Data Protection Report

MARCH 7, 2024

Recall that the focus of the Executive Order was not on single transactions, but rather bulk transactions of Americans’ personal data. What about due diligence, compliance programs, and recordkeeping? The compliance program suitable for a particular U.S. person would be based on that U.S.

Access 59

Access Military Compliance Personal data 59

HL Chronicle of Data Protection

MARCH 5, 2020

It refers to all data subjects that may be targeted by direct marketing such as clients, members, prospects, subscribers, or even voters. The Recommendation provides a step-by-step approach on how achieve compliance: 1. Attracting new clients, subscribers, or members. Necessity for Data Minimisation. How to Comply?

Marketing 59

Marketing GDPR Personal data Healthcare 59

Privacy and Cybersecurity Law

JANUARY 27, 2021

In 2018, the Brazilian General Data Protection Law (LGPD), inspired by the General European Data Protection Regulation, was sanctioned by President Michel Temer. In general, any practice that process personal data will be subject to the law.

Personal data 52

Personal data Data breaches Compliance Marketing 52

Privacy and Cybersecurity Law

AUGUST 5, 2020

When the Court of Justice of the European Union (CJEU) invalidated the EU-US Privacy Shield as a vehicle to transfer personal data from the EU to the US, last July 16, 2020, the obvious question was: “What is the transition period?” The answer is now coming from EU Data Protection Authorities in Europe: there is none.

Personal data 52

Personal data Privacy GDPR Compliance 52

Privacy and Cybersecurity Law

FEBRUARY 6, 2020

If you or your clients offer goods or services in the UK, and process personal data of UK residents, the GDPR will continue to apply to the treatment and safeguarding of that personal data. The UK’s Data Protection Act of 2018 incorporates the GDPR into UK law. Subscribe and stay updated. What to expect.

Privacy 59

Privacy GDPR Personal data Compliance 59

DLA Piper Privacy Matters

OCTOBER 22, 2020

On 28 September 2020, the Romanian National Supervisory Authority for the Processing of Personal Data (ANSPDCP) published on its website the annual activity report for 2019. Qualification of the parties involved in personal data processing activities. Irina Macovei, Roxana Rosu and Andrei Stoica. Points of view.

Personal data 59

Personal data GDPR Communications Compliance 59

DLA Piper Privacy Matters

JANUARY 28, 2022

In Asia Pacific, China ’s Personal Information Protection Law (PIPL) came into force. This consolidates obligations on processing of personal information at a national law level, but still leaves to be determined in the future through subsequent regulations and guidelines. Our Tools and Resources. Access the report here.

GDPR 98

GDPR Privacy Data breaches Personal data 98

Privacy and Cybersecurity Law

JULY 22, 2020

According to the EC, the GDPR’s data protection rules have proven that they are fit for the digital age, as they help to foster trust-worthy innovation, empower individuals to have more control over their personal data and guarantee the free flow of personal data within the EU. Subscribe and stay updated.

GDPR 105

GDPR Privacy Personal data Compliance 105

The Texas Record

FEBRUARY 16, 2021

While we did not write these articles, we are happy to share them with our subscribers. The use of blockchain in records management is presented as a tool for greater compliance and workflow. The following articles appraise the use of blockchain and the potential impact the technology has on both private and government level entities.

Blockchain 52

Blockchain Records Management Government Personal data 52

IT Governance

MAY 9, 2019

According to the ICO , HRMC’s failing was that it didn’t obtain explicit consent to record individuals’ voices (a form of biometric data, which the GDPR considers a special category of personal data ). However, organisations that process personal data should be aware that consent isn’t always the best lawful basis to rely on.

GDPR 53

GDPR Personal data Education Passwords 53

IT Governance

MARCH 11, 2024

Glosbe dictionary exposes almost 7 million records The multilingual online dictionary Glosbe left a MongoDB instance unsecured last year, exposing nearly 7 million users’ information, including personal data, encrypted passwords and social media identifiers. Glosbe did not reply, but the open instance was soon closed.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Privacy and Cybersecurity Law

FEBRUARY 14, 2020

Detrimental Use of Data: You should not use children’s personal data in ways that have been shown to be detrimental to their wellbeing , or that go against industry codes of practice, other regulatory provisions, or Government advice. Subscribe and stay updated. What happens now? Share on Facebook. Share on Twitter.

Access 59

Access Personal data IoT Privacy 59

Privacy and Cybersecurity Law

AUGUST 5, 2020

Secondly, in most cases where an organisation utilises AI, it will be mandatory to conduct a DPIA – and the ICO suggests that your DPIA process should both comply with data privacy laws generally but also conform to specific standards set out in the Guidance. Statistical accuracy needs to be balanced with the principle of data minimisation.

Artificial Intelligence 59

Artificial Intelligence GDPR Personal data Compliance 59

DLA Piper Privacy Matters

FEBRUARY 4, 2021

Family service, however, also licenses and sells personal data of these mothers (and their children – according to the BDPA’s interpretation) to its business partners for direct marketing purposes. Lack of transparency on selling/licensing personal data. Additionally, we provide some key takeaways from this decision.

Personal data 64

Personal data GDPR Marketing IT 64

Hunton Privacy

JANUARY 18, 2018

More specifically, the DPA will have to cooperate with all other Belgian public and private actors involved in the protection of the rights and freedoms of individuals, particularly regarding the free flow of personal data and customer protection. The DPA will also have to cooperate with other national data protection authorities.

Privacy 55

Privacy Computer and Electronics Personal data GDPR 55

IT Governance

JUNE 20, 2019

The UK’s data protection watchdog has admitted that its website’s cookie policy breaches the requirements of the GDPR (General Data Protection Regulation). The ICO (Information Commissioner’s Office) made the statement following complaints that it was storing visitors’ personal data without their consent.

GDPR 64

GDPR IT Personal data Compliance 64

Privacy and Cybersecurity Law

JANUARY 18, 2021

These first fines are likely to form the ICO’s “baseline” for cybersecurity and other personal data breach enforcement over the years to come. Subscribe and stay updated. The decisions are lengthy but, as the first GDPR fines for cybersecurity breaches, they are seminal. The willingness of the ICO to make findings of negligence.

GDPR 52

GDPR Cybersecurity Data breaches Risk 52

IT Governance

JANUARY 30, 2024

Data breached: 2 PB. Mobile network database breach exposes 750 million Indians’ personal data The Indian security company CloudSEK claims to have found the personal data of 750 million Indians for sale on an “underground forum”. Data breached: 750 million victims’ personal data.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

Hunton Privacy

OCTOBER 14, 2021

9) deidentified data (that meets the requirements for deidentification under the law). Penalties for Non-Compliance : The law will be enforced by the California Attorney General or certain district attorneys or city prosecutors. Penalties for negligent violations of the law can result in civil penalties up to $1,000 (plus court costs).

Privacy 98

Privacy Insurance Security Data breaches 98

IT Governance

MAY 24, 2024

Those people will be affected if anything goes wrong due to mismanagement of their data. Those people will be affected if anything goes wrong due to mismanagement of their data. Subscribe to our free weekly newsletter: the Security Spotlight. Is that a common issue? Alternatively, explore our full index of interviews here.

Risk 118

Risk Security Ransomware Phishing 118

Data Protection Report

DECEMBER 6, 2017

On October 28, 2017, the Turkish Data Protection Authority (the “ Authority ”) published an important regulation supplementing the Law on Protection of Personal Data (the “ Data Protection Law ”), namely the Regulation on the Deletion, Destruction and Anonymization of Personal Data (the “ Regulation ”).

Personal data 40

Personal data Paper Encryption Cloud 40

Hunton Privacy

MAY 12, 2009

In addition to other measures, it will include a definition of “personal data breach” and will introduce a data breach notification requirement. For the first time in EU law the amendments introduce a definition of “personal data breach” and a data breach notification requirement.

Data breaches 40

Data breaches Personal data Privacy Communications 40

Data Protection Report

AUGUST 13, 2019

Finally, the CNIL recalls, like it did in its 2013 guidance, that the information (stored and/or accessed) does not have to be personal data within the meaning of the GDPR for the consent rule to apply. iii) the personal data collected must not overlap with other processing operations (e.g.

Computer and Electronics 40

Computer and Electronics GDPR Personal data Data collection 40

Hunton Privacy

AUGUST 26, 2011

These new provisions apply only to companies that process personal data as part of electronic communication services they provide through a public network ( e.g. , ISPs or telecom operators). Non-compliance with these provisions is punishable by up to five years of imprisonment and a €300,000 fine.

Communications 40

Communications Security Personal data Privacy 40

Hunton Privacy

JUNE 14, 2013

Under Section 36 of the DPA, individuals who process personal data for their personal, family or household affairs are exempt from complying with the obligations of the DPA with respect to such processing. Whether an individual’s use of online media is considered personal or non-personal depends on the particular facts.

Personal data 40

Personal data Compliance Sales Communications 40

Data Protection Report

FEBRUARY 5, 2018

Although the Specification is not a mandatory regulation, it nonetheless has a key implementing role in relation to China’s Cyber Security Law (“Cyber Security Law”) in respect of protecting personal information in China. Such requirements give rise to significant compliance issues for business operations in China.

Information Security 40

Information Security Security Compliance Personal data 40

IT Governance

FEBRUARY 21, 2024

In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Data breached: 2,632,275 people’s data. 204 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Data Matters

JUNE 1, 2022

process and use personal data. For example, end users must be able to easily (i) change any preinstalled and default settings, (ii) switch between and subscribe to different services, and (iii) access and port their data. Among others, the obligations and prohibitions limit gatekeepers’ ability to.

Marketing 88

Marketing Computer and Electronics Communications GDPR 88

DLA Piper Privacy Matters

JULY 11, 2018

The French Council of State affirmed the EUR 25,000 fine imposed by the CNIL on Editions Croque Futur (challenges.fr) for non-compliance with French data protection law, and in particular cookie requirements. French law requires to place a short-form information notice on personal data collection form (e.g.,

Communications 65

Communications GDPR Compliance Data collection 65

Privacy and Cybersecurity Law

OCTOBER 29, 2020

Currently, compliance with the Guidelines and completion of the ALTAI are both entirely voluntary. These materials should be read alongside the ICO’s recently published Accountability Framework which applies to all organisations processing personal data. Subscribe and stay updated. Share on Facebook.

Artificial Intelligence 40

Artificial Intelligence Privacy Compliance Data Privacy 40

Thales Cloud Protection & Licensing

JUNE 21, 2023

Data privacy; e-wallets, devices and transaction systems should not have direct access to sensitive personal data. However, in some circumstances, the institutions handling money as part of a retail transaction should have the ability to perform KYC (Know Your Customer) checks, as mandated under their industry compliance regime.

Retail 62

Retail Encryption e-Discovery Data Privacy 62

The Last Watchdog

MARCH 5, 2020

Compliance penalties, lawsuits, loss of intellectual property, theft of customer personal data and loss of reputation — due to poor cyber defenses — are now getting board level attention. Compliance drivers, like Europe’s GDPR and California’s CCPA , are stirring the pot. Yet cyber exposures are multiplying.

Cybersecurity 227

Cybersecurity IoT Compliance Digital transformation 227