IBM Big Data Hub

JANUARY 22, 2024

The GDPR defines the circumstances under which companies can legally process personal data. An organization must establish and document its legal basis before collecting any data. The organization must communicate this basis to users at the point of data collection.

GDPR 80

GDPR Compliance Personal data Privacy 80

DLA Piper Privacy Matters

MAY 5, 2020

The latest evolution of digital technologies, such as robotics, Internet of Things, Artificial Intelligence, high-performance computers and powerful communication networks leads self-driving cars out of an imaginary world and into our daily lives. geolocation data; biometric data; etc.) 23(1) GDPR.

Privacy 69

Privacy Personal data GDPR Insurance 69

Data Matters

MARCH 10, 2021

On February 10, 2021, the Council of the European Union (which includes representatives of the European Union (EU) member states, hereinafter Council) reached an agreement on the ePrivacy Regulation proposal that governs the protection of privacy and confidentiality of electronic communications services (ePrivacy Regulation).

GDPR 68

GDPR Metadata Communications Privacy 68

Privacy and Cybersecurity Law

JULY 26, 2021

Such measures should periodically verify the fairness and accuracy of the results of the algorithmic systems, and check whether the data used is pertinent and adequate in order to achieve the purposes pursued. Communication of the DPO’s contact details to the Garante. Record of the processing activities.

Personal data 52

Personal data GDPR e-Delivery Communications 52

Hunton Privacy

MARCH 17, 2017

verifying the data security measures implemented. The third step will be completed once organizations have implemented measures to protect data subjects concerned with their data processing activities and have identified those data processing activities that involve a privacy risk.

GDPR 75

GDPR Personal data Compliance Privacy 75

Data Protection Report

AUGUST 18, 2021

China’s Cyber Security Law ( CSL ), enacted in 2016, requires operators of critical information infrastructure ( CII ) to follow a number of enhanced security obligations, including storing within China all personal information and important data collected or generated during their operations in China.

Financial Services 52

Financial Services Data collection Security Communications 52

John Battelle's Searchblog

APRIL 19, 2020

Zoom Video Communications , a fast-growing enterprise videoconferencing platform with roots in both Silicon Valley and China, had already seen its market cap grow from under $10 billion to nearly double that. Figure 1 – Zoom’s Data Collection visualized. More than 700 of his 2,500+ employees live and work in China.

Privacy 115

Privacy Data collection Marketing Communications 115

IGI

OCTOBER 18, 2017

The Act includes a number of key amendments that improve individual privacy rights, increase the powers of French Data Protection Authority (CNIL), and impose new requirements on how companies and communication providers handle personal information. Businesses must now notify customers how long their personal data will be held.

Privacy 20

Privacy Personal data GDPR Communications 20

Data Protection Report

SEPTEMBER 16, 2021

Employers should communicate clearly and in advance to their employees (i) of its intention to implement the VoRT regime; and (ii) the details of the upcoming VoRT regime. PDPC advisory on the collection of personal data at the workplace for COVID-19 contact tracing.

Personal data 52

Personal data Data collection Risk Access 52

Data Matters

FEBRUARY 12, 2019

Updating as needed additional categories of personal information to those enumerated in the bill in order to address changes in technology, data collection practices, obstacles to implementation, and privacy concerns. Code § 1798.185(a): Categories of Personal Information. Definition of Unique Identifiers. Exceptions.

Sales 74

Sales Privacy Data Privacy Compliance 74

Data Protection Report

AUGUST 1, 2019

The CLOUD Act resolved the issue by amending the federal Stored Communications Act to state that a criminal warrant served on a U.S.-based Processing of the personal data is “necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.” 2523(b)(3)).

Cloud 40

Cloud Privacy e-Discovery Personal data 40

Data Protection Report

MAY 23, 2018

These data subject rights are not new as similar rights were already in place before the GDPR in Europe (and most frequently exercised in the UK), but for organizations that are based outside the EU, this procedure may have been put in place for the first time and never put to test before.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Hunton Privacy

OCTOBER 14, 2021

The bill uses the same definition of “genetic data” as provided for in AB-825. Security : DTC Companies must implement and maintain reasonable security procedures and practices to protect a consumer’s genetic data against unauthorized access, destruction, use, modification, or disclosure.

Privacy 98

Privacy Insurance Security Data breaches 98

DLA Piper Privacy Matters

NOVEMBER 19, 2018

combination of data operated by data brokers and processing in order to personalize online advertising); monitoring of contractual breaches mutualised by stakeholders within a same sector of activity and, which may lead to a decision to exclude or suspend someone from the benefit of a contract (e.g. This concerns: Health data.

Data Privacy 40

Data Privacy IT GDPR Privacy 40

Krebs on Security

APRIL 16, 2020

“Looking at the data collected, the pattern of visits are highest on Monday and Friday, and the lowest visit count is on the weekend. Our data shows that there were virtually no customer hits on COVID-related domains prior to February 23.”

Phishing 293

Phishing Data collection Security Government 293

HL Chronicle of Data Protection

SEPTEMBER 19, 2018

As part of our ongoing series on the CCPA and its implications, this post sets out key issues and questions to consider when contemplating a data mapping exercise. Mapping data accurately and efficiently can be challenging. But when done correctly, data mapping can deliver significant value. KEY DATA MAPPING QUESTIONS.

Privacy 73

Privacy Compliance GDPR Sales 73

Hunton Privacy

JULY 8, 2022

Notice of Third-Party Data Collection (Section 7012): The proposed regulations add an entirely new notice requirement that is not reflected in the text of the CCPA/CPRA. (Note that this definition adds the language in italics, thereby expanding the CCPA/CPRA’s existing definition of the term.) Alternative Opt-Out Link (Section 7015).

Privacy 101

Privacy Sales Compliance Access 101

HL Chronicle of Data Protection

SEPTEMBER 19, 2018

As part of our ongoing series on the CCPA and its implications, this post sets out key issues and questions to consider when contemplating a data mapping exercise. Mapping data accurately and efficiently can be challenging. But when done correctly, data mapping can deliver significant value. KEY DATA MAPPING QUESTIONS.

Privacy 40

Privacy Compliance GDPR Sales 40

DLA Piper Privacy Matters

OCTOBER 6, 2020

and (iii) recorded by data controllers, for an appropriate duration during which they would not ask the users again for their consent. 434684, ASSOCIATION DES AGENCES-CONSEILS EN COMMUNICATION et autres (available in French only, here ). [2] Cookies configuration from web browsers or operating system is not sufficient.

GDPR 76

GDPR Communications Access Data collection 76

Hunton Privacy

FEBRUARY 12, 2013

The Guidelines introduce heightened notice and opt-out requirements for the use of cookies, web beacons and similar technology, and they impose extensive requirements on the content and delivery of privacy notices generally (with respect to all personal data, not just data collected via cookies and other automated means).

Privacy 40

Privacy Personal data Data collection Financial Services 40

Data Matters

SEPTEMBER 29, 2021

Most of that focus has centered on data collection, storage, sharing, and, in particular, third-party transactions in which customer information is harnessed for advertising purposes. Could a party, for instance, decline to produce, review, or even collect certain types of data due to privacy concerns? Preservation.

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

Security Affairs

JANUARY 13, 2021

While these alt platforms largely position themselves as “free speech” alternatives, we at CyberNews were also interested in how these alt social platforms compare in terms of data collection. Users would need to read both Triller’s and Quickblox’ privacy policies to get a good idea of how their data is being collected and processed.

Data collection 117

Data collection Privacy Analytics Access 117

DLA Piper Privacy Matters

NOVEMBER 28, 2018

The EDPB largely confirms the existing approach under the CJEU’s Costeja and Weltimmo cases: A controller or processor will be considered to have an establishment in the EU if it exercises a real and effective activity (even a minimal one) exercised through stable arrangements, regardless of its legal form (e.g.,

GDPR 45

GDPR Personal data Sales Communications 45

HL Chronicle of Data Protection

SEPTEMBER 14, 2018

Article 28(3)(e) of the GDPR already requires that a contract between a controller and processor stipulate that the processor will assist the controller in responding to requests for exercising a data subject’s rights, including the right to erasure of personal data under Article 17 of the GDPR. Sale and Disclosure.

Privacy 40

Privacy Sales GDPR Personal data 40

Data Protection Report

JUNE 25, 2019

These bid requests typically contain personal data, with those bid requests containing the most information about a person and their device(s) being the most attractive, in part because they enable more accurate targeting of adverts to the person concerned. Next steps.

Personal data 40

Personal data GDPR Compliance Privacy 40

Data Matters

MARCH 4, 2021

limit the collection of personal data to what is adequate, relevant, and reasonably necessary in relation to the purposes for which such data is processed, as disclosed to the consumer. the purpose for processing personal data. the categories of personal data that the controller shares with third parties, if any.

Personal data 74

Personal data GDPR Sales Privacy 74

Data Protection Report

OCTOBER 15, 2020

The case of Privacy International v Secretary of State for Foreign and Commonwealth Affairs, the Secretary for State for the Home Department and the UK security and intelligence agencies ( SIAs ) ( Case C-623/17 ) concerns the conditions under which SIAs may process communications metadata (i.e. What is the background to this case?

Metadata 75

Metadata Government Communications Personal data 75

Data Matters

MAY 17, 2022

Threat hunters at Kaspersky said that data collected on the attack indicated that the attack was extremely targeted, and difficult to detect because “[t]he infection chain itself [did] not leave any traces on the hard drive, as its components operate[d] in memory only, thus facilitating a fileless attack with a small footprint.”

Cybersecurity 97

Cybersecurity Government Authentication Ransomware 97

Privacy and Cybersecurity Law

APRIL 9, 2020

The ongoing COVID-19 pandemic illustrates and confirms the immense pressures both public and private entities face to widely collect, use and share individuals’ personal health data in order to facilitate a coordinated pandemic response. The broadened need for personal information. The duty for patients to disclose.

Privacy 66

Privacy Risk Communications Government 66

Privacy and Cybersecurity Law

APRIL 9, 2020

The ongoing COVID-19 pandemic illustrates and confirms the immense pressures both public and private entities face to widely collect, use and share individuals’ personal health data in order to facilitate a coordinated pandemic response. The broadened need for personal information. The duty for patients to disclose.

Privacy 51

Privacy Risk Communications Government 51