IT Governance

DECEMBER 30, 2019

Welcome to the second part of our round-up of 2019’s information security stories. The second half of the year began with major data privacy news: the UK’s data protection authority, the ICO (Information Commissioner’s Office), announced its intention to fine British Airways and Marriott International a combined £282.6

Data breaches 78

Data breaches Personal data GDPR Ransomware 78

Collibra

JANUARY 28, 2020

(For comparison a gigabyte is 1,000,000,000 bytes) Let’s just say we create a lot of data every minute of every day. International Data Privacy Day is an effort to raise awareness around respecting, safeguarding and trusting data. A: International Data Privacy Day has come a long way since its inception, back in 1981.

Data Privacy 45

Data Privacy Privacy GDPR Risk 45

Data Protection Report

JANUARY 9, 2023

With the year 2022 firmly in the rear view, and as we look to start the new year in 2023, Norton Rose Fulbright’s Regulatory Compliance and Investigations team looks back and rounds up the five key cyber and data protection developments that took place in Southeast Asia in 2022. . in damages to its customer over data leak.

Cybersecurity 114

Cybersecurity Personal data Data breaches Ransomware 114

Security Affairs

NOVEMBER 2, 2020

. “The ICO has fined Marriott International Inc £18.4million for failing to keep millions of customers’ personal data secure.” ” In July 2019, the UK’s data privacy regulator announced that the giant hotel chain Marriott International faces a £99 million ($123 million) fines under GDPR over 2014 data breach. .

Data breaches 129

Data breaches Personal data GDPR Encryption 129

Hunton Privacy

APRIL 5, 2019

On January 25, 2019, Nigeria’s National Information Technology Development Agency (“NITDA”) issued the Nigeria Data Protection Regulation 2019 (the “Regulation”). Many concepts of the Regulation mirror the EU General Data Protection Regulation (“GDPR”).

Personal data 101

Personal data Privacy Compliance GDPR 101

Krebs on Security

MARCH 20, 2024

It’s not unusual for the data brokers behind people-search websites to use pseudonyms in their day-to-day lives (you would, too). Some of these personal data purveyors even try to reinvent their online identities in a bid to hide their conflicts of interest. 2019, through Alibaba in China. Cocofinder[.]com

Marketing 265

Marketing Cloud Privacy Data Privacy 265

Data Protection Report

MAY 16, 2019

On 15 April 2019, the ICO opened a public consultation on a draft code of practice titled Age Appropriate Design (the “Code” ). The Code will remain open for public consultation until 31 May 2019. 10-12: transition years. Default settings the Code requires that settings must be “high privacy” by default.

Personal data 40

Personal data Privacy GDPR Access 40

Data Matters

JANUARY 2, 2018

As we begin this New Year, here is list of the top 10 privacy and cybersecurity issues for 2018: EU GDPR. The May 25, 2018 effective date for the EU’s General Data Protection Regulation (GDPR) will no doubt be a central focus of 2018. 2018 could see the CJEU’s decision on the Privacy Shield for transfer of data to the U.S

Cybersecurity 68

Cybersecurity Privacy Data breaches GDPR 68

Collibra

NOVEMBER 5, 2019

The importance of getting privacy by design right – and the damage that getting it wrong can do – is illustrated by a new study which looked at how 120 of the most used Android apps in Belgium handle the personal data of their users. . Breaking the personal data rules. Adopting a privacy by design approach.

Privacy 61

Privacy Data Privacy Personal data Compliance 61

Data Protection Report

JANUARY 16, 2020

CB(2) 512/19-20(03 ) (the Paper ) seeking views on changes to Personal Data (Privacy) Ordinance (Cap.486) The Paper recognises that it is not practicable to set a uniform retention period applicable to all types of personal data held by various organisations for different purposes. 486) (the PDPO ).

Paper 56

Paper Personal data Data breaches Privacy 56

Collibra

NOVEMBER 5, 2019

The importance of getting privacy by design right – and the damage that getting it wrong can do – is illustrated by a new study which looked at how 120 of the most used Android apps in Belgium handle the personal data of their users. . Breaking the personal data rules. Adopting a privacy by design approach.

Privacy 40

Privacy Data Privacy Personal data Compliance 40

Hunton Privacy

MARCH 11, 2019

On March 5, 2019, the Global Privacy Enforcement Network (“GPEN”), a global network of more than 60 data protection authorities (“DPAs”) around the world, published the results of its 2018 intelligence gathering operation on organizations’ data privacy accountability practices (the “Sweep”).

Privacy 74

Privacy Data Privacy GDPR Personal data 74

Data Protection Report

JANUARY 16, 2020

CB(2) 512/19-20(03 ) (the Paper ) seeking views on changes to Personal Data (Privacy) Ordinance (Cap.486) The Paper recognises that it is not practicable to set a uniform retention period applicable to all types of personal data held by various organisations for different purposes. 486) (the PDPO ).

Paper 40

Paper Personal data Data breaches Privacy 40

IT Governance

JUNE 14, 2019

That’s the lowest in Western Europe and 10 percentage points lower than the EU average. The organisation, which is responsible for about half of the tech jobs created in Ireland over the past two years, is currently being investigated by the DPC over claims that its use of personal data to target online advertising violates the GDPR.

GDPR 71

GDPR Personal data Compliance Privacy 71

eDiscovery Daily

JUNE 16, 2019

Last week, TSC and its Working Group 6 on International Electronic Information Management, Discovery, and Disclosure (WG6) announced that The Sedona Conference Commentary and Principles on Jurisdictional Conflicts over Transfers of Personal Data Across Borders (“Commentary”) has been published for public comment.

Personal data 48

Personal data Privacy Data Privacy Education 48

IT Governance

DECEMBER 15, 2020

Lawyers are the real winners in the Yahoo data breach compensation case. million (about £91 million at the time) in compensation to users whose personal data was leaked. You can see more incidents from March in our list of data breaches and cyber attacks. The company, now owned by Verizon, agreed to pay $117.5

Data breaches 110

Data breaches Government Personal data Data Privacy 110

Data Matters

SEPTEMBER 29, 2021

This emphasis on proportionality in discovery is particularly relevant at a time when the protection of privacy is of increasing concern in the United States and abroad. With the rise of Big Data, however, there has been a growing and well-founded concern that personal information might be used unethically or exposed improperly.

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

DLA Piper Privacy Matters

OCTOBER 27, 2021

The claim related to a single email with attachments sent by the Defendant law firm on 17 July 2019. It was common ground that damages can, in principle, be recovered and other remedies obtained for breaches of data protection law and common law privacy torts, including simply for the distress caused, without specific pecuniary loss 3.

Retail 91

Retail Data breaches Personal data Privacy 91

Privacy and Cybersecurity Law

OCTOBER 22, 2018

Less than 6 months away from “Brexit Day”, two questions asked daily by our global clients are: How will Brexit affect data transfers to and from the UK? If anyone is able to solve what I will euphemistically call the “Article 10” dilemma, I welcome answers on a (non-literal) postcard! A Better Alternative for Data Privacy in the UK?

GDPR 53

GDPR Privacy Data Privacy Personal data 53

Privacy and Cybersecurity Law

OCTOBER 22, 2018

Less than 6 months away from “Brexit Day”, two questions asked daily by our global clients are: How will Brexit affect data transfers to and from the UK? If anyone is able to solve what I will euphemistically call the “Article 10” dilemma, I welcome answers on a (non-literal) postcard! A Better Alternative for Data Privacy in the UK?

GDPR 53

GDPR Privacy Data Privacy Personal data 53

DLA Piper Privacy Matters

APRIL 11, 2019

The Regulation has been published by the CNIL on 28 March 2019 and is accompanied by a FAQ which provides practical guidance to companies on how to comply with these requirements. What is the exact scope of such Regulation? employees, agents, interns and contractors). What are the requirements set forth by the Regulation?

Personal data 40

Personal data GDPR Access Compliance 40

Data Protection Report

JUNE 6, 2019

While CCPA-like bills in Washington and Texas failed to pass, Nevada passed its online privacy amendment and proposals in New York and Washington, DC appear to be gaining momentum. While it has some similarities to the California Consumer Privacy Act (CCPA), it contains notable differences. 10-word summary. 10-word summary.

Sales 40

Sales Privacy Insurance Manufacturing 40

Data Protection Report

OCTOBER 9, 2019

In its decision of 10 March 2016 the CNIL had imposed a fine of €100,000 on Google Inc. the right to the protection of personal data, not being an absolute right, must be balanced against other fundamental rights in line with the principle of proportionality. The CJEU has ruled in Google’s favour. The Court found that it did.

Personal data 40

Personal data Privacy GDPR Access 40

Data Protector

OCTOBER 11, 2017

What follows below is an edited version of the debate in the House of Lords of the Second Reading of the Data Protection Bill, held on 10 October. The Bill provides for her to continue to provide independent oversight, supervising our systems of data protection, but we are also significantly enhancing her powers.

GDPR 120

GDPR Personal data Government IT 120