DLA Piper Privacy Matters

FEBRUARY 20, 2023

Authors: Sarah Birkett , Nicholas Boyle The Australian Attorney-General has published the (long-awaited) results of the Privacy Act review. The report recommends a number of changes to the Australian privacy framework, including various changes to Australia’s core privacy legislation, the Privacy Act 1988 (Cth).

Privacy 52

Privacy Data breaches Marketing Government 52

DLA Piper Privacy Matters

MAY 19, 2020

Tusla collects and processes highly sensitive, often special category data concerning children, vulnerable women and families across Ireland. It will act as a reminder to organisations of the powers of the regulator when considering their obligations in relation to privacy, data protection and information security governance.

GDPR 122

GDPR Personal data Government Paper 122

Hunton Privacy

JUNE 27, 2023

These bills contain provisions similar to Washington’s My Health My Data Act and expand on protections in the Health Insurance Portability and Accountability Act of 1996 and other privacy laws. Connecticut’s S.B. In particular, S.B. 3 does not contain a private right of action. Other provisions of S.B. 370 apply to any “person” (i.e.,

Data Privacy 69

Data Privacy Personal data Privacy Insurance 69

Data Matters

APRIL 5, 2018

On 28 February 2018, the Belgian Commission for the Protection of Privacy (the “Privacy Commission”) published a recommendation setting out its approach to Data Protection Impact Assessments (“DPIAs”), and in doing so published a “White List” and a “Black List” of processing operations, pursuant to the General Data Protection Regulation (“GDPR”).

GDPR 92

GDPR Privacy Personal data Education 92

Schneier on Security

MARCH 12, 2019

Touted as useful management tools, they can augment biased and discriminatory practices in workplace evaluations and segment workforces into risk categories based on patterns of behavior. These technologies are generally used first against people with diminished rights: prisoners, children, the mentally ill, and soldiers.

Data collection 80

Data collection Privacy Risk 80

DLA Piper Privacy Matters

AUGUST 17, 2022

Mobile apps pervade all aspects of life in Mainland China, and in turn remain a high enforcement priority for data privacy regulators in China. For the past couple of years, operators of mobile apps in China have had to comply with over thirty additional, specific privacy compliance obligations (i.e. Minor’s Data.

Privacy 105

Privacy Risk Personal data Data collection 105

AIIM

JANUARY 17, 2018

This is the eighth post in a series on privacy by Andrew Pery. You might also be interested in: Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. Privacy by Design: The Intersection of Law and Technology. What Do the GDPR and new Privacy Laws Mean for U.S.

GDPR 83

GDPR Compliance Data collection Privacy 83

Hunton Privacy

NOVEMBER 1, 2022

On October 1, 2022, the Colorado Attorney General’s Office submitted an initial draft of the Colorado Privacy Act Rules (“CPA Rules”), which will implement and enforce the Colorado Privacy Act (“CPA”). Guidance on Privacy Notices under the CPA (Rule 6.01 Bona Fide Loyalty Benefits (Rule 6.05).

Privacy 78

Privacy Personal data Data collection Compliance 78

HL Chronicle of Data Protection

SEPTEMBER 5, 2019

The Federal Trade Commission (“FTC”) is requesting public comments on the Children’s Online Privacy Protection Rule (“COPPA Rule”). The FTC noted its particular interest in comments addressing a variety of questions, including: Has the COPPA Rule affected the availability of websites or online services directed to children?

Education 40

Education Privacy IT 40

Data Matters

OCTOBER 24, 2019

Today we look at verification, children’s privacy and the non-discrimination provisions. In the summer of 2018, the California Legislature drafted and passed the California Consumer Privacy Act (CCPA) in record time. DETAILED ANALYSIS ON VERIFICATION, CHILDREN’S PRIVACY AND NON-DISCRIMINATION. INTRO AND BACKGROUND.

Privacy 60

Privacy Sales Authentication Passwords 60

Hunton Privacy

JULY 1, 2019

The report focuses on whether and how organizations in the adtech sector can comply with the EU General Data Protection Regulation (“GDPR”) and the UK’s implementation of the e-Privacy Directive, known as the Privacy and Electronic Communications Regulations (“PECR”).

GDPR 48

GDPR Personal data Privacy Communications 48

Hunton Privacy

NOVEMBER 3, 2017

Recently, the Office of the Privacy Commissioner of Canada (“OPC”) issued its 2017 Global Privacy Enforcement Network Sweep results (the “Report”), which focused on certain privacy practices of online educational tools and services targeted at classrooms.

Education 40

Education Privacy Access IT 40

IT Governance

MAY 15, 2024

I’d say that the separate category just filters out those controls better. Having a separate category for those controls makes this more practical to do. In addition, you need to be aware of your privacy obligations. Last November, a Scottish minister let his children use his tablet, running up a massive bill.

Security 52

Security Information Security Access Cloud 52

IBM Big Data Hub

JANUARY 25, 2024

” Even my children tease me when they hear his “do good” advice and I’ll admit I let him have a pass on the grammar front. HR leaders should address potential job changes, as well as the realities of new categories and jobs created by AI and other technologies. Growing up, my father always said, “do good.”

Artificial Intelligence 99

Artificial Intelligence Communications Education Risk 99

KnowBe4

SEPTEMBER 16, 2019

Employees handling the sensitive data of California residents need to know this stuff; the California Consumer Privacy Act says so. The California Consumer Privacy Act (CCPA) is set to take effect on January 1, 2020. Records of children who are under the age of 13 cannot be sold without affirmative action from a parent.

Privacy 52

Privacy Personal data Compliance Data collection 52

DLA Piper Privacy Matters

FEBRUARY 11, 2020

Pictures and camera’s , focussing on the capturing of images of citizens (children, employees, police forces, etc) and distribution of these images. The DPA intends to keep informing data subjects and data controllers in order to raise GDPR-awareness and stimulate a privacy reflex. INFORMATION BUT ALSO ENFORCEMENT.

IT 81

IT GDPR Compliance Personal data 81

Hunton Privacy

DECEMBER 20, 2017

It is further recommended that a hyperlink to the privacy policy is provided at the point of data collection. In particular, where information is provided to children or other vulnerable people, the vocabulary, style and tone of the language must be adapted appropriately. The chosen method must be appropriate for the circumstances.

GDPR 62

GDPR Personal data Privacy Communications 62

HL Chronicle of Data Protection

OCTOBER 11, 2019

On October 10, California Attorney General Xavier Becerra (CA AG) released proposed regulations to implement certain provisions of the California Consumer Privacy Act (CCPA). They provide clarifications to businesses and consumers in five key CCPA areas as summarized below: 1. Privacy Notice Requirements.

Sales 40

Sales Privacy Insurance Access 40

IT Governance

AUGUST 6, 2018

Most of these incidents could have been prevented if individuals thought privacy first. Data privacy needs to be on everyone’s mind and not just the focus of an individual or the data protection officer. Put them into the following categories: Data posted or faxed to the incorrect recipient . Be prepared.

Data breaches 67

Data breaches Education GDPR Risk 67

HL Chronicle of Data Protection

SEPTEMBER 14, 2018

The approach of the legislator was to maintain the structure of former Legislative Decree 196/2003 (the “Privacy Code”) which, however, has been extensively amended and integrated, and now contains only some residual provisions in addition to those of the GDPR which are directly applicable. 196 of 2003) AND THE GDPR.

GDPR 40

GDPR Personal data Privacy Communications 40

IT Governance

JUNE 19, 2019

You can do this by breaking risk into its two component parts: Probability : the likelihood that the data processing will result in a data breach or privacy violation. Damage : the effects on the individual if a data breach or privacy violation occurs. Targeting children or vulnerable people for specific types of processing.

GDPR 73

GDPR Personal data Risk Data breaches 73

Data Protection Report

JUNE 29, 2018

On June 28, 2018, California lawmakers enacted the California Consumer Privacy Act of 2018 (the “CCPA”) a sweeping, GDPR-like privacy law which is intended to give California consumers more control over how businesses collect and use their data. Right to opt in for children. Consumer access and data portability rights.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

JUNE 29, 2018

On June 28, 2018, California lawmakers enacted the California Consumer Privacy Act of 2018 (the “CCPA”) a sweeping, GDPR-like privacy law which is intended to give California consumers more control over how businesses collect and use their data. Right to Opt In for Children. Consumer Access and Data Portability Rights.

Privacy 40

Privacy GDPR Personal data Risk 40

Hunton Privacy

OCTOBER 23, 2017

The controller must be able to show the profiling is necessary, taking into account whether a less privacy-intrusive method could be adopted. Data protection impact assessments. The review should undertake a thorough assessment of all the relevant data, including any additional information provided by the data subject.

GDPR 53

GDPR Privacy Risk IT 53

Hunton Privacy

JULY 28, 2020

It is generally accepted in the UK and by the ICO that universities are likely to fall under the definition of “public authorities” in relation to the performance of some of their tasks.

IT 91

IT GDPR Personal data Compliance 91

IT Governance

MARCH 28, 2018

Whatever the size and setting of your school, the General Data Protection Regulation (GDPR) places high expectations on protecting the personal data of your data subjects, especially children. Sensitive personal data is a specific set of “special categories” that must be treated with extra security, such as genetic and biometric data.

GDPR 68

GDPR Personal data Compliance Data breaches 68

Data Matters

FEBRUARY 10, 2020

Summarised below are the key takeaways from the Draft Code: Service messages: According to the Draft Code, consent is not required under the Privacy and Electronic Communications Regulation ( PECR ) where an organisation sends service or operational messages to individuals (e.g.,

Marketing 68

Marketing GDPR Personal data Communications 68

Data Matters

FEBRUARY 12, 2019

When California Governor Jerry Brown signed the California Consumer Privacy Act (CCPA) into law on June 28, 2018, there was broad agreement that revisions and clarifications were necessary. Code § 1798.185(a): Categories of Personal Information. Definition of Unique Identifiers. Updating as needed the definition of unique identifiers.

Sales 74

Sales Privacy Data Privacy Compliance 74

IT Governance

NOVEMBER 23, 2018

Step 5 – Privacy risk assessment: Gives users the means to identify individual risks to the rights and freedoms of data subjects, including evaluating levels of risks and determining risk responses. or personal data relating to criminal convictions and offences; and. Systematic large-scale monitoring of public areas.

GDPR 67

GDPR Personal data Risk Marketing 67

Hunton Privacy

SEPTEMBER 16, 2019

California marked the end of the 2019 legislative session this past Friday, September 13, by passing five out of six pending bills to amend the California Consumer Privacy Act of 2018 (“CCPA”). B2B customer personnel would still be entitled to bring a private right of action under the law (Section 1798.150). Code § 1798.140(y)).

Sales 48

Sales B2B Communications Data breaches 48

IT Governance

OCTOBER 15, 2019

Process data that might endanger the individual’s physical health or safety in the event of a security breach.

GDPR 71

GDPR Risk Compliance Personal data 71

IT Governance

SEPTEMBER 4, 2019

2 ) Large-scale use of sensitive data : “(b) processing on a large scale of special categories of data referred to in Article 9(1), or of personal data relating to criminal convictions and offences referred to in Article 10”. Whether the individuals include children or other vulnerable people. Your relationship with the individuals.

Personal data 75

Personal data GDPR Risk Access 75

DLA Piper Privacy Matters

FEBRUARY 4, 2021

Family service, however, also licenses and sells personal data of these mothers (and their children – according to the BDPA’s interpretation) to its business partners for direct marketing purposes. Merely providing a list of “categories of recipients” (as required under article 13 GDPR) is therefore considered insufficient by the BDPA.

Personal data 64

Personal data GDPR Marketing IT 64

Thales Cloud Protection & Licensing

JANUARY 16, 2020

Many privacy professionals consider the European Union’s General Data Protection Regulation (GDPR), which took effect in May 2018, as the cornerstone of privacy regulation. GDPR is harmonizing data protection and privacy requirements across the EU. Objectives of the Personal Data Protection Bill. What is personal information?

Personal data 24

Personal data Compliance Data breaches GDPR 24

HL Chronicle of Data Protection

SEPTEMBER 27, 2017

Schedule 1 of the bill contains the conditions for the processing of special categories of personal data and personal data relating to criminal convictions and offences. This article first published on IAPP’s Privacy Tracker. ’s statutory framework for the foreseeable future. Sensitive personal data. Structure of the bill.

GDPR 40

GDPR Personal data Government Privacy 40

Data Protection Report

MAY 16, 2019

Irrespective of whether an ISS is aimed or targeted at children, the standards of the Code must be met (to the extent applicable) unless: robust age verification mechanisms are applied (we will re-visit these later on) restricting access to adult users only; or. Users impacted. of the GDPR. 0 – 5: pre-literate and early literacy.

Personal data 40

Personal data Privacy GDPR Access 40

Data Protection Report

MAY 23, 2018

We have shared below some interesting points that we’ve seen arising recently, all of which relate to how things are likely to develop from today onwards, including enforcement predictions, challenges related to operationalizing data subject access procedures, and how the GDPR may change the data privacy litigation landscape in Europe.

GDPR 40

GDPR Personal data Compliance Data breaches 40