erwin

APRIL 18, 2019

California Consumer Privacy Act (CCPA) compliance shares many of the same requirements in the European Unions’ General Data Protection Regulation (GDPR). Data governance , thankfully, provides a framework for compliance with either or both – in addition to other regulatory mandates your organization may be subject to.

GDPR 81

GDPR Compliance Privacy Personal data 81

DLA Piper Privacy Matters

SEPTEMBER 17, 2018

30 of 2018 on the Personal Data Protection Law (PDPL). It will provide individuals with rights in relation to how their personal data can be collected, processed and stored. The PDPL also imposes new obligations upon businesses to ensure that the personal data they collect is kept secure.

Personal data 49

Personal data GDPR Compliance Risk 49

AIIM

JANUARY 28, 2020

As Fortune Magazine has described it, the European Commission (the executive body for the E.U.) The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

Artificial Intelligence 126

Artificial Intelligence GDPR Personal data Privacy 126

Hunton Privacy

JANUARY 18, 2023

On January 16, 2023, the Directive on measures for a high common level of cybersecurity across the Union (the “NIS2 Directive”) and the Directive on the resilience of critical entities (“CER Directive”) entered into force. Key Takeaways from the NIS2 Directive. A broader scope of application. Reinforced obligations.

Cybersecurity 111

Cybersecurity Healthcare Encryption Risk 111

Data Matters

OCTOBER 6, 2022

The Guidance is divided into two sections: (i) how can PETs help with data protection compliance; and (ii) what are PETs. This is the idea that data protection should be ‘baked in’ to your processing from the design stage through to the deployment of any technology. PETs that control access to certain parts of the data.

GDPR 88

GDPR Privacy Encryption Compliance 88

Data Protection Report

DECEMBER 17, 2020

On 25 November 2020, the European Commission ( EC ) published its proposed Data Governance Regulation (the DGR ), which will create a new legal framework to encourage the development of a European single market for data. What are the objectives of the Data Governance Regulation? Public-sector data sharing .

Government 102

Government Personal data Marketing Artificial Intelligence 102

ARMA International

APRIL 18, 2022

These records are typically organized by grouping them by function or department and then described as either an individual record or grouped together into a record category. Data protection laws, regulations, and rules control the collection, use, transfer, and storage of personal and sensitive information.

Personal data 100

Personal data GDPR Privacy Records Management 100

DLA Piper Privacy Matters

JUNE 4, 2020

This gives affected businesses a very short time frame in which to consider the Updated Law and implement any required changes to their regulatory compliance program, particularly for those DIFC businesses that do not already have a GDPR compliant framework. What are the key changes? It remains to be seen how this will apply in practice.

Personal data 52

Personal data GDPR Compliance Privacy 52

Data Protection Report

DECEMBER 17, 2020

On 25 November 2020, the European Commission ( EC ) published its proposed Data Governance Regulation (the DGR ), which will create a new legal framework to encourage the development of a European single market for data. They will be the only third parties able to run so-called data exchanges or trusts for data pools.

Government 92

Government Personal data GDPR Access 92

DLA Piper Privacy Matters

NOVEMBER 12, 2020

On 11 November, the European Data Protection Board (“ EDPB ”) published recommendations on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data (“ Recommendations ”) as well as recommendations on the European Essential Guarantees for surveillance measures (“ EEGs ”).

Paper 98

Paper Personal data Privacy Access 98

DLA Piper Privacy Matters

MARCH 19, 2020

Various countries are in lockdown and emergency measures being implemented to contain the pandemic, with European countries currently at the epicentre of the outbreak. The world is facing unprecedented challenges in its fight to contain Coronavirus (COVID-19). carrying out temperature checks on entry to sites.

GDPR 98

GDPR Personal data Compliance Privacy 98

Hunton Privacy

SEPTEMBER 10, 2020

On September 7, 2020, the European Data Protection Board (“EDPB”) released draft Guidelines 07/2020 on the concepts of controller and processor in the EU General Data Protection Regulation (“GDPR”) (the “Guidelines”). It is not necessary that controllers have access to the personal data. Background.

GDPR 95

GDPR Personal data Data breaches Compliance 95

IT Governance

JULY 20, 2018

Although much of the focus in 2018 has been on ensuring compliance with the EU GDPR (General Data Protection Regulation) , another EU directive became UK law in May – the NIS Regulations (Network and Information Systems Regulations 2018). What are the penalties for non-compliance? What are the NIS Regulations?

Compliance 67

Compliance GDPR Personal data Cloud 67

DLA Piper Privacy Matters

MAY 5, 2020

Heeding the call, the European Commission issued some communications, such as the communication on “Europe on the Move” (COM(2018) 293 final), to guarantee a smooth transition towards a European mobility system which is safe, clean, connected and automated. geolocation data; biometric data; etc.) 23(1) GDPR.

Privacy 69

Privacy Personal data GDPR Insurance 69

Data Protection Report

SEPTEMBER 28, 2021

In August, the Government announced that it intended to “seize the opportunity” afforded by the UK’s exit from the European Union to makes some changes (see our blog The UK Government unveils its post-Brexit plans to shake up data protection laws | Data Protection Report ). Compliance program.

Government 120

Government FOIA GDPR Compliance 120

DLA Piper Privacy Matters

DECEMBER 9, 2019

On 14 th November, the Information Commissioner’s Office (“ ICO ”) published an update to its guidance on the processing of special category data (“ Guidance ”). data concerning a person’s sexual orientation. data concerning a person’s sexual orientation. Genetic and biometric data. Background.

Personal data 59

Personal data GDPR Compliance IT 59

DLA Piper Privacy Matters

AUGUST 27, 2020

The Commissioner for Data Protection and Freedom of Information for the German State of Baden-Württemberg ( Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg – “LfDI BW”) recently published guidance for international transfers of personal data in the post- Schrems II era. Background.

Personal data 105

Personal data GDPR Encryption Privacy 105

Thales Cloud Protection & Licensing

JANUARY 27, 2021

First, it provides a comprehensive, specific and historically more wide-reaching definition for Sensitive Personal Information (SPI), a category of data which comes with certain rights for consumers and certain compliance burdens for organizations. Find out more in our CipherTrust Data Security Platform white paper.

Data Privacy 102

Data Privacy Privacy GDPR Encryption 102

HL Chronicle of Data Protection

MARCH 4, 2019

Subject to the deadlock in parliament being broken, or an extension of the Article 50 Brexit process, the UK’s 46-year European Union membership will cease in a matter of days. For example, personal data breaches would have to be notified to the ICO in addition to any EU27 lead supervisory authority.

GDPR 40

GDPR Personal data Privacy Communications 40

Data Protection Report

APRIL 16, 2020

The DPC will allow a period of six months from the date of publication of the Guidance for data controllers to bring their websites and mobile apps into compliance, after which enforcement action will commence. This is broadly the same approach taken by other European regulators, with the exception of the Spanish authority.

Analytics 87

Analytics Data collection Compliance Privacy 87

DLA Piper Privacy Matters

OCTOBER 16, 2019

Multinationals increasingly turning to BCRs as providing more legal certainty for personal data transfers from the EU. The EU General Data Protection Regulation (“GDPR”) brought about stricter data protection rules, and increased penalties for breaching these rules. Why are BCRs gaining popularity?

GDPR 40

GDPR Personal data Marketing Healthcare 40

Data Matters

MARCH 4, 2021

Ralph Northam signed into law the Virginia Consumer Data Protection Act (VCDPA). The VCDPA, which will not enter into effect until January 1, 2023, borrows heavily from the California Consumer Privacy Act (CCPA) and the European Union (EU) General Data Protection Regulation (GDPR). Exemptions.

Personal data 74

Personal data GDPR Sales Privacy 74

eDiscovery Daily

NOVEMBER 26, 2017

While we were preparing to eat turkey and stuff ourselves with various goodies last week, the Cloud Security Alliance (CSA) provided an important guideline for compliance with the European Union General Data Protection Regulation (GDPR). Transfer of personal data to third countries.

Cloud 40

Cloud GDPR Personal data Compliance 40

Data Matters

JUNE 1, 2022

The Digital Markets Act (DMA) will impose a stringent regulatory regime on large online platforms (so-called “gatekeepers”) and give the European Commission (Commission) new enforcement powers, including an ability to impose severe fines and remedies for noncompliance. process and use personal data. Key dates and next steps.

Marketing 88

Marketing Computer and Electronics Communications GDPR 88

Hunton Privacy

JULY 1, 2013

On July 1, 2013, the Republic of Croatia joined the European Union, increasing the number of EU Member States to 28. As of the day of its accession, Croatia must implement the acquis communautaire (the complete body of the EU legislation), which includes the EU Data Protection Directive 95/46/EC (“Data Protection Directive”).

Personal data 40

Personal data IT Compliance Communications 40

DLA Piper Privacy Matters

OCTOBER 24, 2019

Importantly the methodology set out in the Guidelines for calculating fines is not intended to be exhaustive and will be subject to further specification by the European Data Protection Board (‘ EDPB’ ). This is used to assign the undertaking to a specific size-category. 18 GDPR (i.e. Step 3: Calculation of base value.

GDPR 40

GDPR Compliance Personal data IT 40

DLA Piper Privacy Matters

APRIL 9, 2018

Italian companies can now rely on guidelines on how to comply with the European privacy regulation (GDPR) which unvail some interesting positions. . As already provided by the current regime, any type of processing of personal data needs to have a legal basis justifying it. In particular, among others, with reference to.

GDPR 40

GDPR Personal data Privacy Data breaches 40

Data Protection Report

MAY 23, 2018

The wait is finally over—this Friday the European Union General Data Protection Regulation (GDPR) will come into force. For many readers of this post, a huge amount of work will have been done in recent months in building up to compliance with the new regime. What do we expect in terms of enforcement priorities?

GDPR 40

GDPR Personal data Compliance Data breaches 40

HL Chronicle of Data Protection

MAY 29, 2019

Opinion 5/2019 on the interplay between the ePrivacy Directive and the GDPR, particularly regarding the competence, tasks, and powers of data protection authorities (12.3.2019) – The EDPB confirmed that where the ePD provides for a more specific rule than the GDPR, the specific rule will prevail.

GDPR 40

GDPR Personal data Privacy Information architecture 40

Data Protection Report

JANUARY 6, 2020

2020 could well be a year of data export turmoil – so brace yourself! In the UK, the Information Commissioner’s Office (ICO) has been very outspoken on the ad tech industry’s use of special category personal data and onwards data sharing without explicit consent. Brace yourself (for export turbulence).

Privacy 85

Privacy GDPR Data breaches Risk 85

DLA Piper Privacy Matters

APRIL 26, 2018

We are now one month away from the historic enforcement of the EU General Data Protection Regulation ( GDPR ) and it is clear that there is still much to do by many Australian organisations to ensure compliance by the 25 May 2018 deadline. Public sector organisations are not immune. Enforceability and Take-up.

GDPR 40

GDPR Compliance Personal data Privacy 40

Hunton Privacy

JUNE 4, 2013

On May 31, 2013, the Council of the European Union’s Justice and Home Affairs released a draft compromise text in response to the European Commission’s proposed General Data Protection Regulation (the “Proposed Regulation”). The European Commission published the Proposed Regulation in January 2012.

Personal data 40

Personal data Risk Data breaches Marketing 40

Data Protection Report

JUNE 29, 2018

For companies that have implemented a compliance plan for European Union data subjects under the EU General Data Protection Regulation (“GDPR”), this law means many of the similar protections will now need to be extended to California residents. Consumer access and data portability rights. Private actions.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

JUNE 29, 2018

For companies that have implemented a compliance plan for European Union data subjects under the EU General Data Protection Regulation (“GDPR”), this law means many of the similar protections will now need to be extended to California residents. Consumer Access and Data Portability Rights. Private Actions.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

JANUARY 6, 2020

2020 could well be a year of data export turmoil – so brace yourself! In the UK, the Information Commissioner’s Office (ICO) has been very outspoken on the ad tech industry’s use of special category personal data and onwards data sharing without explicit consent. Brace yourself (for export turbulence).

Privacy 52

Privacy GDPR Data breaches Risk 52

DLA Piper Privacy Matters

MAY 14, 2018

Privacy-related compliance organization supplemented. There has been a long debate in Italy on whether the GDPR requires to keep the roles of the so called “ internal data processors ” ( responsabili interni del trattamento ) as officers of the company in charge of monitoring privacy compliance provided by the Italian Privacy Code.

GDPR 45

GDPR Privacy Systems administration Compliance 45

Data Protection Report

DECEMBER 20, 2019

Yesterday, the Advocate General (“ AG ”) concluded that, in his opinion, the EU Standard Contractual Clauses (“ SCCs ”) are a valid mechanism to transfer personal data outside of the European Economic Area (“ EEA ”). What has happened? However, the AG suggested new obligations for those using SCCs.

Privacy 40

Privacy Personal data Risk Access 40