Data Protection Report

JUNE 17, 2020

The opinion suggested that parties using the SCCs need to make an assessment of whether the national security, communication and surveillance laws of the country of the data importer are “essentially equivalent” to those in the EU, i.e. they respects privacy rights and freedoms, provide effective remedies, etc.

Personal data 118

Personal data Communications Access GDPR 118

AIIM

MARCH 16, 2021

Here is an outline of the steps included in this exercise to build your Metadata plan. Determine if rules need to be established; for example, a title field may be limited to 100 characters, or date/time fields set to use international display standards. Let's get started! Five Essential Steps: Build and Execute a Metadata Plan.

Metadata 163

Metadata ECM Customer Experience Analytics 163

AIIM

MAY 12, 2022

Morgan Securities LLC had agreed to pay $125 million to help settle charges of “widespread and longstanding failures by the firm and its employees to maintain and preserve written communications” over the course of several years. This included prohibiting using unapproved electronic communication methods.

Communications 115

Communications Information governance Compliance Government 115

AIIM

JUNE 19, 2019

Everyone participated and was engaged throughout - livened up with a few good stories and examples of lessons learned that they shared. For example, we had a good discussion on " systems of record " - that is, the idea that everyone has information, and should have a robust place to put it (i.e., The Taxonomy of Chocolate.

Metadata 86

Metadata Records Management Compliance Communications 86

Security Affairs

MARCH 12, 2023

This percentage could rapidly increase in the next months with the integration of the technology in multiple services, for example through the use of ChatGPT API. In general, it’s always important to exercise due diligence when discussing sensitive information online. “Since ChatGPT launched publicly, 5.6%

Risk 96

Risk Artificial Intelligence Privacy Personal data 96

Data Protector

AUGUST 17, 2020

Removing the UK from the decision-making structures of the EU should also result in the UK Government feeling able to update other privacy legislation, such as the outdated Privacy & Electronic Communications Regulations, without having to delay for years and years until EU countries managed to reach a political consensus on the way ahead.

Privacy 156

Privacy GDPR Personal data Computer and Electronics 156

Data Matters

JANUARY 28, 2022

The advisory was promptly endorsed by the National Cyber Security Centre, a division of Government Communications Headquarters (“GCHQ”), a UK intelligence agency. Create, Maintain, and Exercise a Cyber Incident Response, Resilience, and Continuity of Operations Plan.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Data Protection Report

NOVEMBER 2, 2023

Regulated firms remain responsible for any data that they outsource and, in line with this, they must exercise appropriate oversight of any outsourcing – firms may want to consider, for example, what would happen if there was an issue, including whether back-up is adequate and if they would receive appropriate information if something did go wrong.

GDPR 77

GDPR Risk Cybersecurity Compliance 77

HL Chronicle of Data Protection

MARCH 5, 2020

The Belgian DPA defines direct marketing as any communication, solicited or unsolicited, aiming to promote an organisation, person, service, product, trademark, or idea, regardless of whether this communication is of commercial or non-commercial purpose. This will enable Data Subjects to effectively exercise their rights.

Marketing 59

Marketing GDPR Personal data Healthcare 59

Data Matters

JUNE 13, 2022

More than ever, a ‘joined up’ approach is required to assess them, and the UK’s main regulators are working together to try to formulate a coherent policy, setting an interesting example that could be a template for global approaches to digital regulation. This can result in difficulties in people exercising their rights (e.g.,

Paper 97

Paper Communications Risk Marketing 97

IT Governance

SEPTEMBER 8, 2021

That made planning for disruptions comparatively straightforward: you knew where everyone was located, you had complete visibility over your threat landscape and you could communicate with everyone directly. Protect your communication channels. But hybrid working complicates that.

Communications 126

Communications Risk Education Compliance 126

Krebs on Security

MARCH 29, 2019

Barriss pleaded guilty to making hoax bomb threats in phone calls to the headquarters of the FBI and the Federal Communications Commission in Washington, D.C. Viner and Gaskill are awaiting their own trials in connection with Finch’s death.

Communications 177

Communications IT 177

Security Affairs

SEPTEMBER 15, 2023

The Android challenge In the digital age, mobile applications have become an integral part of our lives, transforming the way we communicate, work, and entertain ourselves. They should clearly communicate to users why the permission is needed and how it will be used. Cybernews has the story.

Privacy 101

Privacy Access IT Security 101

Hunton Privacy

JUNE 8, 2020

CIPL has mapped organizations’ real data privacy practices to the CIPL Accountability Framework to provide concrete examples of how to implement effective, demonstrable and enforceable accountability measures through organizations’ privacy management and compliance programs.

Data Privacy 113

Data Privacy Privacy Compliance Risk 113

Hunton Privacy

FEBRUARY 25, 2020

With this Recommendation, the Belgian DPA aims to clarify the complex rules relating to the processing of personal data for direct marketing purposes, including by providing practical examples and guidelines to the different stakeholders involved in direct marketing activities. Purchase , Rental and Enrichment of Personal Data. Lawfulness.

Marketing 109

Marketing Personal data GDPR Communications 109

Data Matters

JUNE 1, 2021

The DRCF brings together the four UK regulators most involved in digital matters ( i.e. , the Competition and Markets Authority ( CMA ), the Information Commissioner’s Office ( ICO ), the Office of Communications ( Ofcom ) and the Financial Conduct Authority ( FCA )). DRCF’s Recommendations.

Government 68

Government Privacy Communications Marketing 68

Krebs on Security

NOVEMBER 14, 2018

According to the Justice Department , Barriss pleaded guilty to making hoax bomb threats in phone calls to the headquarters of the FBI and the Federal Communications Commission in Washington, D.C. A more detailed account of their alleged dispute is told here.

Communications 197

Communications IT 197

DLA Piper Privacy Matters

NOVEMBER 29, 2021

The CNIL thus recommends that the DPO’s mission letter clearly states that maintenance of such record should be within the DPO missions, and in particular, based on the information relating to each processing activity that will be communicated to him/her by the internal stakeholders in charge of such processing activity.

GDPR 116

GDPR Compliance Personal data Communications 116

eSecurity Planet

SEPTEMBER 23, 2022

Technical managers that can clearly communicate internally to their own executives and board members may discover additional opportunities opening up after the SEC rules become finalized. In an ideal world, a team should also have the time to perform drills or tabletop exercises to simulate an event and practice the reporting process.

Cybersecurity 107

Cybersecurity Compliance Risk Communications 107

erwin

DECEMBER 10, 2020

The best example I can point to, which underscores the importance and relevance of data, is pharmaceutical companies that have been working at unprecedented speed to develop not only effective treatments for the coronavirus but also vaccines. Over communication is key. We also made professional and consulting services more accessible.

Manufacturing 134

Manufacturing Healthcare Communications Compliance 134

Thales Cloud Protection & Licensing

JUNE 14, 2022

Paul offered some examples of definitive defensive steps that are being undertaken in the UK, including “takedown” services that target the servers of ransomware operations, and a protective DNS service that is available to the entire public sector, which can stop many precursor and targeted attacks. These are all positive developments.

Ransomware 71

Ransomware Government Risk Data breaches 71

Hunton Privacy

FEBRUARY 4, 2020

For example, customer data was kept for longer than legally permitted and the systems used to record opt-outs were not up-to-date. Order to implement appropriate measures to facilitate the exercise of data subjects rights. In addition, the Garante’s investigation revealed infringements related to TIM’s apps.

Marketing 62

Marketing Communications Data collection Data breaches 62

IBM Big Data Hub

JANUARY 22, 2024

Returning to a previous example, a company collecting phone numbers for marketing purposes would be a controller. The organization must communicate this basis to users at the point of data collection. Examples include conducting background checks on employees or tracking IP addresses on a corporate network for cybersecurity purposes.

GDPR 85

GDPR Compliance Personal data Privacy 85

IT Governance

MARCH 17, 2020

For example, millions of employees will likely to be forced to work remotely, as the UK government prepares for a lockdown scenario. For example, Piers Corbyn, the weather forecaster and brother of Labour leader Jeremy Corbyn, recently tweeted his belief that COVID-19 was designed to cull the population and fight climate change.

Phishing 114

Phishing Risk Communications Government 114

ARMA International

APRIL 8, 2020

In traditional policy wording, writers use “must” to indicate that a requirement is mandatory, for example: Part 1. Look at the following example: Disposition of records must be approved by the vice-president. We’re not obligating anybody to do anything; we’re granting an authority to an individual who can choose when to exercise it.

Records Management 105

Records Management Access IT Communications 105

Data Matters

JULY 8, 2019

Key aspects for companies to consider include: Conduct regular testing, for example, periodic attack and penetration testing, or other similar testing to assess cyber risk preparedness.

GDPR 74

GDPR Privacy Data breaches Risk 74

Hunton Privacy

MARCH 19, 2019

On March 12, 2019, the European Data Protection Board (“EDPB”) adopted an opinion on the interplay between the EU Directive on Privacy and Electronic Communications (“the ePrivacy Directive”) and the General Data Protection Regulation (“GDPR”) (the “Opinion”). Interplay between the ePrivacy Directive and the GDPR.

GDPR 45

GDPR Personal data Communications Government 45

eSecurity Planet

DECEMBER 9, 2021

For example, we might nominate: The IT security manager to handle a ransomware incident; Our external accountant to investigate financial fraud; or. For example, assign the cloud team to initially respond to incidents involving cloud assets with the cybersecurity team providing backup resources. Keep the incident response plan current.

Insurance 118

Insurance Ransomware Data breaches Cloud 118

Privacy and Cybersecurity Law

JULY 26, 2021

It is worth noting that, among other things, the Garante pointed out that the information notice was not dated and that the personal data processed were listed only on a ‘by way of example’ basis. For example, geolocation data was used to exclude some riders from work opportunities. Retention period.

Personal data 52

Personal data GDPR e-Delivery Communications 52

IT Governance

OCTOBER 23, 2019

Brexit is clearly a pressing issue for many organisations, but we urge you to exercise caution whenever you receive communications out of the blue relating to the UK’s departure from the EU. The course content is updated quarterly to provide the latest real-world examples of phishing emails.

Phishing 61

Phishing Security awareness Education Personal data 61

DLA Piper Privacy Matters

APRIL 25, 2023

For example, the CJEU recently ruled in the case of RW v Österreichische Post AG, that when exercising their right of access under the GDPR, data subjects must be provided with the individual data recipients of their personal data (CJEU, judgment of 12 January 2023 – C-154/21 – RW v Österreichische Post AG) (see our blog post ).

Access 52

Access GDPR Personal data IT 52

Data Matters

JUNE 25, 2021

STEP 1 – Mapping Exercise. This could be important, for example, for direct transfers from consumers in the EU to a service provider in the U.S. The Final Schrems II Recommendations provide a non-exhaustive list of examples of technical, organizational and contractual Supplementary Measures. STEP 2 – Verify Transfer Mechanism.

Personal data 79

Personal data Access Communications Cloud 79

IT Governance

OCTOBER 3, 2019

You must tell people when you’re collecting their personal information to give them the opportunity to exercise their data subject rights. Vital interests : for example, when processing data will protect someone’s physical integrity or life (either the data subject’s or someone else’s). Make sure people know they’re being recorded.

GDPR 110

GDPR Privacy Retail Personal data 110

DLA Piper Privacy Matters

OCTOBER 7, 2021

For example, an unlawful transfer of personal data outside of KSA can result in a criminal conviction and imprisonment. The Central Bank and the Communications and Information Technology Commission (CITC) both appear to maintain their jurisdiction to regulate data protection within their remit. Direct marketing.

Personal data 96

Personal data Compliance Computer and Electronics IoT 96

Collibra

JANUARY 14, 2020

Although much of the ink spilled around data privacy focuses on obeying regulations such as the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), it’s a mistake to think about data privacy as a compliance exercise. To take this approach is to miss an opportunity.

Digital transformation 52

Digital transformation Data Privacy Privacy IoT 52

eSecurity Planet

AUGUST 23, 2023

Downloading an attachment would, for example, infect the target device with a virus, which could enable hackers to gain access to confidential data, credentials, and networks. Imitate the target’s typical communication style and structure by analyzing email communication trends, which makes their emails look more trustworthy.

Phishing 85

Phishing Authentication Security awareness Passwords 85

Data Protection Report

JUNE 22, 2022

Unspecified clarifications will be made, although there is a reference to the recitals being clearer (for example, GDPR recital 50 provides public interest examples of where processing can be used for an incompatible purpose).

GDPR 144

GDPR Government Personal data Risk 144