Data breaches Personal data GDPR Encryption 128

IT Governance

MAY 30, 2018

The EU General Data Protection Regulation (GDPR) is designed to harmonise data protection laws across the EU, but certain industries will have to respond differently in order to achieve compliance. A report published by research and consultancy company Celent highlights the challenges that the GDPR presents to insurers.

Insurance 49

Insurance GDPR Compliance Data collection 49

Preservica

MAY 1, 2018

Suite of new GDPR enhancements simplify classification, search and reporting for long-term personal data. Reporting : Dashboard or on-demand reports show the types of pre-classified personal data held within Preservica, further addressing records of processing requirements (Article 30).

GDPR 40

GDPR Digital preservation Metadata Personal data 40

Hunton Privacy

OCTOBER 1, 2021

In the Opinion, the EDPB concluded that there are key areas of alignment between the EU and Korean data protection frameworks, including on core provisions such as data protection, legal grounds for processing, purpose limitation, data retention, transparency, and security and confidentiality of personal data.

Personal data 101

Personal data GDPR Archiving Security 101

DLA Piper Privacy Matters

SEPTEMBER 20, 2022

The UK GDPR identifies both ‘genetic data’ and ‘health data’ as ‘special category data’ that merit additional protection in comparison with normal personal data. The privacy regime for genetic data in the United Kingdom. The UK GDPR requires a lawful basis to process personal data.

Privacy 98

Privacy GDPR Personal data Risk 98

HL Chronicle of Data Protection

MAY 25, 2018

The General Data Protection Regulation (GDPR) entered into force on 25 May 2018. This procedure led to the adoption in final reading by the French National Assembly of the bill on personal data protection on 14 May 2018. The GDPR has an extended scope compared to the scope of the French Data Protection Act.

GDPR 40

GDPR Personal data Archiving Government 40

IBM Big Data Hub

MAY 28, 2024

It supports the same security measures as data security but also covers authentication, data backup, data storage and achieving regulatory compliance, as in the European Union’s General Data Protection Regulation (GDPR). Data breach victims also frequently face steep regulatory fines or legal penalties.

Data breaches 64

Data breaches GDPR Compliance Encryption 64

Preservica

OCTOBER 30, 2017

Inside and outside of Europe, everyone is talking about the General Data Protection Regulation (GDPR) and what it means to their organization. Whether you are a hare or an ostrich in your readiness, GDPR needn’t be just a deadline viewed with trepidation. First of all, the cloud. Now to digital preservation.

Digital preservation 45

Digital preservation GDPR Cloud Personal data 45

Hunton Privacy

NOVEMBER 6, 2019

This is the highest fine issued in Germany since the EU General Data Protection Regulation (“GDPR”) became applicable. GDPR Violation. In some cases, it was possible to access personal data of affected tenants, some of which were years old, without the data serving the purpose of the original data collection.

GDPR 79

GDPR Archiving Personal data Insurance 79

Hunton Privacy

APRIL 20, 2020

On April 15, 2020, the French Data Protection Authority (the “CNIL”) published the final version of its standard (“Referential”) concerning the processing of personal data for core Human Resources (“HR”) management purposes. Main Changes in the Referential on HR Data Processing. telephone call listening/recording.

Personal data 71

Personal data GDPR Compliance Archiving 71

Data Protection Report

FEBRUARY 19, 2019

On January 23, 2019, the European Data Protection Board (“EDPB”) issued an opinion on the interplay between the Clinical Trials Regulation (“CTR”) and the General Data Protection Regulation (“GDPR”). See our previous blog posts on the GDPR here and here. The GDPR requires a legal basis for processing personal data.

GDPR 40

GDPR Personal data Compliance Risk 40

DLA Piper Privacy Matters

FEBRUARY 23, 2022

In the proposal, “data” is broadly defined and contains both personal and non-personal data. This means that the Data Act would further regulate personal data in addition to the GDPR. The Data Act would apply to all types of enterprises, in principle, including small and micro businesses.

GDPR 97

GDPR Personal data IoT Access 97

HL Chronicle of Data Protection

MAY 1, 2020

This is not the first time that the EDPB has issued guidance on topics related to scientific research or clinical trials (see its analysis on the interplay between the GDPR and the Clinical Trials Regulation , which we covered, here). recent trip or presence in a region where COVID-19 is widespread).

GDPR 80

GDPR Personal data Privacy Data collection 80

CGI

JUNE 6, 2018

GDPR: Navigating the differences. Two very important, but, in some respects, seemingly contradictory pieces of regulation are at the center of attention in the European financial world—the Revised Payment Services Directive (PSD2) and the General Data Protection Regulation (GDPR). What is GDPR? Data Subject”).

GDPR 40

GDPR Marketing Personal data Retail 40

Data Protection Report

JULY 8, 2019

In view of this, the CNIL identified two breaches of the General Data Protection Regulation [3] ( GDPR ): 1. The CNIL also noted that the company had failed to comply with the data retention provision as set out in Article 5-1-(e) of the GDPR.

GDPR 40

GDPR Personal data Compliance Security 40

Data Protection Report

MARCH 22, 2022

On 10 March 2022, the Information Commissioner’s Office ( ICO ) issued a monetary penalty notice to a professional services firm (the Firm ) to the tune of £98,000 for a breach of Article 5(1)(f) of the General Data Protection Regulation ( GDPR ). c) Failure to encrypt personal data.

Ransomware 52

Ransomware Personal data Encryption GDPR 52

HL Chronicle of Data Protection

APRIL 21, 2020

The French Data Protection Authority (CNIL) has recently released new guidelines (French only) regarding human resources processing operations. The new guidelines are applicable to public and private companies for the processing of their employees’ personal data. Categories of personal data.

Personal data 133

Personal data GDPR Big data Compliance 133

Data Matters

SEPTEMBER 7, 2018

On September 5, 2018, the new Belgian Data Protection Act implementing the GDPR (the Belgian Act ) was published and entered into force. The Belgian Act goes further than mere implementation of the GDPR, to cover data processing explicitly excluded from the scope of the GDPR. Criminal Data Processing.

GDPR 96

GDPR Archiving Privacy Compliance 96

Archive Document Data Storage

OCTOBER 10, 2018

New standards for the General Data Protection Rule (GDPR) went into effect on May 25, 2018. They affect any EU business that collects data from customers. GDPR non-compliance penalties are substantial: up to €20 million or 4 percent of annual turnover (whichever is greater). Appoint a Data Protection Officer.

Compliance 40

Compliance Privacy GDPR Archiving 40

DLA Piper Privacy Matters

OCTOBER 22, 2020

On 28 September 2020, the Romanian National Supervisory Authority for the Processing of Personal Data (ANSPDCP) published on its website the annual activity report for 2019. Qualification of the parties involved in personal data processing activities. Obligation to carry out a data protection impact assessment.

Personal data 59

Personal data GDPR Communications Compliance 59

DLA Piper Privacy Matters

MAY 14, 2018

When the General Data Protection Regulation (GDPR) takes effect across the EU on 25 May 2018, large amounts of WHOIS data will no longer be publicly available. The registrant’s state/province will be published together with date of registration and some of the other technical data (e.g.

GDPR 53

GDPR Access Government Archiving 53

DLA Piper Privacy Matters

FEBRUARY 12, 2019

Since the implementation of the GDPR, there has been much discussion with respect to the appropriate legal basis for the processing of personal data in the context of a clinical trial, in particular how this relates to the Clinical Trials Regulation (CTR) which is expected to enter into force in 2020.

GDPR 40

GDPR Personal data Archiving Compliance 40

IT Governance

MAY 7, 2024

Data breached: 6,009,014 accounts. A further 381,000 New York City public school students affected by 2022 data breach In January 2022 , personal data from around 820,000 New York City public school students, both current and former, was breached. Under the EU GDPR, the Czech supervisory authority issued a €13.9

Data breaches 59

Data breaches Education Manufacturing Retail 59