Hunton Privacy

AUGUST 11, 2020

On August 5, 2020, the French Data Protection Authority (the “CNIL”) announced that it has levied a fine of €250,000 on French online shoe retailer, Spartoo, for various infringements of the EU General Data Protection Regulation (“GDPR”).

Retail 114

Retail GDPR IT Personal data 114

IT Governance

MARCH 26, 2019

It’s relevant for everyone, including retail and hospitality. Retail and hospitality organisations will likely need to conduct several to cover all their processes, both new and existing. Common activities for retail and hospitality requiring DPIAs. Speed up and simplify the DPIA process to ensure compliance with the GDPR.

Retail 78

Retail Risk GDPR Government 78

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Yet many organizations still struggle to meet compliance requirements, and EU data protection authorities do not hesitate to hand out penalties. Irish regulators hit Meta with a EUR 1.2

GDPR 83

GDPR Compliance Personal data Privacy 83

Collibra

APRIL 11, 2023

Retail is a dynamic and competitive market. In addition to the traditional brick-and mortar-stores, the retail business today includes online and mobile stores. Every process at every stage of these stores relies on data. The right kind of data can drive great innovations in retail. What if they do not match?

Retail 73

Retail Sales Compliance Marketing 73

IBM Big Data Hub

APRIL 24, 2024

An online retailer always gets users’ explicit consent before sharing customer data with its partners. A navigation app anonymizes activity data before analyzing it for travel trends. One cannot overstate the importance of data privacy for businesses today.

Data Privacy 87

Data Privacy Privacy GDPR Personal data 87

OpenText Information Management

APRIL 4, 2018

Forget bitcoin, data is the new currency of retail appeared first on OpenText Blogs. Well, it does if some of the press comment is to be believed. But what if, just if, it’s not that bad? For … The post GDPR.

Retail 54

Retail GDPR Data Privacy Privacy 54

IT Governance

AUGUST 19, 2020

In this blog, we take a close look at what a data controller and processor does and how they fit into your organisation. What is a data controller? A data controller determines the purposes for which an organisation collects and uses personal data. Are you a data controller or a data processor?

GDPR 95

GDPR Personal data Compliance Privacy 95

Hunton Privacy

JUNE 25, 2020

Establishments and companies in the UK will therefore be responsible for the additional collection and potential sharing of customers’ personal data. Any entity engaging in this kind of data collection will need to comply with the requirements of data protection law.

Data collection 98

Data collection Personal data Compliance Retail 98

Data Protection Report

JUNE 21, 2023

The new law has exclusions for Gramm-Leach-Bliley-covered financial institutions, HIPAA-covered covered entities and business associates, non-profits, institutes of higher education, and electric utilities, power generation companies, and retail electric providers. A similar requirement applies with respect to the sale of biometric data.

Privacy 84

Privacy Personal data Sales Retail 84

IT Governance

JUNE 13, 2018

Dixons Carphone has suffered a major data breach involving 5.9 million personal data records. At this point, the major consumer electronics retailer said there was no evidence of any fraud. In a second breach, personal customer data in the form of names, addresses and email addresses was accessed.

Retail 65

Retail Data breaches GDPR Compliance 65

IT Governance

NOVEMBER 12, 2018

Not only does it affect the way organisations process personal data, but also extends data subjects rights in terms of how their data is processed. What is a data subject access request (DSAR)? One of the rights amended by the GDPR is the right of access.

Access 91

Access GDPR Personal data Retail 91

DLA Piper Privacy Matters

AUGUST 12, 2020

On 28 July 2020, the French Supervisory Authority (the “CNIL”) sanctioned the online shoes retail company, SPARTOO SAS, by a €250,000 fine and an injunction to comply with GDPR within 3 months under penalty for various non-compliances with the GDPR of the personal data processing related to clients, prospects and employees [1].

GDPR 93

GDPR Personal data Compliance Passwords 93

IT Governance

NOVEMBER 14, 2018

The terms ‘data controller’ and ‘data processor’ have been around for years, but it’s only since the EU GDPR (General Data Protection Regulation) took effect that they’ve been scrutinised. The roles are closely related, both are integral to the GDPR, and a misunderstanding can lead to non-compliance and severe punishment.

GDPR 107

GDPR Retail Data collection Personal data 107

Thales Cloud Protection & Licensing

NOVEMBER 15, 2023

Maintaining compliance Airports face increased pressure to comply with an increased patchwork of government and airport-specific regulations to ensure the security and privacy of their staff and passengers. Also, on average, airports can process up to seven pieces of personal data for every passenger.

Cybersecurity 87

Cybersecurity Authentication Access Compliance 87

Hunton Privacy

DECEMBER 1, 2020

On November 26, 2020, the French Data Protection Authority (the “CNIL”) announced that it imposed a fine of €2.25 million on Carrefour France and a fine of €800,000 on Carrefour Banque for various violations of the EU General Data Protection Regulation (“GDPR”) and Article 82 of the French Data Protection Act governing the use of cookies.

GDPR 91

GDPR Personal data Data collection Marketing 91

IT Governance

MAY 23, 2019

To mark the anniversary, we gathered a panel of data protection experts to discuss the effect of the Regulation and the future of data protection. Compliance fatigue’. Compliance is a continuous requirement and although most organisations have made a good start, there is always more to do.”.

GDPR 72

GDPR Data breaches Compliance Retail 72

IT Governance

JANUARY 25, 2019

Home improvement retailer B&Q has suffered a data breach affecting 70,000 of its… well, not customers, exactly. What was the lawful basis on which it was processing the data in the first place? How does it demonstrate compliance with the six data processing principles?

Data breaches 111

Data breaches GDPR Passwords Retail 111

IT Governance

OCTOBER 3, 2019

You must tell people when you’re collecting their personal information to give them the opportunity to exercise their data subject rights. These rights enable individuals to access the personal data organisations store on them and to challenge the way their information is used. The penalties for non-compliance.

GDPR 110

GDPR Privacy Retail Personal data 110

IT Governance

FEBRUARY 23, 2018

There is an alarming lack of awareness across all industries about the EU General Data Protection Regulation (GDPR) , according to a government survey. Almost two thirds (62%) of respondents hadn’t heard of the Regulation, and only about 10% had taken steps to meet its compliance requirements. Preparing for the GDPR.

GDPR 63

GDPR Compliance Insurance Personal data 63

Data Protection Report

NOVEMBER 2, 2023

In 2017, Equifax Inc, suffered a cybersecurity breach, with hackers able to access the personal data of around 13.8 The breach included data held by Equifax Inc in connection with two of Equifax’s products.

GDPR 78

GDPR Risk Cybersecurity Compliance 78

DLA Piper Privacy Matters

JANUARY 28, 2022

In Asia Pacific, China ’s Personal Information Protection Law (PIPL) came into force. This consolidates obligations on processing of personal information at a national law level, but still leaves to be determined in the future through subsequent regulations and guidelines. Our Tools and Resources. Access the report here.

GDPR 98

GDPR Privacy Data breaches Personal data 98

IT Governance

JULY 25, 2018

As of 25 May 2018, organisations that use CCTV to capture images of individuals are processing personal data as defined by the GDPR (General Data Protection Regulation) and must comply with the Regulation’s requirements. To comply with the data controller’s legal obligations. To protect the data subject’s vital interests.

GDPR 102

GDPR Personal data Privacy Access 102

DLA Piper Privacy Matters

FEBRUARY 1, 2019

On 31 January 2019, the French Data Protection Supervisory Authority (CNIL) and the French General Directorate for Competition Policy, Consumer Affairs and Fraud Control (DGCCRF, authority in charge of consumer protection) signed a new protocol of cooperation to improve protection of personal data of consumers.

GDPR 40

GDPR Personal data B2C Retail 40

Thales Cloud Protection & Licensing

JUNE 21, 2018

All of those “opt out” emails we’ve all been receiving as organisations get themselves compliant with the new regulations have really got people thinking about who has their personal data and what happens to it. It is clear that consumers are putting data security high on their list of buying criteria.

Security 54

Security Personal data Retail Marketing 54

IT Governance

NOVEMBER 22, 2018

Just days before Black Friday, Amazon suffered a data breach in which an undisclosed number of customers’ names and email addresses were accidentally exposed on its website. Asked to provide further information, it tersely commented: “We have fixed the issue and informed customers who may have been impacted”. Well, that’ll do for this week.

Data breaches 96

Data breaches Personal data Passwords Encryption 96

Thales Cloud Protection & Licensing

NOVEMBER 30, 2021

Registration and medical data access in healthcare. Secure online services for retailers. Compliance with current regulatory regime, certified in accordance with established criteria for data privacy protection. Remote check-ins at hotels. The user identity verification journey.

Authentication 71

Authentication Privacy Compliance Retail 71

Thales Cloud Protection & Licensing

MARCH 20, 2023

When privacy is at stake, SSI puts individuals back in control of their personal data. Organizations have an average of 17 apps to process or store customer data, and ensuring compliance across each of those apps is a complex task. a bank), a retailer, or an individual’s employer.

Privacy 71

Privacy Blockchain Customer Experience Access 71

DLA Piper Privacy Matters

APRIL 9, 2020

The enforcement warning is an acknowledgement by the DPC that regulatory guidance to date has not been sufficiently clear and it should act as a call-to-arms for businesses operating websites in Ireland to ensure compliance by that date. Personal data may not always exist in cookies however when it does, GDPR obligations apply in addition.

GDPR 59

GDPR Analytics Personal data Compliance 59

Reltio

AUGUST 16, 2018

The primary objectives of the GDPR are to give control back to their EU citizens and residents over their personal data, to simplify the regulatory environment for international business, and to unify regulations within the European Union. maintain compliance, reduce costs) data strategies built-in.

GDPR 70

GDPR MDM Compliance Personal data 70

IT Governance

JUNE 11, 2019

Upon discovery of the breach, the security of our retail platform was immediately restored and appropriate measures were taken to ensure the security of all other online assets,” the statement read. The GDPR states that organisations must take “appropriate technical and organisational measures” to secure EU residents’ personal data.

GDPR 66

GDPR Personal data Data breaches Retail 66

Data Protection Report

AUGUST 12, 2019

In its ruling, the ECJ held that operators of websites embedding Facebook’s “Like” button act as data controllers jointly with Facebook in respect of the collection and transmission to Facebook of the personal data of visitors to the relevant websites.

Personal data 40

Personal data Data collection Retail Access 40

IT Governance

APRIL 23, 2019

Likewise, the data protection watchdog began communications with the London Borough of Newham in April 2018 after complaints that it had breached the personal data of more than 200 people. The retailer was hit by a cyber attack in July 2017 but the damage wasn’t discovered for almost a year.

GDPR 89

GDPR Personal data Compliance Retail 89

IT Governance

JANUARY 9, 2024

Source (New) Software Luxembourg Yes 3,600,000 National Automobile Dealers Association Source (New) Retail USA Yes 1,065,000 Consórcio Canopus Source (New) Professional services Brazil Yes 1,400,000 The Teaching Company (Wondrium by The Great Courses) Source (New) Education USA Yes 1.3 TB Gräbener Maschinentechnik GmbH & Co.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Data Matters

FEBRUARY 10, 2020

Data protection impact assessment (DPIA) : Where an organisation wants to carry out ‘large scale profiling’, ‘wealth profiling’ or target children for marketing profiling, then a DPIA must be completed before the commencement of such activities.

Marketing 68

Marketing GDPR Personal data Communications 68

Data Protection Report

APRIL 16, 2020

The DPC will allow a period of six months from the date of publication of the Guidance for data controllers to bring their websites and mobile apps into compliance, after which enforcement action will commence. The French authority has given organisations a similar grace-period.

Analytics 87

Analytics Data collection Compliance Privacy 87

DLA Piper Privacy Matters

MARCH 21, 2019

The DPA explicitly stated that ensuring GDPR compliance for that matter should be made a priority within all companies – not only in the technology sector (several leading tech companies reside in Bavaria), thus irrespective of their area of business or industry. It must be noted that this is not an entirely risk-free solution though.

GDPR 49

GDPR Personal data Risk Retail 49

IT Governance

FEBRUARY 21, 2024

In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Data breached: 2,632,275 people’s data. 204 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52