Hunton Privacy

DECEMBER 1, 2020

Between June 8, 2018 and April 6, 2019, the CNIL received 15 complaints from individuals relating to the exercise of their data protection rights with affiliates of the Carrefour Group. Similarly, the personal data of more than 750,000 web users had been retained for five to ten years from the date of their last order.

GDPR 91

GDPR Personal data Data collection Marketing 91

AIIM

JANUARY 17, 2018

Article 30 of the GDPR requires data controllers and processors to maintain a record of processing activities. When data subjects are prevented from exercising a right or service such as when a bank refuses a loan based on an automated screening process against a credit reference database. Step 3: Breach Response.

GDPR 83

GDPR Compliance Data collection Privacy 83

Hunton Privacy

MAY 13, 2021

Data destruction. Building owners would be required to destroy certain data, such as “authentication data,” no later than 90 days after collection. Authentication data” is data collected from the individual at the point of authentication but that is not used to grant entry.

Data Privacy 106

Data Privacy Privacy Authentication Passwords 106

Hunton Privacy

JUNE 24, 2020

Specifically, the ICO emphasizes that: While gathering additional data relating to the pandemic may be acceptable, employers should only collect what is reasonably necessary to ensure a safe workplace. If the same result could be achieved without collecting personal information, further collection should be avoided.

Data collection 45

Data collection Privacy Security Personal data 45

Security Affairs

FEBRUARY 12, 2023

That [risk has] obviously been there, I might say, for some time and predates us coming into office but, that said, it’s important that we go through this exercise and make sure that our facilities are completely secure,” Marles added. The presence of cameras poses an unacceptable risk to national security.

Manufacturing 87

Manufacturing Government Risk Communications 87

Security Affairs

MAY 17, 2023

However, the most proactive security teams can also use the data collected from the dark web to create hypotheses for determining what threat hunts to conduct.

Energy and Utilities 90

Energy and Utilities Sales Access Data collection 90

Adam Levin

JUNE 24, 2020

269 gigabytes of potentially sensitive data collected from more than 200 police departments across the country were leaked online last week. The data is currently available in a searchable format on a server managed by DDoSecrets.

Data collection 75

Data collection Cybersecurity Risk Security 75

DLA Piper Privacy Matters

JANUARY 7, 2019

Prior consent : the data subject must give his/her consent before his/her personal data is transmitted to the business partners; Limited consent : the consent given by the data subject to the organization that collects personal data is only valid for the specific partners identified at the time of the data collection.

Marketing 40

Marketing Personal data Data collection GDPR 40

IBM Big Data Hub

FEBRUARY 23, 2024

The GDPR applies to any organization that processes the personal data of European residents, regardless of where that organization is based. Second, a comprehensive inventory makes it easier to comply with user requests to share, update, or delete their data. Organizations may need to update consent forms to meet these requirements.

GDPR 80

GDPR Compliance Personal data Privacy 80

Hunton Privacy

MAY 17, 2023

Enforcement The FDBR would provide for enforcement by the Florida Department of Legal Affairs, civil penalties of up to $50,000 per violation, and tripled penalties for certain violations, such as those involving a known child.

Privacy 83

Privacy Personal data Sales Government 83

Data Matters

AUGUST 9, 2022

Privacy policies will need to include disclosures about data retention periods, the right to correct personal information, and information about how to opt out of sharing of personal information for behavioral advertising, as well as, if applicable, how to exercise the right to limit the use of sensitive personal information.

Privacy 88

Privacy Sales Analytics Compliance 88

Thales Cloud Protection & Licensing

AUGUST 15, 2019

For example, data collected by an entity may not be associated with an individual but could identify a household. The CCPA applies to for-profit entities that both collect and process the PI Information of California residents and do business in the State of California, without a physical presence in California being a requirement.

Privacy 92

Privacy GDPR Digital transformation Sales 92

IBM Big Data Hub

FEBRUARY 6, 2024

This was a long-standing pattern, but one shrouded in mystery as the network team lacked sufficient data to figure out the root cause. Once they delved into the data collected by DNS Insights, it became clear that the NXDOMAIN responses were coming from the company’s own Active Directory zones.

Data collection 69

Data collection Access IT Security 69

Hunton Privacy

OCTOBER 31, 2023

Developers must also share the results of “red-team” exercises with the government. The Administration will support new research on AI’s potential impacts on the employment market and will develop principles and best practices to address potential job displacement, labor standards, workplace health and safety, and workplace data collection.

Risk 69

Risk Artificial Intelligence Privacy Military 69

Data Matters

SEPTEMBER 6, 2022

As a provider subject to CMIA, mental health apps would be subject to HIPAA-like constraints on their ability to use and share data collected and will have increased litigation exposure, as CMIA includes a private right of action.

Privacy 197

Privacy B2B Sales Compliance 197

AIIM

MARCH 29, 2022

As metaverse technology stacks expand and become more available, cheaper, and connected, the conception of use cases across all sectors becomes a contagious exercise. Data architecture is probably the first to rank. Integration and data consumption will redefine their order of magnitude, and AI will be the de facto standard.

Blockchain 104

Blockchain Manufacturing Retail Privacy 104

DLA Piper Privacy Matters

OCTOBER 31, 2019

staff, data subjects, business partners etc.). Promotion of online mechanisms for users to exercise data subject rights (deletion, de-registration, access, correction, revoke consent etc.). Clarity that data controllers are liable for their data processors’ acts and omissions.

Data Privacy 49

Data Privacy Privacy Data collection Data breaches 49

IBM Big Data Hub

JANUARY 22, 2024

The GDPR defines the circumstances under which companies can legally process personal data. An organization must establish and document its legal basis before collecting any data. The organization must communicate this basis to users at the point of data collection.

GDPR 86

GDPR Compliance Personal data Privacy 86

DLA Piper Privacy Matters

NOVEMBER 5, 2019

staff, data subjects, business partners etc.). Promotion of online mechanisms for users to exercise data subject rights (deletion, de-registration, access, correction, revoke consent etc.). Clarity that data controllers are liable for their data processors’ acts and omissions. avoid excessive data collection).

Data collection 45

Data collection Data breaches Privacy Information Security 45

Hunton Privacy

FEBRUARY 4, 2020

Order to implement appropriate measures to facilitate the exercise of data subjects rights. The fine corresponds to 0.2% of the Italian telecom company’s total annual turnover. Read the press release and the decision (both in Italian).

Marketing 62

Marketing Communications Data collection Data breaches 62

Hunton Privacy

FEBRUARY 28, 2012

The DAA announcement indicates that the DAA standard and corresponding enforcement will be applied when a consumer “(1) has been provided language that describes…the effect of exercising such choice including that some data may still be collected and (2) has affirmatively chosen to exercise a uniform choice with the browser based tool.”

Data collection 40

Data collection Privacy Marketing IT 40

Hunton Privacy

MARCH 25, 2020

Performing a task carried out in the public interest: Article 6(1)(e) of the GDPR may also provide a legal basis where data processing is necessary to perform a task carried out in the public interest or in the course of exercising official authority vested in the data controller.

Personal data 75

Personal data GDPR Risk Insurance 75

Hunton Privacy

FEBRUARY 25, 2020

Companies must ensure that they only collect personal data that is necessary for the processing purpose(s). To that end, the Belgian DPA recommends companies limit open fields in data collection forms and review their databases on a regular basis to delete any unnecessary data. Right to Object.

Marketing 109

Marketing Personal data GDPR Communications 109

HL Chronicle of Data Protection

MARCH 31, 2020

On Tuesday, March 10, the Japanese Cabinet approved a bill to revise the Act on the Protection of Personal Information (“APPI”), which would require companies to take certain additional measures to protect personal data of data subjects. This may apply to, for example, data collected through Internet cookies.

Privacy 66

Privacy Personal data Big data Data collection 66

Hunton Privacy

FEBRUARY 23, 2023

In issuing the Substituted Decision Notice, the Tribunal stated that it “must stand in the shoes of the Information Commissioner and ask whether the Information Commissioner should have exercised her discretion differently.”

Marketing 64

Marketing Personal data GDPR Privacy 64

eDiscovery Daily

NOVEMBER 5, 2020

As the number of employees working remotely has dramatically increased during the COVID-19 Pandemic, attorneys are looking to alternative solutions for data collection amid challenges of reduced budgets and limited access to workplace assets and staff.

Metadata 45

Metadata Data collection Risk Access 45

Hunton Privacy

SEPTEMBER 27, 2016

The sweep was conducted in May 2016 to assess the quality of the information provided to users of connected devices, the level of security of the data flows and the degree of user empowerment ( e.g. , user’s consent and ability to exercise data protection rights).

Personal data 45

Personal data Data collection Privacy Access 45

Hunton Privacy

DECEMBER 4, 2012

The report complements two earlier papers which focused on data collection and storage and online behavioral advertising , and focuses on the technical implications of the proposed General Data Protection Regulation’s new right to be forgotten.

Personal data 40

Personal data Information Security Data collection Paper 40

DLA Piper Privacy Matters

MAY 5, 2020

Main takeaways from the EDBP guidelines are: Connected vehicles raise various privacy and data protection concerns, such as the lack of control and information asymmetry, the risk of excessive data collection; the risk of unlawful further processing of personal data; Most data associated with connected vehicles are considered as personal data (e.g.

Privacy 69

Privacy Personal data GDPR Insurance 69

Hunton Privacy

MARCH 17, 2017

verifying the data security measures implemented. The third step will be completed once organizations have implemented measures to protect data subjects concerned with their data processing activities and have identified those data processing activities that involve a privacy risk.

GDPR 75

GDPR Personal data Compliance Privacy 75

Privacy and Cybersecurity Law

JULY 26, 2021

In the case under analysis, the amount of € 2.6 The processing activities, carried out in breach of the applicable legislation, affected and continue to affect a considerable number of stakeholders (identified by the Garante as 18,864 individuals).

Personal data 52

Personal data GDPR e-Delivery Communications 52

DLA Piper Privacy Matters

NOVEMBER 17, 2019

Indiscriminate use and disclosure of personal data (e.g. using personal data such as device identification information or search habits without permitting app users to opt-out of such data collection; sharing such personal data with third parties without obtaining notified consent).

Personal data 40

Personal data Compliance Data collection Privacy 40

Data Protection Report

AUGUST 18, 2021

China’s Cyber Security Law ( CSL ), enacted in 2016, requires operators of critical information infrastructure ( CII ) to follow a number of enhanced security obligations, including storing within China all personal information and important data collected or generated during their operations in China.

Financial Services 52

Financial Services Data collection Security Communications 52

Hunton Privacy

NOVEMBER 5, 2020

The absence of the Article 14 information also made it difficult for individuals to exercise their rights under the GDPR. Personal data collected for credit referencing purposes was being used for limited direct marketing purposes, without informed consent from individuals.

Marketing 102

Marketing Compliance Personal data GDPR 102

John Battelle's Searchblog

APRIL 19, 2020

As the first image below demonstrates, Zoom collects a ton of data, and its policies are quite similar to those of its Big Four cousins. Figure 1 – Zoom’s Data Collection visualized. Which brings us to the “Why” of this admittedly speculative (but nevertheless quite reasonable) exercise.

Privacy 115

Privacy Data collection Marketing Communications 115

Data Matters

OCTOBER 20, 2017

Innovative use of technological or organisational solutions: the use of new technologies with novel forms of data collection and use, e.g., processing operations which combine the use of finger print and face recognition for improved physical access control.

GDPR 60

GDPR Personal data Risk Data collection 60

Data Matters

JUNE 29, 2018

In addition, the business must ensure that all individuals responsible for handling requests and compliance with AB 375 are educated about relevant aspects of the bill and how to direct consumers to exercise their rights under these sections. Businesses cannot discriminate against consumers who exercise any of their rights under AB 375.

GDPR 79

GDPR Privacy Sales Data breaches 79