Thales Cloud Protection & Licensing

JANUARY 10, 2024

Navigating the EU-US Data Protection Framework sparsh Thu, 01/11/2024 - 05:26 On 10 July 2023, the European Commission adopted a new adequacy decision regarding the Data Privacy Framework (“DPF”). This follows the invalidation of the EU-US Privacy Shield, by the Court of Justice of the European Union on 16 July 2020.

Data Privacy 83

Data Privacy Personal data Privacy Cloud 83

Data Matters

JUNE 24, 2021

3 The SEC and its staff followed the September 2017 statement with various cybersecurity-related initiatives and guidance, including January 27, 2020, cybersecurity guidance and observations published by the SEC’s Division of Examinations (formerly Office of Compliance Inspections and Examinations). 27, 2020). 27, 2020).

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

DLA Piper Privacy Matters

JUNE 23, 2021

On 21 June 2021, the European Data Protection Board (“ EDPB ”) published the final Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data (“ Recommendations ”). Key takeaways.

GDPR 99

GDPR Personal data Compliance Risk 99

DLA Piper Privacy Matters

SEPTEMBER 7, 2023

The scrutiny by national courts over the lawfulness of certain processing, and commentary on the factors that will aggravate or mitigate an infringement, should be considered by these organisations and inform their approach to data protection compliance. The Comparative View – how are non-material damages assessed elsewhere?

GDPR 111

GDPR Data breaches Risk Personal data 111

Hunton Privacy

NOVEMBER 22, 2019

appropriate technical and organizational measures for ensuring that, by default, only personal data, which is necessary for each specific purpose of the data processing, is processed (“Data protection by default”). on how to handle personal data.

Personal data 50

Personal data GDPR Compliance Risk 50

Data Matters

JULY 24, 2020

The CJEU invalidated the EU-US Privacy Shield but upheld the use of Standard Contractual Clauses (“SCCs”) to transfer personal data to the U.S.: to ensure compliance with a level of protection “essentially equivalent” to that guaranteed within the EU by the GDPR). .: domestic law, in particular the ability for U.S.

Personal data 97

Personal data GDPR Privacy Access 97

Hunton Privacy

AUGUST 12, 2021

On August 11, 2021, the UK Information Commissioner’s Office (“ICO”) launched a consultation on its draft international data transfer agreement (“IDTA”) and guidance for organizations on international transfers (the “Guidance”). Once finalized, the IDTA will replace the existing EU Standard Contractual Clauses (“SCCs”) in the UK.

GDPR 78

GDPR Personal data Risk Access 78

Hunton Privacy

JULY 10, 2019

authorities access to his personal data in violation with EU data protection law. Instead, it authorized the bulk collection of personal data transferred from the EU to the U.S. and did not set forth any objective criteria for determining limits to the access and use of this personal data by public authorities.

Personal data 63

Personal data Privacy Compliance Access 63

Hunton Privacy

DECEMBER 17, 2020

On December 15, 2020, the Irish Data Protection Commission (“DPC”) announced its fine of €450,000 against Twitter International Company (“Twitter”), following its investigation into a breach resulting from a bug in Twitter’s design. The bug was discovered on December 26, 2018. Investigation and GDPR Dispute Resolution Procedure.

GDPR 72

GDPR Data breaches Personal data Compliance 72

DLA Piper Privacy Matters

SEPTEMBER 2, 2021

The Children’s Code is not new law, but a statutory Code of Practice under the Data Protection Act 2018. The Code was laid before Parliament on 11 June 2020, under s. Therefore, whilst its recommendations are not themselves legally binding, compliance with the Code is strongly recommended. 125(1)(b) of the DPA.

Privacy 103

Privacy Education Personal data Compliance 103

Data Protection Report

OCTOBER 9, 2020

On September 11, 2020, the German Datenschutzkonferenz (DSK), the joint body of the German data protection authorities, published its position on the use of thermal cameras and electronic temperature checks in the context of the COVID-19 pandemic. 25 GDPR and security of data processing in to Art.

GDPR 110

GDPR Manufacturing Personal data Privacy 110

DLA Piper Privacy Matters

NOVEMBER 24, 2020

How to properly calculate administrative fines for non-compliance with the EU General Data Protection Regulation (‘ GDPR ’) is one of the most important questions when applying the GDPR on practical level, e.g. : What is actually meant by the reference to “undertaking” in Article 83 (4) to (6) GDPR? million Euro as was too high.

GDPR 75

GDPR Authentication Compliance Personal data 75

DLA Piper Privacy Matters

JULY 1, 2019

If this happens, many organisations will be left without any practical solution to legitimise the international transfer of personal data outside the EEA and exposure to the threat of GDPR revenue based fines, regulatory sanctions including injunctions and third party claims for compensation.

Privacy 94

Privacy Personal data GDPR Risk 94

DLA Piper Privacy Matters

NOVEMBER 12, 2020

On 11 November, the European Data Protection Board (“ EDPB ”) published recommendations on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data (“ Recommendations ”) as well as recommendations on the European Essential Guarantees for surveillance measures (“ EEGs ”).

Paper 98

Paper Personal data Privacy Access 98

DLA Piper Privacy Matters

MARCH 4, 2021

In its second full year overseeing and regulating the GDPR in Ireland, the Data Protection Commission ( DPC ) has published its 2020 Annual Report , highlighting key observations, emerging guidance, and large scale inquiries and decisions of 2020. 90% of the recorded breach cases were concluded in 2020. Enforcement.

GDPR 105

GDPR Compliance Data breaches Marketing 105

DLA Piper Privacy Matters

MAY 16, 2018

Despite a lack of agreement between the Senate and the National Assembly, France has finally passed its new data protection law , 11 days prior to the entry into application of the EU General Data Protection Regulation (GDPR) on May 25. By Denise Lebeau-Marianna and Caroline Chancé. Prior formalities. Children’s consent.

GDPR 40

GDPR Personal data Compliance Data Privacy 40

Data Protection Report

MAY 4, 2020

A few weeks ago, we provided you with a summary of the rights and obligations of employers with regard to the personal data of their employees during lockdown. On 11 May, many employees will return to their workplaces. Below you will find answers to the main questions you may have ahead as the end of the lockdown approaches.

Government 64

Government GDPR Access Personal data 64

DLA Piper Privacy Matters

APRIL 1, 2020

A few months later, he uploaded the data onto a file-sharing website and later sent it to newspapers. this applies whether the data controller is the employer or the employee (in this case it was the employee). this applies whether the data controller is the employer or the employee (in this case it was the employee).

Data breaches 59

Data breaches GDPR Personal data Information governance 59

Data Protection Report

FEBRUARY 27, 2019

The California Consumer Privacy Act (CCPA), passed in June 2018 in response to the Cambridge Analytica scandal, is slated to become the most comprehensive data privacy law in the US. Not to be outdone by California, eleven (11) states—including Maryland, New Jersey and Washington—have recently introduced similar legislation.

Data Privacy 40

Data Privacy GDPR Privacy Risk 40

IT Governance

DECEMBER 27, 2019

Among other news: B&Q breached the personal data of 70,000 people who had been caught stealing products from its stores. million) fine with the US Federal Trade Commission after it was accused of illegally collecting minors’ personal data. Mumsnet disclosed a data breach affecting 4,000 people. million (£4.2

Data breaches 69

Data breaches GDPR Passwords Personal data 69

Data Protection Report

FEBRUARY 6, 2024

The Court of Justice of the European Union ( CJEU )’s Schrems II decision [1] clarified strict rules for personal data transfers outside of the European Union. Article 44 GDPR places restrictions on transfers of personal data outside the European Economic Area ( EEA ). When is a TIA required?

GDPR 75

GDPR Personal data Compliance IT 75

Data Matters

APRIL 20, 2020

Case: WM Morrison Supermarkets plc v Various Claimants [2020] UKSC 12. 1 [2016] UKSC 11. 2 [2002] UKHL 48. 4 E.g., Morris v C W Martin & Sons Ltd [1966] 1 QB 716, 737; Lister v Hesley Hall Ltd [2001] UKHL 22. 5 E.g., Joel v Morison (1834) 6 C & P 501.

Data breaches 68

Data breaches GDPR Privacy IT 68

HL Chronicle of Data Protection

MAY 13, 2019

Additionally in 2017, Connecticut passed legislation requiring that health insurers, third-party administrators, and related entities implement and maintain a comprehensive information security program with specific minimum requirements to protect insureds’ personal data. More states are sure to follow.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

DLA Piper Privacy Matters

JUNE 4, 2020

Although the Updated Law will come into effect from 1 July 2020, affected businesses will have a transition period of three months, until 1 October 2020. What are the key changes? It remains to be seen how this will apply in practice. It remains to be seen how this will apply in practice. able to easily change such preferences.

Personal data 52

Personal data GDPR Compliance Privacy 52

Hunton Privacy

JUNE 29, 2020

Zeyn Bhyat of ENSafrica reports that on June 22, 2020, it was announced that South Africa’s comprehensive privacy law known as the Protection of Personal Information Act, 2013 (the “POPIA”) will become effective on July 1, 2020. Accountability: This condition requires that all processing of data occurs in compliance with POPIA.

Compliance 85

Compliance Privacy GDPR Personal data 85

IT Governance

JANUARY 30, 2024

Data breached: 2 PB. Mobile network database breach exposes 750 million Indians’ personal data The Indian security company CloudSEK claims to have found the personal data of 750 million Indians for sale on an “underground forum”. Data breached: 750 million victims’ personal data.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

IT Governance

MARCH 13, 2020

Last updated March 2020. Under the EU GDPR (General Data Protection Regulation) , you need to identify a lawful basis before processing personal data. Do you always need individuals’ consent to process their data? First published June 2018. But what is a lawful basis for processing?

GDPR 92

GDPR Personal data Compliance Marketing 92

Data Protection Report

OCTOBER 15, 2020

On 6 October 2020, the Court of Justice of the European Union ( CJEU ) published two decisions that further define the permitted scope of governmental access to personal data. traffic and location data, not message content) collected by telecommunications providers.

Metadata 75

Metadata Government Communications Personal data 75