11 2018 Communications Exercises Security 
Data Matters
JANUARY 28, 2022
The advisory was promptly endorsed by the National Cyber Security Centre, a division of Government Communications Headquarters (“GCHQ”), a UK intelligence agency. Create, Maintain, and Exercise a Cyber Incident Response, Resilience, and Continuity of Operations Plan.
Data Protector
AUGUST 17, 2020
Removing the UK from the decision-making structures of the EU should also result in the UK Government feeling able to update other privacy legislation, such as the outdated Privacy & Electronic Communications Regulations, without having to delay for years and years until EU countries managed to reach a political consensus on the way ahead.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
IT Governance
MARCH 13, 2020
First published June 2018. If it’s necessary to process sensitive data as part of a contract, you’ll also need to identify a separate condition for processing that data, as set out in Article 9(2) of the GDPR, and sections 10 and 11, and Schedule 1 of the DPA (Data Protection Act) 2018. Last updated March 2020.
Privacy and Cybersecurity Law
JUNE 23, 2021
The newly adopted Regulation on notification of security incidents. On June 11, 2021, the Regulation on notifications of incidents affecting networks, information systems and IT services (“ Regulation ”) – adopted by means of the Decree of the President of the Council of Ministers (DPCM) of 14 April 2021, no.
Data Matters
MAY 17, 2022
Two months later, on July 19, 2021, the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), and FBI assessed that People’s Republic of China state-sponsored malicious cyber activity is a major threat to U.S. and Allied cyberspace assets. supply chain attacks).
DLA Piper Privacy Matters
JANUARY 21, 2019
On 12 December 2018, the French Government issued an ordinance [1] finalizing, at the legislative level [2] , the alignment of the French Data Protection Law (“FDPL”) with the General Data Protection Regulation [3] (“GDPR”) and the Directive 2016/680 [4]. 2018-493 and the Ordinance, encompasses 128 new articles.
IT Governance
JUNE 15, 2018
For tasks carried out in the public interest or exercise of authority vested in the data controller. If your organisation needs to process personal data “for the performance of a task carried out in the public interest” or “in the exercise of official authority” (Recital 50), you can do so under this lawful basis. Legal obligations.
Expert insights. Personalized for you.
157 
Let's personalize your content