IT Governance

NOVEMBER 14, 2018

Data controllers and data processors are an integral part of the GDPR. The terms ‘data controller’ and ‘data processor’ have been around for years, but it’s only since the EU GDPR (General Data Protection Regulation) took effect that they’ve been scrutinised. Responsibilities of the data controller.

GDPR 107

GDPR Retail Data collection Personal data 107

Hunton Privacy

JANUARY 24, 2022

The Austrian data protection authority (the “Austrian DPA”) recently published a decision in a case brought against an Austrian website provider and Google by the non-governmental organization co-founded by privacy activist Max Schrems, None of Your Business (“NOYB”). government access to the relevant data was low.

Analytics 83

Analytics GDPR Personal data Data collection 83

Hunton Privacy

DECEMBER 1, 2020

On November 26, 2020, the French Data Protection Authority (the “CNIL”) announced that it imposed a fine of €2.25 million on Carrefour France and a fine of €800,000 on Carrefour Banque for various violations of the EU General Data Protection Regulation (“GDPR”) and Article 82 of the French Data Protection Act governing the use of cookies.

GDPR 91

GDPR Personal data Data collection Marketing 91

IT Governance

OCTOBER 15, 2018

The EU’s GDPR (General Data Protection Regulation) superseded all laws based on the EU’s Data Protection Directive, including the UK’s Data Protection Act 1998, on 25 May 2018. Some organisations believe that a simple privacy notice is all that is required, but the GDPR actually demands far more than that. .

GDPR 90

GDPR Data breaches Personal data Data collection 90

Collibra

OCTOBER 28, 2020

There are a number of recurring questions on how to approach GDPR and setup a GDPR program. Should I implement a top-down or bottom-up approach to GDPR? When defining your GDPR architecture, it is key to start with the basics and determine how you intend to implement the regulation within your organization.

GDPR 45

GDPR e-Discovery Metadata Compliance 45

Hunton Privacy

NOVEMBER 27, 2018

On November 23, 2018, the European Data Protection Board (“EDPB”) published its long-awaited draft guidelines on the extraterritorial application of the EU General Data Protection Regulation (“GDPR”) (the “Guidelines”). For example, the processing of personal data by a French controller relating to customers in the U.S.

GDPR 93

GDPR Personal data Marketing Data collection 93

The Last Watchdog

JANUARY 9, 2023

As the world becomes more digital and connected, it is no surprise that data privacy and security is a growing concern for small to medium sized businesses — SMBs. Related: GDPR sets new course for data privacy. There is increasing regulatory pressure on SMBs to protect their employees’ and customers’ sensitive data.

Data Privacy 210

Data Privacy Compliance Privacy GDPR 210

Dark Reading

APRIL 8, 2019

A new inquiry aims to determine whether contracts between Microsoft and EU organizations violate GDPR.

Data collection 68

Data collection GDPR 68

The Schedule

MAY 9, 2019

A few weeks ago, Chuck Piotrwoski of PIOT presented a great webinar on the General Data Protection Regulation (GDPR). Chuck broke down GDPR into several basic principles: data about a person belongs to the person. an organization can only work with personal data if permitted by law or with the consent of the individual.

GDPR 40

GDPR Personal data Privacy Data collection 40

OneHub

APRIL 18, 2018

With a little more than a month until it takes effect, GDPR are four letters that you’ll be hearing a lot in the coming weeks. Dell and Dimension research suggests that 80 percent of businesses know little or nothing about GDPR. GDPR stands for the General Data Protection Regulation. Read the entire GDPR text here.

GDPR 53

GDPR Privacy Encryption Data collection 53

IT Governance

JANUARY 9, 2018

With the new EU General Data Protection Regulation (GDPR) coming into effect in less than six months, it is vital that all organisations make sure they have accurate data flow maps. If your business is not in the EU, you will still have to comply with the Regulation if you want to process EU residents’ data. Key elements.

GDPR 66

GDPR Data collection Compliance Privacy 66

Hunton Privacy

DECEMBER 18, 2018

On December 13, 2018, the Dutch Data Protection Authority (“ Autoriteit Persoonsgegevens ”) (the “Dutch DPA”) published a report on the complaints it has received since the EU General Data Protection Regulation (“GDPR”) became applicable on May 25, 2018 (the “Report”). View the Report and the press release (in Dutch).

GDPR 59

GDPR Personal data Data collection Business Services 59

DLA Piper Privacy Matters

JULY 12, 2023

The decision imposes important requirements in relation to the interpretation of the GDPR and the interplay between competition authorities and data protection supervisory authorities, in particular, with regards to the personalised use of consumers’ personal data for targeted advertising by social media platforms.

GDPR 52

GDPR Personal data Data collection Marketing 52

Reltio

AUGUST 16, 2018

On May 25, 2018 GDPR (General Data Protection Regulation) went into effect. The primary objectives of the GDPR are to give control back to their EU citizens and residents over their personal data, to simplify the regulatory environment for international business, and to unify regulations within the European Union.

GDPR 70

GDPR MDM Compliance Personal data 70

IT Governance

MAY 30, 2018

The EU General Data Protection Regulation (GDPR) is designed to harmonise data protection laws across the EU, but certain industries will have to respond differently in order to achieve compliance. A report published by research and consultancy company Celent highlights the challenges that the GDPR presents to insurers.

Insurance 49

Insurance GDPR Compliance Data collection 49

Hunton Privacy

MARCH 18, 2022

The complaints focused on whether the transfer of EU personal data to Google in the U.S. through the use of cookies is permitted under the EU General Data Protection Regulation (“GDPR”), following the Schrems II judgment of the Court of Justice of the European Union. through the use of the Google Analytics cookie is unlawful.

Analytics 118

Analytics Privacy GDPR Personal data 118

Schneier on Security

APRIL 24, 2024

As to privacy, consent authorizes and legitimizes a wide range of data collection and processing. In the European Union, the General Data Protection Regulation (GDPR) uses the express consent approach, where people must voluntarily and affirmatively consent. There are generally two approaches to consent in privacy law.

Privacy 97

Privacy Personal data GDPR Data collection 97

Hunton Privacy

JUNE 30, 2023

The Political Agreement introduces a number of changes to the original Commission Proposal on the Data Act, including: Clarification of the scope of the Data Act, allowing users of connected devices, ranging from smart home appliances to smart industrial machinery, to gain access to data generated by their use.

Data collection 55

Data collection GDPR IoT Marketing 55

eSecurity Planet

DECEMBER 1, 2021

Businesses that have spent the past three-plus years adapting to the European Union’s far-reaching data privacy law now have to decide how they will respond to a similar law in China that has been criticized as being more vague in its wording and harsher in its penalties. PIPL vs. GDPR. Also read: Top GRC Tools & Software for 2021.

Data Privacy 131

Data Privacy Privacy GDPR Data collection 131

Hunton Privacy

MARCH 17, 2017

On March 15, 2017, the French data protection authority (the “CNIL”) published a six step methodology and tools for businesses to prepare for the EU General Data Protection Regulation (“GDPR”) that will become applicable on May 25, 2018. Step 1: Appointing a Data Protection Officer (“DPO”) or “Pilot”.

GDPR 75

GDPR Personal data Compliance Privacy 75

Hunton Privacy

JANUARY 27, 2023

Key takeaways from the Report include: The EDPB recalls that the one-stop-shop mechanism introduced by the EU General Data Protection Regulation (“GDPR”) does not apply to cookie-related issues, as cookie rules are set forth under the ePrivacy Directive.

GDPR 111

GDPR Compliance Data collection Personal data 111

Hunton Privacy

MAY 11, 2021

The preliminary fine was issued for failure to comply with the General Data Protection Regulation’s (“GDPR”) accountability, lawfulness and transparency requirements, primarily due to Disqus’ tracking of website visitors. Datatilsynet therefore concluded that Disqus’ activities were within the scope of Article 3(2)(a) of the GDPR.

GDPR 129

GDPR Personal data Communications Data collection 129

Data Matters

FEBRUARY 18, 2021

When collecting and reporting such data, the sponsor should take into account ethical considerations and all applicable laws and regulations, including data protection legislation. The sponsor is furthermore required to verify and control the accuracy and completeness of the data collected by itself or its third-party vendors.

GDPR 121

GDPR Personal data Access Data collection 121

IT Governance

NOVEMBER 17, 2020

Under the GDPR (General Data Protection Regulation) , all personal data breaches must be recorded by the organisation and there should be a clear and defined process for doing so. In this blog, we take a look at the scenarios in which data protection breaches in schools must be reported. How to avoid data breaches.

Personal data 105

Personal data Data breaches Data collection GDPR 105

Thales Cloud Protection & Licensing

JULY 3, 2023

madhav Tue, 07/04/2023 - 05:10 As the data trust gap between customers and businesses continue to grow, and as third-party cookies become redundant, there is an urgency to adopt a modernized approach to customer data collection. Progressive profiling introduces a fresher and far more proactive take on data collection.

IT 62

IT Data collection B2C B2B 62

The Last Watchdog

NOVEMBER 21, 2018

News of data breaches, data vulnerabilities and compromised private information is released almost daily from businesses both small and large. Related: Europe’s GDPR ushers in new privacy era. Legislation has recently been proposed for individual states, addressing data privacy regulations head-on. If the U.S.

Privacy 133

Privacy GDPR Data Privacy Data collection 133

Schneier on Security

MARCH 2, 2020

Privacy International has the details : Key facts: Despite Facebook claim, "Download Your Information" doesn't provide users with a list of all advertisers who uploaded a list with their personal data. As a user this means you can't exercise your rights under GDPR because you don't know which companies have uploaded data to Facebook.

Personal data 124

Personal data GDPR Data collection Privacy 124

The Guardian Data Protection

FEBRUARY 7, 2019

User consent will be required before combining WhatsApp and Instagram account data Germany’s anti-monopoly regulator has ordered Facebook not to combine user data from its WhatsApp, Instagram and Facebook apps without consent, after a major three-year investigation into potentially anti-competitive actions.

Data collection 50

Data collection IT GDPR Privacy 50

Hunton Privacy

DECEMBER 20, 2017

The Guidelines aim to provide practical guidance and clarification on the transparency obligations introduced by the EU General Data Protection Regulation (“GDPR”). The transparency obligations require controllers to provide certain information to data subjects regarding the processing of their personal data.

GDPR 62

GDPR Personal data Privacy Communications 62

Data Protection Report

JUNE 4, 2018

Websites go dark, complaints are filed within an hour, European Commission suffers an embarrassing data leak, and the US Commerce Secretary warns about the unintended trade impact of the law – all in the first week of the GDPR. First complaints received within 48 minutes.

GDPR 40

GDPR Compliance Personal data Privacy 40

Hunton Privacy

SEPTEMBER 15, 2021

Following its departure from the European Union, the UK is no longer bound by EU law and may adapt its existing data protection regime, which is currently based on the EU General Data Protection Regulation (“GDPR”).

GDPR 109

GDPR Personal data Risk Communications 109

DLA Piper Privacy Matters

SEPTEMBER 6, 2023

Authors: Carolyn Bigg, Gwyneth To and Rachel De Souza Start preparing now to comply with India’s new data protection law. In contrast to the current position in India and the EU/UK GDPR, the DPDP Act makes no distinction between personal data and sensitive personal data, but this is quite similar to many other Asia data protection laws.

Personal data 111

Personal data GDPR Data breaches Compliance 111

Hunton Privacy

OCTOBER 24, 2022

Under the EU General Data Protection (the “GDPR”), biometric data qualifies as sensitive personal data and the processing thereof requires additional protection.

Data collection 72

Data collection Personal data GDPR Marketing 72

The Last Watchdog

MAY 21, 2020

Tracking is only harmless when there is no real data collected and stored; that’s impossible, isn’t it? Advertisers are adding new data nodes in order to gain a more holistic understanding of who you are as an audience and customer. Specific regulation on online fingerprinting is required.

Privacy 290

Privacy GDPR Risk Data collection 290

Data Protection Report

MAY 23, 2018

The wait is finally over—this Friday the European Union General Data Protection Regulation (GDPR) will come into force. However, the challenges of GDPR certainly don’t end on the date this law goes into implementation. Many of our clients ask us when and how they may be called upon to demonstrate compliance with the GDPR.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Hunton Privacy

OCTOBER 24, 2017

The responses address a variety of questions posed by both data protection authorities (“DPAs”) and aim to provide insight on and highlight issues surrounding transparency and international transfers. The notice requirement should cover passively collected and observed data from an individual. International Data Transfers.

GDPR 45

GDPR Compliance Privacy Data collection 45

Information Management Resources

APRIL 16, 2019

Some businesses hold large volumes of personal data because they believe it’s necessary for comprehensive identity and credential verification, but this practice can be risky.

Data collection 52

Data collection Personal data Security GDPR 52