Remove Compliance Remove Exercises Remove Government Remove Insurance
article thumbnail

GDPR Compliance Obligations: The relationship between Data Controllers and Third-Party Processors

AIIM

Three Critical Steps for GDPR Compliance. GDPR Compliance Starts with Data Discovery. There are a number of areas where GDPR strengthens compliance obligations and imposes additional legal liabilities. Article 28 lays out the obligation requirements that govern the relationship between data controllers and processors.

GDPR 83
article thumbnail

Over-Retention of Personal Data

Data Protection Report

The matter involved one of France’s largest insurers, SGAM AG2R LA MONDIALE, which was subject to an inspection by the French data protection authority (the CNIL), in 2019. The CNIL’s inspection included the insurer’s compliance with Section 5-1(e) of GDPR , which reads: Personal data shall be. (e) Perhaps the CNIL’s €1.75

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Telehealth Hazard? HHS Loosens HIPAA Standards for Telemedicine

Adam Levin

While the transition to remote appointments may help flatten the curve of Covid-19 cases and provide much-needed relief to medical professionals, it does create a new set of cybersecurity concerns, especially regarding compliance with the Health Insurance Portability and Accountability Act (HIPAA ).

article thumbnail

U.S. Banking Agencies Signal Closer Review of Cryptocurrency Activities

Data Matters

Concurrently, the OCC , the Board of Governors of the Federal Reserve System, and the Federal Deposit Insurance Corporation (the Agencies) released a joint statement alerting the industry of their intent to provide additional guidance in the coming months concerning certain activities related to cryptoassets conducted by banking organizations.

article thumbnail

UAE: Federal level data protection law enacted

DLA Piper Privacy Matters

International businesses with global privacy compliance programs should seek to expand those to cover the UAE and achieve some synergies. While the PDPL will not be effective immediately, we recommend that businesses take compliance steps as soon as possible. It is not yet clear what the penalties for non-compliance with PDPL will be.

article thumbnail

CNIL Fines Two Companies of the Carrefour Group €3.05 Million for GDPR and Cookie Violations

Hunton Privacy

million on Carrefour France and a fine of €800,000 on Carrefour Banque for various violations of the EU General Data Protection Regulation (“GDPR”) and Article 82 of the French Data Protection Act governing the use of cookies. The group has diversified its activities into the banking and insurance, travel agency and e-commerce sectors.

GDPR 91
article thumbnail

Saudi Arabia’s New Data Protection Law – What you need to know

DLA Piper Privacy Matters

Ongoing compliance with existing laws and NDMO Personal Data Protection Interim Regulations. The PDPL does not appear to repeal the existing NDMO Personal Data Protection Interim Regulations, and so Data Controllers would appear to still need to comply with those regulations, while developing their compliance with the new PDPL.