AIIM

JANUARY 17, 2018

GDPR Compliance Starts with Data Discovery. Compliance with GDPR is just a short five months away. While there may be many dimensions to consider from a GDPR readiness perspective there are three steps that are particularly important in order to manage risk and ensure compliance. Step 1: Data Discovery.

GDPR 83

GDPR Compliance Data collection Privacy 83

DLA Piper Privacy Matters

NOVEMBER 16, 2021

The draft Network Data Security Management Regulation (“ Draft Regulation ”) was published for consultation on 14 November 2021, and is very wide-ranging in the compliance areas covered. This is a significant reminder to organisations to start data mapping and assessment of all China data sooner rather than later.

Compliance 118

Compliance Personal data Security Risk 118

Hunton Privacy

NOVEMBER 5, 2020

On October 27, 2020, the UK Information Commissioner’s Office (“ICO”) published a report following its investigation into data protection compliance in the direct marketing data broking sector, alongside its enforcement action against Experian. Experian has stated that it will appeal the Enforcement Notice.

Marketing 102

Marketing Compliance Personal data GDPR 102

Data Matters

APRIL 26, 2021

On April 2, 2021 the French Data Protection Authority (the “ Commission Nationale de l’Informatique et des Libertés ” or “ CNIL ”) published its intent to start auditing websites for compliance with cookie regulations. Where cookies collect personal data of internet users (e.g.

Compliance 68

Compliance Analytics Privacy GDPR 68

DLA Piper Privacy Matters

AUGUST 17, 2022

For the past couple of years, operators of mobile apps in China have had to comply with over thirty additional, specific privacy compliance obligations (i.e. The regulators have now refreshed and combined a selection of the requirements into one standard, yet more compliance steps must be followed. Notice and Consent Requirements.

Privacy 105

Privacy Risk Personal data Data collection 105

Thales Cloud Protection & Licensing

JULY 3, 2023

madhav Tue, 07/04/2023 - 05:10 As the data trust gap between customers and businesses continue to grow, and as third-party cookies become redundant, there is an urgency to adopt a modernized approach to customer data collection. Progressive profiling introduces a fresher and far more proactive take on data collection.

IT 62

IT Data collection B2C B2B 62

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Yet many organizations still struggle to meet compliance requirements, and EU data protection authorities do not hesitate to hand out penalties. Irish regulators hit Meta with a EUR 1.2

GDPR 79

GDPR Compliance Personal data Privacy 79

DLA Piper Privacy Matters

MARCH 23, 2021

Mobile apps have during this period been one of the regulator’s enforcement priorities, and there has been a stream of enforcement action (notably apps taken down from app stores) for non-compliance with these guidelines.

Data collection 119

Data collection Compliance Privacy 119

Hunton Privacy

OCTOBER 27, 2017

On October 17, 2017, the French Data Protection Authority (“CNIL”), after a consultation with multiple industry participants that was launched on March 23, 2016, published its compliance pack on connected vehicles (the “Pack”) in line with its report of October 3, 2016. 2. “IN -> OUT” scenario.

Compliance 45

Compliance Data collection GDPR Insurance 45

Hunton Privacy

OCTOBER 5, 2016

On October 3, 2016, at the Paris Motor Show, the French Data Protection Authority (“CNIL”) reported on the progress of a new compliance pack on connected vehicles. The compliance pack on connected vehicles will contain guidelines regarding the responsible use of personal data for the next generation of vehicles.

Compliance 40

Compliance Personal data Data collection Insurance 40

Information Management Resources

JANUARY 22, 2018

Acting Consumer Financial Protection Bureau Director Mick Mulvaney has cited hundreds of confirmed and suspected data breaches as justification for his halting the bureau's data collection activities last month.

Data collection 29

Data collection Data breaches Compliance Security 29

Jamf

OCTOBER 17, 2023

Knowing the risks that are unique to your organization and assessing them accurately are critical to the overall security posture as well.

Security 52

Security Data collection Paper Risk 52

Hunton Privacy

JUNE 25, 2020

Establishments and companies in the UK will therefore be responsible for the additional collection and potential sharing of customers’ personal data. Any entity engaging in this kind of data collection will need to comply with the requirements of data protection law.

Data collection 98

Data collection Personal data Compliance Retail 98

Data Matters

SEPTEMBER 6, 2022

For businesses operating in California or whose websites, products or services reach California residents, these changes mean new compliance obligations, some of which could require significant investments of time and resources. Short-Term CCPA Compliance Tune Up.

Privacy 197

Privacy B2B Sales Compliance 197

Hunton Privacy

MARCH 18, 2022

It helps businesses meet evolving needs and user expectations, with more comprehensive and granular controls for data collection and usage.”. It remains to be seen whether this change will ease EU DPAs’ concerns about Google Analytics’ compliance with the GDPR.

Analytics 118

Analytics Privacy GDPR Personal data 118

DLA Piper Privacy Matters

APRIL 20, 2021

This introduces a data lifecycle security framework, and represents the key guideline for handling personal and other financial information by financial institutions (i.e. Key compliance obligations include: Classification of financial data: the data lifecycle framework introduces five levels of financial data, namely: .

Compliance 111

Compliance Security Financial Services Data collection 111

Thales Cloud Protection & Licensing

MAY 31, 2022

Data Protection Officers expressed the difficulties they have to accomplish their mission: to advise on and monitor compliance (as defined in GDPR Article 39). With the acceleration of digital transformation and growing cyber threats, one thing is clear: privacy compliance has never been so important, yet so complex to reach.

Cloud 71

Cloud Privacy Data Privacy Compliance 71

DLA Piper Privacy Matters

NOVEMBER 17, 2022

Are we seeing a return of proactive enforcement of Hong Kong’s data protection laws, after a lull in recent years? Moving on – compliance priorities. The two investigation reports addressed both public facing aspects and internal operations of the businesses’ data protection compliance. Notice and Consent.

Personal data 52

Personal data Data Privacy Compliance Privacy 52

eDiscovery Daily

APRIL 10, 2019

For example, Camila Tobón, a Colorado-based data privacy lawyer at Shook, Hardy & Bacon, said many countries in the Latin America follow a consent-based model, which doesn’t allow for the legitimate interest data collection case presented under GDPR. I assume that works everywhere, does it?’

Data Privacy 50

Data Privacy Privacy Compliance GDPR 50

IBM Big Data Hub

MAY 28, 2024

While data security focuses on protecting digital information from threat actors and unauthorized access, data protection does all that and more. Even more, a good data protection strategy can improve business operations and minimize downtime in a cyberattack, saving critical time and money.

Data breaches 54

Data breaches GDPR Compliance Encryption 54

DLA Piper Privacy Matters

SEPTEMBER 6, 2023

While there are similarities with EU/UK GDPR – and sufficient harmonisation with data protection laws across APAC to continue a regional data compliance in Asia – the practicalities of implementation and compliance should not be underestimated.

Personal data 111

Personal data GDPR Data breaches Compliance 111

DLA Piper Privacy Matters

OCTOBER 3, 2022

Given data classification and grading are mandatory requirements under the Data Security Law and Personal Information Protection Law, organisations should prioritise understanding their data collected and data processing activities within the coming months. Data classification. Data grading.

Data collection 98

Data collection Personal data Access Compliance 98

Hunton Privacy

JANUARY 27, 2023

Claiming reliance on the “legitimate interests” legal basis for the use of non-essential cookies ( e.g. , targeted advertising cookies) and not collecting valid consent for the use of such cookies is prohibited.

GDPR 111

GDPR Compliance Data collection Personal data 111

Data Protection Report

MARCH 25, 2024

Dealing with cert pinning and root detection The privacy area has been white-hot lately, including litigation and investigations involving VPPA; Wiretap/Pen Register/Trap and Trace; and Opt Out Compliance. Now, more than ever, it is important for companies to obtain line-of-sight on data collection/sharing that is otherwise hidden from view.

Privacy 45

Privacy Compliance Communications Data collection 45

Data Protection Report

FEBRUARY 25, 2020

The principles of necessity and minimum collection should be followed (for example, the data collected should be limited to those who are confirmed or suspected of carrying Covid-19 and those who have had close contact with confirmed or suspected virus carriers). We expect the Government will continue this approach.

Personal data 133

Personal data Big data Data Privacy Data breaches 133

Data Protection Report

JULY 12, 2022

The NYAG faulted Wegmans on five security areas: access controls, password management, asset management, logging and monitoring, and data collection and retention. Data Collection and Retention : The affected information included checksums derived from Customers’ driver’s license numbers.

Passwords 105

Passwords Data collection Personal data Cloud 105

eSecurity Planet

DECEMBER 1, 2021

Businesses that have spent the past three-plus years adapting to the European Union’s far-reaching data privacy law now have to decide how they will respond to a similar law in China that has been criticized as being more vague in its wording and harsher in its penalties. Also read: Top GRC Tools & Software for 2021. Will the U.S. “The

Data Privacy 130

Data Privacy Privacy GDPR Data collection 130

CILIP

JULY 7, 2020

CILIP has provided this advisory note in response to the call for libraries and information services, particularly public libraries, to undertake data-collecting activity as part of the Government?s The data collecting activity must not present a deterrent ? for librarians and information professionals. Contact Tracing?

Libraries 52

Libraries Data collection Risk Privacy 52

OpenText Information Management

OCTOBER 23, 2023

Are you seeing an uptick in the number of audio and video (“A/V”) files in your document collection sets? In the past, these files were just a small, mostly inconsequential part of the data collection, such as sales and marketing materials, holiday videos, and user internet downloads. You are not alone!

Data collection 67

Data collection Sales Marketing Analytics 67

DLA Piper Privacy Matters

APRIL 2, 2021

In 2021, more than 50% of the CNIL’s dawn-raids will focus on: (i) websites cybersecurity, (ii) health data protection and (ii) cookies. Website security incidents are among the most common non-compliances identified by the CNIL during its dawn-raids. Health data security. W ebsites cybersecurity.

Data breaches 103

Data breaches Cybersecurity Compliance Data collection 103

DLA Piper Privacy Matters

MARCH 24, 2021

This is on top of general consent to processing of personal data obtained from the data subject. Other requirements: these include (this is not a comprehensive list): rules around content of advertising on e-commerce or livestreaming platforms, sites and apps; compliance with competition laws; and.

Personal data 111

Personal data Data Privacy Marketing Compliance 111

IBM Big Data Hub

JANUARY 19, 2023

Use a data protection strategy to maintain your brand image and customer trust How a company collects, stores and protects consumer data goes beyond cutting data storage costs—it is a central driving force of its reputation and brand image.

Data Privacy 60

Data Privacy Customer Experience Privacy Compliance 60

IT Governance

NOVEMBER 17, 2020

Deliberate or accidental action (or inaction) by the school or one of the processors : an example would be sending old PCs, laptops or filing cabinets to be destroyed without first removing the data held on them. Sending personal data to the wrong person : this includes any message sent by email, post or fax. Identity theft or fraud.

Personal data 105

Personal data Data breaches Data collection GDPR 105

Hunton Privacy

NOVEMBER 1, 2021

If made final, the Draft Measures would apply to cross-border transfers of personal information and “important data” collected and generated in China under certain circumstances. Data Transfer Agreement. other circumstances that might affect the security of transferred data. other conditions to be specified by the CAC.

Security 100

Security Data collection Compliance Risk 100

IBM Big Data Hub

APRIL 24, 2024

Examples of data privacy laws Compliance with relevant regulations is the foundation of many data privacy efforts. While data protection laws vary, they generally define the responsibilities of organizations that collect personal data and the rights of the data subjects who own that data.

Data Privacy 82

Data Privacy Privacy GDPR Personal data 82

DLA Piper Privacy Matters

AUGUST 23, 2021

However, as with all China laws, the PIPL is drafted as high level principles, and we anticipate additional guidelines will be published in the coming months outlining the practical compliance steps organisations will need to take when updating their China data protection compliance programmes.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Hunton Privacy

NOVEMBER 1, 2022

The proposed regulations, if adopted, would add certain significant new compliance obligations on businesses. Right to Request to Exercise Personal Data Rights (Rule 4.02 – Rule 4.07; 6.11). of the proposed regulation requires “controllers” to establish “reasonable methods” to authenticate consumers who submit data rights requests.

Privacy 78

Privacy Personal data Data collection Compliance 78