Data Matters

JULY 16, 2020

The Court of Appeal considered what is meant by “damage” under section 13 of the DPA and held that damages should be available even without material damage or pecuniary loss as “control over data is an asset that has value.” 2) allows the court, exercising its discretion, to direct that a person may not act as a representative.

Personal data 92

Personal data GDPR Privacy Data Privacy 92

Collibra

MARCH 12, 2020

Businesses cannot discriminate against a consumer for exercising their rights. Consumers must submit a VCR to exercise their rights and business must respond within 45 days. CCPA and GDPR were just the beginning of a wave of data privacy regulations. 3) Data privacy compliance is interdisciplinary.

Data Privacy 59

Data Privacy Privacy Government Compliance 59

IBM Big Data Hub

JANUARY 22, 2024

Any company operating in the EU or handling EU residents’ data must adhere to GDPR requirements. The law outlines a set of data privacy rights for users and a series of principles for the processing of personal data. When the GDPR refers to data subjects, it means data subjects who reside in the EEA.

GDPR 86

GDPR Compliance Personal data Privacy 86

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Yet many organizations still struggle to meet compliance requirements, and EU data protection authorities do not hesitate to hand out penalties. Irish regulators hit Meta with a EUR 1.2

GDPR 80

GDPR Compliance Personal data Privacy 80

Hunton Privacy

NOVEMBER 1, 2022

On October 1, 2022, the Colorado Attorney General’s Office submitted an initial draft of the Colorado Privacy Act Rules (“CPA Rules”), which will implement and enforce the Colorado Privacy Act (“CPA”). Below are key examples of topics addressed by the proposed regulations. Summary of Proposed Regulations.

Privacy 78

Privacy Personal data Data collection Compliance 78

Thales Cloud Protection & Licensing

AUGUST 15, 2019

375 the California Consumer Privacy Act (CCPA), making California the first U.S. state to pass its own data privacy law. For example, data collected by an entity may not be associated with an individual but could identify a household. The CCPA, which will come into effect on Jan. Looking into to the future.

Privacy 92

Privacy GDPR Digital transformation Sales 92

Collibra

DECEMBER 30, 2020

Businesses are required to give consumers notice explaining their privacy practices and not discriminate against consumers for exercising their rights under the CCPA. The legislative text specifies a number of examples of PI, although declares that these are not exclusive. . Examples include typical identifiers such as: .

Compliance 59

Compliance Sales Privacy Data Privacy 59

IT Governance

OCTOBER 3, 2019

You must tell people when you’re collecting their personal information to give them the opportunity to exercise their data subject rights. These rights enable individuals to access the personal data organisations store on them and to challenge the way their information is used. Make sure people know they’re being recorded.

GDPR 110

GDPR Privacy Retail Personal data 110

AIIM

JULY 24, 2018

This is the 11th post in a series on privacy by Andrew Pery. Data Privacy and Open Data: Secondary Uses under GDPR. Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

Hunton Privacy

MARCH 11, 2019

On March 5, 2019, the Global Privacy Enforcement Network (“GPEN”), a global network of more than 60 data protection authorities (“DPAs”) around the world, published the results of its 2018 intelligence gathering operation on organizations’ data privacy accountability practices (the “Sweep”).

Privacy 74

Privacy Data Privacy GDPR Personal data 74

DLA Piper Privacy Matters

AUGUST 3, 2020

Also, under the current APPI, data subjects may exercise the right of deletion and cessation of use of personal data only if a PIH Operator [1] (i) has obtained the personal data by deceit or other improper means; or (ii) uses such personal data beyond the necessary scope to achieve the purpose of use [2].

Personal data 122

Personal data Data breaches Compliance Analytics 122

IT Governance

JUNE 13, 2019

In this blog, we explain how data protection by design and by default works, and provide examples of the steps you should take to achieve it. What is data protection by design? Examples of data protection by design. Examples of data protection by default.

GDPR 90

GDPR Personal data Compliance Privacy 90

Collibra

FEBRUARY 25, 2021

The General Data Protection Regulation (GDPR) mandates businesses to make provisions for EU citizens to exercise their right to access and control their personal data, including the export of personal data outside the EU. GDPR adds more granular and secure data governance requirements. Conclusion.

GDPR 40

GDPR Compliance Personal data Data Privacy 40

The Last Watchdog

MAY 11, 2020

There is, in fact, deep consensus about how to protect sensitive data and ensure the overall security of corporate networks. Still, over time, they’ve been woven into baseline data security regulations far and wide. NIST specs are echoed in the data loss disclosure and data privacy laws that have cropped up in many U.S.

Computer and Electronics 113

Computer and Electronics Encryption Cybersecurity Privacy 113

DLA Piper Privacy Matters

NOVEMBER 19, 2018

In the continuity of this accompaniment, the CNIL published on November 6th 2018 its DPIA guidelines supplementing the G29 Working Party’s opinion on DPIA along with its DPIA list which gives concrete examples of data processing operations likely to result in a high risk. This concerns: Health data.

Data Privacy 40

Data Privacy IT GDPR Privacy 40

Collibra

JANUARY 14, 2021

Data Privacy Day is celebrated on 28th of January every year. The new work-from-home norm and consumer contract tracing apps are 2020 solutions that further complicate how organizations’ have traditionally safeguarded data. Alternatively, you might want to use your GRC (Governance, Risk, and Compliance) tool for this.

Compliance 105

Compliance Government Risk Privacy 105

Data Matters

FEBRUARY 12, 2019

When California Governor Jerry Brown signed the California Consumer Privacy Act (CCPA) into law on June 28, 2018, there was broad agreement that revisions and clarifications were necessary. For example, a company might track a user’s web browsing to facilitate online advertisements, but not link the data to a specific consumer.

Sales 74

Sales Privacy Data Privacy Compliance 74

IT Governance

DECEMBER 6, 2023

As privacy professionals, we see consumers exercising their rights to withdraw consent to their data being processed via ‘opt out’ or ‘unsubscribe’ buttons, for example. Privacy is international It’s not just the EU GDPR, the UK GDPR and the DPA 2018 that we may need to ensure compliance with.

Data Privacy 59

Data Privacy Privacy GDPR IT 59

eSecurity Planet

SEPTEMBER 23, 2022

Also read: Security Compliance & Data Privacy Regulations. For example, in the Enron financial fraud, executives and board members claimed ignorance or that they could not understand the financial maneuvering of Enron’s CFO (chief financial officer). SOX: A Template of Success. SOX: Consequences.

Cybersecurity 107

Cybersecurity Compliance Risk Communications 107

Data Matters

SEPTEMBER 24, 2019

The GDPR was designed to harmonize data protection laws across Europe and to protect EU residents’ data privacy rights; and, its coming triggered significant privacy and data protection compliance activities amongst organizations doing business in the EU and working with the personal data of EU residents.

Personal data 68

Personal data GDPR Data Privacy Privacy 68

DLA Piper Privacy Matters

NOVEMBER 5, 2019

Episode 6: Further developments in PRC data privacy regulations. staff, data subjects, business partners etc.). Promotion of online mechanisms for users to exercise data subject rights (deletion, de-registration, access, correction, revoke consent etc.). avoid excessive data collection).

Data collection 45

Data collection Data breaches Privacy Information Security 45

ARMA International

JULY 17, 2023

So, caution should be exercised. It would be great if the whole exercise could be completed in a few days, but in reality, it can take several weeks — if not months — to track down dispersed data, evaluate it, decide on its fate, and enact that fate. The cost of senior lawyer time alone is considerable.

Information governance 52

Information governance Government Risk IT 52

Collibra

FEBRUARY 5, 2020

At Collibra, we’ve broken our data strategy down into three high level objectives: the infrastructure, data products and sharing what we learn. We want to be the leading example so our data strategy can be summarized as follows: “It is 2025 – do you know what your data office looks like?”. 3: Sharing is caring.

Marketing 49

Marketing Analytics Cloud Data Privacy 49

Data Protection Report

MAY 23, 2018

We have shared below some interesting points that we’ve seen arising recently, all of which relate to how things are likely to develop from today onwards, including enforcement predictions, challenges related to operationalizing data subject access procedures, and how the GDPR may change the data privacy litigation landscape in Europe.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Collibra

MAY 1, 2019

When it comes to personal data privacy, it can be hard to see the forest for the trees. Headlines and social media are dominated by data breaches, resulting in both reputational and financial loss. In all of this, the customer’s relationship with both personal data privacy and the organization itself can get lost.

Personal data 63

Personal data Data Privacy Privacy GDPR 63

DLA Piper Privacy Matters

MAY 23, 2023

Concerns about further disruption to transatlantic data transfers are by no means limited to Meta. The EDPB issued a binding determination to resolve the CSAs’ dispute over whether the DPC also should fine Meta and order it to bring its processing into compliance with the GDPR.

Personal data 59

Personal data GDPR Risk Privacy 59

Data Protection Report

DECEMBER 7, 2018

Rather, the duty arises under the common law rule that when an actor takes an affirmative action, that actor must exercise reasonable care to protect others from an unreasonable risk of harm from such act. The duty is one to exercise reasonable care, which may be different depending on the size and resources of a particular company.

Data breaches 40

Data breaches Computer and Electronics Risk Security 40

Gimmal

JUNE 10, 2022

DEAN: There’s a long answer to that, but I would say that the shortest answer possible is that they need to be brought current into the new legislative and data privacy regime that we’re seeing out there. It must all be in a central location, but policing that isn’t always easy. CRAIG: It’s going to become a lot more active.

Information governance 52

Information governance Government Privacy Risk 52

DLA Piper Privacy Matters

MAY 16, 2018

French rules adopted on the basis of GDPR apply to the extent the data subject is a French resident, even when the data controller is not established in France (with an exception for processing carried out for journalistic purposes or the purpose of academic, artistic or literary expression). Processing of criminal records.

GDPR 40

GDPR Personal data Compliance Data Privacy 40

Krebs on Security

MARCH 8, 2024

8, 2024, a company called Atlas Data Privacy Corp. sued Radaris LLC for allegedly violating “ Daniel’s Law ,” a statute that allows New Jersey law enforcement, government personnel, judges and their families to have their information completely removed from people-search services and commercial data brokers.

Privacy 241

Privacy Data Privacy Government Marketing 241

Hunton Privacy

NOVEMBER 2, 2012

It endorses the use of a Regulation, however, as the correct instrument for updating the data privacy framework in the EU. The Committee suggests that the use of such terminology could “create unrealistic expectations, for example in relation to search engines and social media.”

Data Privacy 40

Data Privacy Personal data Access Government 40

Data Protection Report

JUNE 4, 2018

Certain American news publications decided to shut themselves off to European users on their websites, a first series of complaints were filed against US tech giants and their subsidiaries, and the European Commission, in an embarrassing turn of events, was found to have had a data leak on one of its websites, Europa.eu.

GDPR 40

GDPR Compliance Personal data Privacy 40

eSecurity Planet

OCTOBER 24, 2023

The stakes are even higher for businesses, government and other organizations, as successful attacks can be devastating to operations and sensitive data. Exercise Caution with Emails The first two items on this list could be lumped together with a single warning: Don’t click. This will help improve your data privacy too.

Passwords 104

Passwords Encryption Authentication Phishing 104

Data Protection Report

DECEMBER 5, 2018

The MPS has long been involved in data security through its multi-level protection system under the Multi-Level Protection Measures, but it has not to date exercised a great deal of power over matters of personal information protection. The draft Guideline therefore represents the MPS’s most recent major foray into this area.

Information Security 40

Information Security Security Authentication Passwords 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

The CCPA does require businesses to disclose a significant amount of information in their online privacy policies, including some categories not required by the GDPR. Businesses are prohibited from discriminating against consumers who exercise their rights under the CCPA. 9. Anti-Discrimination / Compelled Consent.

GDPR 55

GDPR Privacy Personal data Sales 55

HL Chronicle of Data Protection

OCTOBER 3, 2018

The CCPA does require businesses to disclose a significant amount of information in their online privacy policies, including some categories not required by the GDPR. Businesses are prohibited from discriminating against consumers who exercise their rights under the CCPA. 9. Anti-Discrimination / Compelled Consent.

GDPR 40

GDPR Privacy Personal data Sales 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

The CCPA does require businesses to disclose a significant amount of information in their online privacy policies, including some categories not required by the GDPR. Businesses are prohibited from discriminating against consumers who exercise their rights under the CCPA. 9. Anti-Discrimination / Compelled Consent.

GDPR 40

GDPR Privacy Personal data Sales 40