Remove tag
article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

The claims related to the company’s sharing personal data without consumer consent and making it very difficult for consumers to cancel their subscriptions to this telehealth service. The order also, in Section IX, set forth data destruction requirements and a data retention policy.

article thumbnail

CHINA: uncertainties helpfully clarified on various key data compliance activities

DLA Piper Privacy Matters

The Draft Measures propose to introduce or flesh out other compliance requirements contained in the PIPL. This will, therefore, require more in-depth privacy notices than businesses may be used to providing in China. All these indicate that DPO should be a relatively senior position within an organization.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GDPR personal data explained

Collibra

The General Data Protection Regulation (GDPR), in force since May 25, 2018, requires businesses to protect the personal data and privacy of European Union (EU) citizens, for transactions that occur within EU Member States. The GDPR also regulates the exportation of personal data outside the EU. Location data .

article thumbnail

Guest Post -- GDPR Compliance starts with Data Discovery

AIIM

Implicit in this is the requirement that organizations must institute policies, processes and systems that: Establish a central personal data register and record of processing activities ; Implement technical and organizational measures that enable organizations to demonstrate compliance; and.

GDPR 102
article thumbnail

How to stay ahead of ever-evolving data privacy regulations

IBM Big Data Hub

Kicked off several years ago by the groundbreaking introduction of the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) , the regulation and compliance trend is only going to intensify. Adopting a privacy-centric approach built around a data fabric.

article thumbnail

China: Navigating China episode 16: New data lifecycle guidelines for financial institutions in China – detailed assessments, additional security measures and some data localisation introduced

DLA Piper Privacy Matters

This introduces a data lifecycle security framework, and represents the key guideline for handling personal and other financial information by financial institutions (i.e. Key compliance obligations include: Classification of financial data: the data lifecycle framework introduces five levels of financial data, namely: .

article thumbnail

Work Remotely Without Compromising Your Data

AIIM

And once you know where your high-risk issues are, you can start doing something about it: locking down access, cleaning up permissions, and removing stale data that’s outlived its value. The sheer volume of data regulations is impossible for end-users to keep track up. As IT leaders, it’s our job to care for this data.