HL Chronicle of Data Protection

MARCH 31, 2020

On Tuesday, March 10, the Japanese Cabinet approved a bill to revise the Act on the Protection of Personal Information (“APPI”), which would require companies to take certain additional measures to protect personal data of data subjects. This may apply to, for example, data collected through Internet cookies.

Privacy 66

Privacy Personal data Big data Data collection 66

IBM Big Data Hub

FEBRUARY 6, 2024

Here are a few examples of what we’ve seen and heard from DNS Insights users: “We’re being DDoS-ed by our own equipment” A company with over 90,000 remote workers was experiencing an extraordinarily high percentage of NXDOMAIN responses. “Which IP has been causing those high QPS records?”

Data collection 69

Data collection Access IT Security 69

IBM Big Data Hub

JANUARY 22, 2024

A data controller is any organization, group or person that obtains personal data and determines how it is used. Returning to a previous example, a company collecting phone numbers for marketing purposes would be a controller. Data processing is any action done to data, including collecting, storing or analyzing it.

GDPR 86

GDPR Compliance Personal data Privacy 86

Hunton Privacy

FEBRUARY 4, 2020

Furthermore, TIM’s data breach management and data processing system management were also considered insufficient by the Garante, in light of the Privacy by Design principle of the EU General Data Protection Regulation. Order to implement appropriate measures to facilitate the exercise of data subjects rights.

Marketing 62

Marketing Communications Data collection Data breaches 62

DLA Piper Privacy Matters

OCTOBER 31, 2019

staff, data subjects, business partners etc.). Promotion of online mechanisms for users to exercise data subject rights (deletion, de-registration, access, correction, revoke consent etc.). Clarity that data controllers are liable for their data processors’ acts and omissions.

Data Privacy 49

Data Privacy Privacy Data collection Data breaches 49

DLA Piper Privacy Matters

NOVEMBER 5, 2019

staff, data subjects, business partners etc.). Promotion of online mechanisms for users to exercise data subject rights (deletion, de-registration, access, correction, revoke consent etc.). Clarity that data controllers are liable for their data processors’ acts and omissions. avoid excessive data collection).

Data collection 45

Data collection Data breaches Privacy Information Security 45

eDiscovery Daily

NOVEMBER 5, 2020

As the number of employees working remotely has dramatically increased during the COVID-19 Pandemic, attorneys are looking to alternative solutions for data collection amid challenges of reduced budgets and limited access to workplace assets and staff.

Metadata 45

Metadata Data collection Risk Access 45

Privacy and Cybersecurity Law

JULY 26, 2021

It is worth noting that, among other things, the Garante pointed out that the information notice was not dated and that the personal data processed were listed only on a ‘by way of example’ basis. The Garante also assessed the infringement of Article 5(1)(e) with respect to the retention of personal data. Retention period.

Personal data 52

Personal data GDPR e-Delivery Communications 52

Hunton Privacy

DECEMBER 4, 2012

The report complements two earlier papers which focused on data collection and storage and online behavioral advertising , and focuses on the technical implications of the proposed General Data Protection Regulation’s new right to be forgotten.

Personal data 40

Personal data Information Security Data collection Paper 40

Hunton Privacy

MARCH 17, 2017

verifying the data security measures implemented. The third step will be completed once organizations have implemented measures to protect data subjects concerned with their data processing activities and have identified those data processing activities that involve a privacy risk.

GDPR 75

GDPR Personal data Compliance Privacy 75

John Battelle's Searchblog

APRIL 19, 2020

Until March of this year, Yuan was held up as an example of the best that global capitalism can offer – an ingenious immigrant who bootstrapped his way to America and leveraged hard work, smarts, and venture financing into a multi-billion dollar fortune. Figure 1 – Zoom’s Data Collection visualized.

Privacy 115

Privacy Data collection Marketing Communications 115

Data Matters

OCTOBER 20, 2017

Systematic monitoring: for example an employee monitoring program. The risk is increased where: (i) the individual may not be aware who is collecting their data or how it will be used; or (ii) where it is difficult for the individual to avoid being subject to such processing if the monitoring is in a public space.

GDPR 60

GDPR Personal data Risk Data collection 60

Data Matters

FEBRUARY 12, 2019

Updating as needed additional categories of personal information to those enumerated in the bill in order to address changes in technology, data collection practices, obstacles to implementation, and privacy concerns. Code § 1798.185(a): Categories of Personal Information. Definition of Unique Identifiers. Exceptions.

Sales 74

Sales Privacy Data Privacy Compliance 74

eDiscovery Daily

MAY 5, 2019

Andrew says that Chapter 6 (the procurement Chapter) provides the “meat” of the document with example requirements for scanning, coding, data collection and litigation support services. So, for example, CloudNine (shameless plug warning!)

Data collection 48

Data collection Education Marketing IT 48

HL Chronicle of Data Protection

NOVEMBER 30, 2018

For example, a website might only need 137 unique visitors from California per day to reach the threshold of 50,000 consumers. That website’s collection of data through cookies may be captured by the CCPA’s broad definition of personal information.

Marketing 40

Marketing Privacy Sales Compliance 40

Data Protection Report

SEPTEMBER 16, 2021

Examples of such additional costs include the costs of Stay-Home Notice accommodation that are incurred over and above those for vaccinated employees, the additional delays arising from prolonged SHN to be taken from existing leave entitlements etc.

Personal data 52

Personal data Data collection Risk Access 52

Data Matters

JUNE 29, 2018

The terms “infer” and “inference” are defined as the derivation of information, data, assumptions or conclusions from facts, evidence or another source of information or data. As such, this could affect not only data used for profiling but the profiles derived as well. Right to Equal Service and Price.

GDPR 79

GDPR Privacy Sales Data breaches 79

Data Protection Report

MAY 23, 2018

These data subject rights are not new as similar rights were already in place before the GDPR in Europe (and most frequently exercised in the UK), but for organizations that are based outside the EU, this procedure may have been put in place for the first time and never put to test before. In principle, this is nothing new.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Data Matters

JUNE 29, 2018

The terms “infer” and “inference” are defined as the derivation of information, data, assumptions or conclusions from facts, evidence or another source of information or data. As such, this could affect not only data used for profiling but the profiles derived as well. Right to Equal Service and Price.

GDPR 60

GDPR Privacy Sales Data breaches 60

Data Protection Report

DECEMBER 5, 2018

The MPS has long been involved in data security through its multi-level protection system under the Multi-Level Protection Measures, but it has not to date exercised a great deal of power over matters of personal information protection. The draft Guideline therefore represents the MPS’s most recent major foray into this area.

Information Security 40

Information Security Security Authentication Passwords 40

Architect Security

SEPTEMBER 24, 2020

And when thousands of protesters are out on the street, the opportunity is ripe for law enforcement to not only surveil the scene but to collect personal information that it can then hold on to for a long time. We’ve seen examples here in the D.C. So your experience will depend on where you are.

Data collection 40

Data collection Paper Metadata Access 40

Data Protection Report

AUGUST 1, 2019

2523(b)(1)) Note that the Act expressly prohibits the executive agreement from creating “any obligation that providers be capable of decrypting data or limitation that prevents providers from decrypting data.” (18 The transfer of personal data is “necessary for the establishment, exercise or defence of legal claims.” (Art.

Cloud 40

Cloud Privacy e-Discovery Personal data 40

Troy Hunt

DECEMBER 19, 2017

I thought I'd check them out myself with my original plan being to read them and better understand what they were doing with people's data, until I discovered this: You need to absorb 21,498 words spread over 42 pages worth of Microsoft Word formatted document before using this service. Data Collection Should be Minimised, Not Maximisation.

Data breaches 53

Data breaches Personal data GDPR Data collection 53

DLA Piper Privacy Matters

NOVEMBER 19, 2018

In the continuity of this accompaniment, the CNIL published on November 6th 2018 its DPIA guidelines supplementing the G29 Working Party’s opinion on DPIA along with its DPIA list which gives concrete examples of data processing operations likely to result in a high risk. This concerns: Health data.

Data Privacy 40

Data Privacy IT GDPR Privacy 40

Data Protection Report

MAY 3, 2022

The “dark patterns” highlighted in the Guidelines aim to influence users’ behaviour through content or visual presentation so that users make unintended and potentially harmful decisions regarding their personal data, for example, deciding to disclose more data than they otherwise planned or agreeing to limited protections of their data.

Privacy 67

Privacy IT GDPR Data collection 67

Hunton Privacy

JANUARY 6, 2022

In its petition, Accountable Tech cites President Biden’s Executive Order encouraging the FTC to use its rulemaking authority to establish rules that regulate “unfair data collection and surveillance practices that may damage competition, consumer autonomy, and consumer privacy.”

Marketing 81

Marketing Personal data Privacy Data collection 81

Data Matters

OCTOBER 22, 2019

Of particular note, the regulations clarify that businesses generally do not have to provide notice “at or before the point of collection” if they are not collecting information directly from the consumer. This is the first introduction of a data collection prohibition in the CCPA. Right to Non-Discrimination.

Privacy 60

Privacy Sales Paper Compliance 60

Data Protection Report

JUNE 4, 2018

In statements, both companies defended their data collection practices, saying they fully complied with the new European regulations. In addition to these high-profile examples, we are aware that a number of data controllers saw a marked increase in requests from employees and customers seeking to exercise their new rights last week.

GDPR 40

GDPR Compliance Personal data Privacy 40

IBM Big Data Hub

MARCH 26, 2024

How is sustainability managed—as an annual measuring exercise or an ongoing effort that supports business transformation? The study found companies were just “doing sustainability” or approaching sustainability as a compliance task or accounting exercise rather than a business transformation accelerator.

Energy and Utilities 65

Energy and Utilities Data collection Compliance Government 65

Krebs on Security

APRIL 16, 2020

“Looking at the data collected, the pattern of visits are highest on Monday and Friday, and the lowest visit count is on the weekend. Our data shows that there were virtually no customer hits on COVID-related domains prior to February 23.”

Phishing 281

Phishing Data collection Security Government 281

HL Chronicle of Data Protection

SEPTEMBER 19, 2018

As part of our ongoing series on the CCPA and its implications, this post sets out key issues and questions to consider when contemplating a data mapping exercise. Mapping data accurately and efficiently can be challenging. But when done correctly, data mapping can deliver significant value. KEY DATA MAPPING QUESTIONS.

Privacy 73

Privacy Compliance GDPR Sales 73

Hunton Privacy

JULY 8, 2022

Below are key examples of topics the proposed regulations address. Data Minimization (Section 7002). Explicit consumer consent is required when a business uses PI for secondary purposes unrelated to, or incompatible with, the original purpose(s) at collection. Summary of Proposed Regulations.

Privacy 101

Privacy Sales Compliance Access 101

HL Chronicle of Data Protection

DECEMBER 12, 2018

Section 1798.125 of the CCPA prohibits a business from discriminating against California consumers for exercising certain rights under the law. d) suggesting that a consumer will receive a different price or quality of goods or services if the consumer exercises rights under the law. The Prohibition on Discrimination.

Privacy 40

Privacy Sales Compliance Data collection 40

HL Chronicle of Data Protection

SEPTEMBER 19, 2018

As part of our ongoing series on the CCPA and its implications, this post sets out key issues and questions to consider when contemplating a data mapping exercise. Mapping data accurately and efficiently can be challenging. But when done correctly, data mapping can deliver significant value. KEY DATA MAPPING QUESTIONS.

Privacy 40

Privacy Compliance GDPR Sales 40

Data Protection Report

DECEMBER 17, 2020

The DGR provides for a specific category of data intermediaries focusing exclusively on personal data and seeks to enhance individual agency and the individuals’ control over the data pertaining to them. Encouraging data altruism. What are data altruism organizations permitted to do? Is consent required?

Government 90

Government Personal data GDPR Access 90

Data Matters

SEPTEMBER 29, 2021

Most of that focus has centered on data collection, storage, sharing, and, in particular, third-party transactions in which customer information is harnessed for advertising purposes. Could a party, for instance, decline to produce, review, or even collect certain types of data due to privacy concerns?

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

DLA Piper Privacy Matters

FEBRUARY 24, 2021

Against the backdrop of the ongoing pandemic, the EU Commission has exercised its right under Article 70 of the GDPR to request written advice from the EDPB on a number of issues relating to the application of the GDPR to health research.

GDPR 85

GDPR Personal data Data collection Paper 85