Remove 11
article thumbnail

South Africa’s Protection of Personal Information Act, 2013, Goes into Effect July 1

Hunton Privacy

Zeyn Bhyat of ENSafrica reports that on June 22, 2020, it was announced that South Africa’s comprehensive privacy law known as the Protection of Personal Information Act, 2013 (the “POPIA”) will become effective on July 1, 2020. Accountability: This condition requires that all processing of data occurs in compliance with POPIA.

article thumbnail

SCHREMS 2.0 – the demise of Standard Contractual Clauses and Privacy Shield?

DLA Piper Privacy Matters

If this happens, many organisations will be left without any practical solution to legitimise the international transfer of personal data outside the EEA and exposure to the threat of GDPR revenue based fines, regulatory sanctions including injunctions and third party claims for compensation.

Privacy 94
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

UK: Supreme Court judgment in Morrisons – employer not vicariously liable for data breach

DLA Piper Privacy Matters

The Data Protection Act 1998 does not exclude the imposition of vicarious liability for statutory or common law wrongs. In November 2013, an aggrieved Morrisons employee, Andrew Skelton, downloaded payroll data he was entrusted with at work onto a personal USB stick. Background.

article thumbnail

Council of the European Union Releases Draft Compromise Text on the Proposed EU Data Protection Regulation

Hunton Privacy

On May 31, 2013, the Council of the European Union’s Justice and Home Affairs released a draft compromise text in response to the European Commission’s proposed General Data Protection Regulation (the “Proposed Regulation”). Currently, the Presidency is held by Ireland, with Lithuania taking over on July 1 for the second half of 2013.

article thumbnail

UK Supreme Court Rules Morrisons Not Vicariously Liable for Malicious Data Breach by Employee

Data Matters

Andrew Skelton was an auditor in Morrisons’ audit team who bore a grudge against his employer following disciplinary proceedings for minor misconduct in July 2013. In November 2013, during an external audit, Skelton had to provide payroll data to KMPG, which he duly did. 1 [2016] UKSC 11. 2 [2002] UKHL 48.

article thumbnail

Weekly podcast: 2018 end-of-year roundup

IT Governance

Also in January, the ICO (Information Commissioner’s Office) fined Carphone Warehouse £400,000 – one of the largest fines it issued under the DPA (Data Protection Act) 1998 – for multiple security inadequacies that led to a 2015 data breach in which three million customers’ personal data was compromised.

article thumbnail

The debate on the Data Protection Bill in the House of Lords

Data Protector

We want businesses to ensure that their customers and future customers have consented to having their personal data processed, but we also need to ensure that the enormous potential for new data rights and freedoms does not open us up to new threats. Where she finds criminality, she can prosecute.

GDPR 120