DLA Piper Privacy Matters

AUGUST 23, 2021

In good news for organisations handling personal information, China’s Personal Information Protection Law (“ PIPL ”) was finalised on 20 August 2021, and will come into force on 1 November 2021. This aligns with other recent guidance putting clearer parameters around use of biometric data in China).

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Yet many organizations still struggle to meet compliance requirements, and EU data protection authorities do not hesitate to hand out penalties. Irish regulators hit Meta with a EUR 1.2

GDPR 79

GDPR Compliance Personal data Privacy 79

IT Governance

JUNE 30, 2022

Welcome to our June 2022 review of data breaches and cyber attacks. We identified 80 security incidents during the month, resulting in 34,908,053 compromised records. You can find the full list below, broken down into categories. Data breaches. Cyber attacks. Ransomware. Financial information. Cyber attacks.

Data breaches 136

Data breaches Ransomware Personal data Blockchain 136

Privacy and Cybersecurity Law

OCTOBER 4, 2021

For example, Singapore Personal Data Protection Act ( PDPA ) recommends certain adjustments to the MCCs. Last year, three overlapping privacy-related laws were consolidated into the Revised Personal Information Protection Act. South Korea.

Privacy 98

Privacy Personal data Data Privacy Government 98

Hunton Privacy

SEPTEMBER 13, 2016

Recently, the National Privacy Commission (the “Commission”) of the Philippines published the final text of its Implementing Rules and Regulations of Republic Act No. 10173, known as the Data Privacy Act of 2012 (the “IRR”). We previously reported on the preceding draft text of the IRR.

Data Privacy 61

Data Privacy Privacy Personal data Data breaches 61

AIIM

JANUARY 17, 2018

This is the eighth post in a series on privacy by Andrew Pery. You might also be interested in: Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law.

GDPR 83

GDPR Compliance Data collection Privacy 83

Hunton Privacy

JANUARY 15, 2015

On January 13, 2015, the French Data Protection Authority (the “CNIL”) published a Referential (the “Referential”) that specifies the requirements for organizations with a data protection officer (“DPO”) in France to obtain a seal for their data privacy governance procedures.

Data Privacy 40

Data Privacy Privacy Government Personal data 40

Security Affairs

MAY 12, 2021

After the introduction of CCPA and GDPR, much more attention is given to third-party risks, and the privacy terms and conditions users agree to. Global privacy regulations, such as the CCPA and GDPR, were enacted to ensure stricter standards when handling the personal data of consumers. Data breaches and other threats.

GDPR 94

GDPR Privacy Personal data Data breaches 94

Data Matters

NOVEMBER 4, 2020

Third, it creates a new category of businesses: those that voluntarily agree to be subject to the CCPA. Entities must annually buy sell, or share personal information of 100,000 consumers, not 50,000 as under the CCPA, to qualify as a business under the second prong of the test. New Rights for Sensitive Personal Information.

Privacy 122

Privacy B2B Sales Data breaches 122

Data Protection Report

JANUARY 16, 2020

CB(2) 512/19-20(03 ) (the Paper ) seeking views on changes to Personal Data (Privacy) Ordinance (Cap.486) The Paper sets out six proposed amendments to the PDPO: Introduction of a mandatory breach notification mechanism. Data users should have the right to appeal the fines, and be given appropriate time to do so; and.

Paper 56

Paper Personal data Data breaches Privacy 56

AIIM

JULY 24, 2018

This is the 11th post in a series on privacy by Andrew Pery. Data Privacy and Open Data: Secondary Uses under GDPR. Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. Three Critical Steps for GDPR Compliance.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

eSecurity Planet

APRIL 22, 2022

According to the Ponemon Institute and IBM, the global average cost of a data breach is $4.24 As the number and severity of data breaches continues to rise, organizations are recognizing that those costs are not theoretical. That’s where cyber insurance may be able to help. million and climbing. AI, ML Playing a Role.

Insurance 117

Insurance Ransomware Cybersecurity Marketing 117

Data Protection Report

JANUARY 16, 2020

CB(2) 512/19-20(03 ) (the Paper ) seeking views on changes to Personal Data (Privacy) Ordinance (Cap.486) The Paper sets out six proposed amendments to the PDPO: Introduction of a mandatory breach notification mechanism. Data users should have the right to appeal the fines, and be given appropriate time to do so; and.

Paper 40

Paper Personal data Data breaches Privacy 40

IT Governance

AUGUST 6, 2018

In our first blog ( sign up to the series here ) , we explore data breaches. We will consider why they happen, what you can do to reduce their likelihood and impact as well as which breaches need reporting to the supervisory authority and what information they will need from you. The human factor. Be prepared. Act quickly.

Data breaches 67

Data breaches Education GDPR Risk 67

Data Protection Report

APRIL 27, 2023

This could lead to disclosures of your business’s confidential information and also to breaches of contractual duties of confidentiality to third parties. Training data privacy infringements. Where output is going to be valuable, widely reproduced or disseminated, this latent IP infringement risk may make using it too risky.

Risk 97

Risk Personal data Privacy Data Privacy 97

eSecurity Planet

JANUARY 5, 2023

Also read: SANS Outlines Critical Infrastructure Security Steps as Russia, U.S. Given its broader availability combined with the right exploit, wiper malware could cause massive destruction in a short period of time, said Derek Manky, chief security strategist and VP of global threat intelligence at FortiGuard Labs. Trade Cyberthreats.

Security 145

Security Ransomware Cybersecurity Privacy 145

Data Matters

JUNE 11, 2018

Although the prospect of federal legislation on data privacy remains uncertain, states appear to be stepping up the range of their activity on privacy and security. The law also mandates free credit freezes in the event of a data breach from a credit reporting agency, a response to last year’s Equifax breach.

Privacy 60

Privacy Sales Data breaches Personal data 60

IT Governance

FEBRUARY 8, 2019

We recently claimed that DPOs (data protection officers) are “ the key to data breach response ”, but you could argue that they are the key to GDPR (General Data Protection Regulation) compliance in general. Processes special categories of data on a large scale. Need more GDPR help?

GDPR 61

GDPR Personal data Privacy Compliance 61

Hunton Privacy

DECEMBER 7, 2017

On December 1, 2017, the Centre for Information Policy Leadership (“CIPL”) at Hunton & Williams LLP submitted formal comments to the Article 29 Working Party (the “Working Party”) on its Guidelines on Personal Data Breach Notification (the “Guidelines”). Criteria to Consider in Assessing Breach Risk. Risk Assessment.

Data breaches 45

Data breaches Personal data GDPR Risk 45

Hunton Privacy

SEPTEMBER 21, 2016

Inform key persons and decision makers about the upcoming changes in order to assess the consequences of the GDPR on the company or organization. Document what personal data is stored, where it came from and with whom it is shared. Record data processing activities and consider undertaking an information audit.

GDPR 45

GDPR Privacy Personal data Data breaches 45

HL Chronicle of Data Protection

JULY 8, 2019

On 8 July 2019, the UK data protection authority (Information Commissioner’s Office; ICO) issued a notice of its intention to fine British Airways (BA) GBP 183.39 million) for infringements of the General Data Protection Regulation (GDPR). million (approx. ” ICO Enforcement Implications. What happens next?

GDPR 40

GDPR Security Personal data Data breaches 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

The GDPR applies to entities that are established in the EU, as well as entities not established in the EU that process the personal data of persons located in the EU in the context of either (i) offering goods or services to persons in the EU, or (ii) monitoring the behavior of persons in the EU.

GDPR 55

GDPR Privacy Personal data Sales 55

Collibra

DECEMBER 30, 2020

CCPA stands for California Consumers Privacy Act (2018), intended to enhance privacy rights and consumer protection for residents of California, United States. . The CCPA provides California residents with the right to know what personal data is being collected about them, whether it is sold or disclosed, and to whom.

Compliance 59

Compliance Sales Privacy Data Privacy 59

Data Protection Report

JULY 9, 2018

states have recently introduced and passed legislation to expand data breach notification rules and to mirror some of the protections provided by Europe’s newly enacted General Data Protection Regulation (“GDPR”). See our earlier post on the California Consumer Privacy Act (“CCPA”) here. Several U.S.

GDPR 40

GDPR Data breaches Personal data Insurance 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

The GDPR applies to entities that are established in the EU, as well as entities not established in the EU that process the personal data of persons located in the EU in the context of either (i) offering goods or services to persons in the EU, or (ii) monitoring the behavior of persons in the EU.

GDPR 40

GDPR Privacy Personal data Sales 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

The GDPR applies to entities that are established in the EU, as well as entities not established in the EU that process the personal data of persons located in the EU in the context of either (i) offering goods or services to persons in the EU, or (ii) monitoring the behavior of persons in the EU.

GDPR 40

GDPR Privacy Personal data Sales 40

Data Protection Report

MAY 23, 2018

We have shared below some interesting points that we’ve seen arising recently, all of which relate to how things are likely to develop from today onwards, including enforcement predictions, challenges related to operationalizing data subject access procedures, and how the GDPR may change the data privacy litigation landscape in Europe.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Thales Cloud Protection & Licensing

JANUARY 27, 2021

Data Privacy Day: Looking Back on the Privacy Events of 2020. Each year, the world observes Data Privacy Day on January 28th. This international effort recognizes how organizations might be using, collecting or sharing an individual’s personal information. Thu, 01/28/2021 - 06:42. GDPR Fines Increase.

Data Privacy 102

Data Privacy Privacy GDPR Encryption 102

DLA Piper Privacy Matters

APRIL 11, 2019

The CNIL reminds that the rules resulting from the Regulation do not exclude the application of the general obligations under the GDPR, notably regarding compliance with the general principles for processing personal data, data subject rights and international transfers. What are the requirements set forth by the Regulation?

Personal data 40

Personal data GDPR Access Compliance 40

DLA Piper Privacy Matters

MAY 16, 2018

However, if a German newspaper processes personal data of a French resident for journalistic purposes, then French law would not apply and the newspaper would only have to comply with the GDPR and German law requirements. Processing of the social security number. Data breach notification. Children’s consent.

GDPR 40

GDPR Personal data Compliance Data Privacy 40

HL Chronicle of Data Protection

SEPTEMBER 14, 2018

The provisions relating to specific processing of personal data (e.g. Until then, previously issued measures will continue to apply, to the extent that such measures are compatible with the GDPR; The processing of judicial data is allowed only when authorized by the law or by a regulation (the Decree indicates some relevant areas).

GDPR 40

GDPR Personal data Privacy Communications 40

Data Protection Report

JUNE 6, 2019

Unlike CCPA, the new law has no provisions relating to access or deletion or a private right of action relating to breaches. Although the bill has a similarly broad definition of “personal information” and gives consumers the right to request deletion of their data, the bill also introduces new obligations on companies as a “data fiduciary”.

Sales 40

Sales Privacy Insurance Manufacturing 40

DLA Piper Privacy Matters

JANUARY 13, 2020

The changes specifically introduce the following: Broader scope of prohibited content: in addition to the currently existing categories (e.g., defaming national integrity and unity), the new law prohibits publication of additional categories of content (e.g., New Personal Data Protection Law and Data Security Law.

Privacy 84

Privacy Security Personal data Compliance 84

IT Governance

AUGUST 21, 2018

Data breaches. What steps will the ICO (Information Commissioner’s Office) take to ensure organisations comply with the recently enforced GDPR (General Data Protection Regulation)? How will customers, suppliers and partners react to organisations that suffer a breach? What is the cost of a data breach?

Retail 66

Retail Data breaches GDPR Compliance 66

AIIM

MARCH 22, 2019

The relationship between data controllers and processors must be defined by a contract which “sets the subject-matter and duration of the processing, the nature and purpose of the processing, the type of personal data and categories of data subjects and the obligations and rights of the controller.”. 12, 2018; and.

GDPR 96

GDPR Risk Compliance Personal data 96

Thales Cloud Protection & Licensing

AUGUST 30, 2018

While the push for privacy is nothing new, privacy advocates, businesses and lawmakers in the U.S. have long been talking about protecting consumer privacy but no formal legislation materialized prior to CCPA. Right to DELETE your data. Right to know the categories of third parties with whom your data is shared.

Privacy 54

Privacy GDPR Sales Data breaches 54

Data Matters

SEPTEMBER 29, 2021

This emphasis on proportionality in discovery is particularly relevant at a time when the protection of privacy is of increasing concern in the United States and abroad. With the rise of Big Data, however, there has been a growing and well-founded concern that personal information might be used unethically or exposed improperly.

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97