Data Protection Report

SEPTEMBER 27, 2021

How do you balance sharing and protecting your business’ data? Unlike tangible assets, which can be protected primarily through physical means, intangible assets such as data require additional considerations. One key strategy to protect your business’ data is to characterize, and protect, that data as intellectual property.

Privacy 87

Privacy IT Security Access 87

IT Governance

MARCH 30, 2023

Article 17 of the GDPR (General Data Protection Regulation) plays a distinctive yet essential role in data protection law. It enshrines “the right to erasure” (sometimes referred to as “the right to be forgotten”), which allows people to request that an organisation deletes any personal data related to them.

GDPR 105

GDPR Personal data Compliance Government 105

Data Protection Report

JUNE 6, 2023

This MPN and its accompanying annexes set out details of TikTok’s non-compliance with data protection law and the reasons why the ICO considered that a fine was appropriate. However, where a DPO is appointed, it must be clear how the DPO specifically (as opposed to the privacy team or data controller generally) is to be contacted.

Privacy 97

Privacy GDPR Personal data Compliance 97

DLA Piper Privacy Matters

DECEMBER 3, 2021

The United Arab Emirates (“UAE”) has enacted its long awaited federal level data protection law. 45 of 2021 on the Protection of Personal Data Protection (“ PDPL ”), which was issued on 26 September 2021. This article examines some of its key features. When do businesses need to take action? Definitions.

Personal data 105

Personal data Data breaches GDPR Compliance 105

DLA Piper Privacy Matters

JANUARY 15, 2021

Data Subject Access Requests – no unqualified right to documents. Due to the dates on which the DSARs had been made, the relevant legislation was in fact the Data Protection Act 1998 ( “DPA 98” ). Comparable provisions are mirrored in the new regime under the DPA 2018 and GDPR.

Access 122

Access GDPR Personal data Retail 122

erwin

MAY 2, 2022

How to create a solid foundation for data modeling of OLTP systems. As you undertake a cloud database migration , a best practice is to perform data modeling as the foundation for well-designed OLTP databases. This makes mastering basic data modeling techniques and avoiding common pitfalls imperative. Data modeling basics.

Cloud 98

Cloud Insurance Metadata IT 98

Hunton Privacy

JUNE 8, 2020

On June 3, 2020, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth LLP published its report, What Good and Effective Data Privacy Accountability Looks Like: Mapping Organizations’ Practices to the CIPL Accountability Framework (“Report”). Canada, Europe, Asia-Pacific and Latin America.

Data Privacy 113

Data Privacy Privacy Compliance Risk 113

Hunton Privacy

JULY 14, 2020

On July 8, 2020, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth submitted its White Paper (the “Paper”) as input for the European Data Protection Board’s (the “EDPB”) future guidelines on data subject rights (“DSRs”) (the “Guidelines”).

Paper 108

Paper GDPR Education Access 108

HL Chronicle of Data Protection

MARCH 5, 2020

On January 17, The Belgian Data Protection Authority (DPA) published Recommendation no 01/2020 providing Guidance on direct marketing. The Recommendation provides a methodology on how to comply with the General Data Protection Regulation (GDPR) when conducting direct marketing. Necessity for Data Minimisation.

Marketing 59

Marketing GDPR Personal data Healthcare 59

Hunton Privacy

SEPTEMBER 2, 2020

On August 24, 2020, the Data Protection Authority (“DPA”) of the German federal state of Baden-Württemberg issued guidance on international data transfers following the judgment of the Court of Justice of the European Union (“CJEU”) in the Schrems II case (decision C-311/18 of July 16, 2020). Assessment of Data Transfers.

Personal data 143

Personal data GDPR Risk Encryption 143

The Last Watchdog

AUGUST 23, 2021

With many employees now working remotely, securing company data isn’t as straightforward as it used to be. Inconsistent data regulations. Countries have different data security laws, and these can get in the way of one another. For example, suppose you have workers in the EU. Related: Employees as human sensors.

Communications 220

Communications Cybersecurity GDPR Risk 220

Hunton Privacy

FEBRUARY 25, 2020

On February 10, 2020, the Belgian Data Protection Authority (the “Belgian DPA”) published its Recommendation 1/2020 on data processing activities for direct marketing purposes (the “Recommendation”). Purchase , Rental and Enrichment of Personal Data. Some of the key takeaways from the Recommendation include: Definition.

Marketing 109

Marketing Personal data GDPR Communications 109

DLA Piper Privacy Matters

NOVEMBER 29, 2021

On 16 November 2021, the French data protection supervisory authority (the “CNIL”) published a practical guide (“Guide”) on Data Protection Officers (“DPOs”). The DPO is the key contact for the CNIL and data subjects. The CNIL notes that nearly 30,000 DPOs have been appointed in France, covering over 80,000 organizations.

GDPR 116

GDPR Compliance Personal data Communications 116

Data Matters

JUNE 1, 2021

Last year, to address the increasing overlaps between data protection and antitrust enforcement, the UK launched the Digital Regulatory Cooperation Forum ( DRCF ). For example, this was a key question in a case recently referred to, and awaiting preliminary judgment from, the EU’s highest court.

Government 68

Government Privacy Communications Marketing 68

Collibra

MAY 14, 2020

In this forum, we’ve recently explored different aspects of achieving Data Intelligence: why forward-thinking companies need to create a Data Office , what kinds of ‘products’ might come out of that initiative, how data can play a critical role in guiding business decisions in uncertain times. .

Analytics 105

Analytics Marketing Compliance Risk 105

Hunton Privacy

NOVEMBER 7, 2022

On November 2, 2022, the ICO issued to the UK Department for Education (“ DfE ”) a formal reprimand following an investigation into the sharing of personal data stored on the Learning Records Service (“ LRS ”), a database which provides a record of pupils’ qualifications that the DfE has overall responsibility for.

Education 102

Education Personal data Access IT 102

Data Matters

NOVEMBER 16, 2020

On November 2, 2020, Singapore’s legislature finally approved amendments to the Personal Data Protection Act (PDPA). NEW mandatory data breach notification requirement. Consent to the processing of personal data will now be deemed to have been obtained based on. Note similarities to the General Data Protection Regulation.

Data Privacy 68

Data Privacy Privacy Data breaches Personal data 68

Data Matters

SEPTEMBER 6, 2022

Data protection impact assessments would also be required, including for products in existence when the law would come into effect. Passage of the bill comes on the heels of US Congressional inquiries about the use and protection of health data collected by mental health apps and an uptick in private litigation in the area.

Privacy 197

Privacy B2B Sales Compliance 197

Thales Cloud Protection & Licensing

NOVEMBER 24, 2020

Mitigating Ransomware Attacks – Decoupling Encryption Keys From Encrypted Data. Global GPS giant Garmin and leading camera-maker Canon are two recent examples of ransomware attacks on large businesses. For example, the average cost to remediate a ransomware attack costs US$1,448,458 and US$732,520 for those that did not pay the ransom.

Encryption 62

Encryption Ransomware Systems administration Cloud 62

DLA Piper Privacy Matters

FEBRUARY 23, 2022

The European Commission today presented its second instrument in the European Data Strategy; a “Regulation on harmonised rules on fair access to and use of data”, better known as the Data Act. In the proposal, “data” is broadly defined and contains both personal and non-personal data.

GDPR 97

GDPR Personal data IoT Access 97

The Last Watchdog

DECEMBER 20, 2022

For example, 60 percent of US employees trust their colleagues while 64 percent trust their employer. For those that choose to collect personal information from employees to measure performance, the data is grim. Additionally, Forrester data reveals that only 54 percent of US consumers believe their bank exhibits the trait of empathy.

Privacy 145

Privacy Risk Government Compliance 145

Data Protection Report

JUNE 22, 2022

UK GDPR Reform: government publishes response to consultation – likely to form basis of forthcoming UK Data Reform Bill. The Department for Culture, Media and Sport (DCMS) has finally published the UK government’s long-awaited response to the consultation on the future of the UK data protection regime. Reform of Article 22.

GDPR 144

GDPR Government Personal data Risk 144

Data Matters

JUNE 25, 2021

The European Data Protection Board (“ EDPB ”), adopted on 18 June 2021 its final recommendations describing how controllers and processors transferring personal data outside the European Economic Area (“ EEA ”) may comply with the Schrems II ruling (“ Final Schrems II Recommendations ”). STEP 1 – Mapping Exercise.

Personal data 79

Personal data Access Communications Cloud 79

Data Matters

DECEMBER 2, 2019

On 4 November 2019, the European Data Protection Board (EDPB), the EU-wide data supervisory authority, held a stakeholders’ event on data subject rights under the GDPR. Stakeholders noted some requests were too broad, in turn, making it difficult to identify which data subject right was being exercised (e.g.,

GDPR 68

GDPR Compliance Personal data Access 68

Collibra

MARCH 17, 2022

The process of collecting, analyzing, and managing data is vital to the success of any modern business. This Data Intelligence task, however, is easier said than done. This includes unifying and ensuring the trustworthiness of both existing and incoming data. The importance of Data Intelligence.

Digital transformation 98

Digital transformation Government Access IT 98

DLA Piper Privacy Matters

APRIL 25, 2023

15(3) GDPR must be interpreted as requiring a data controller to provide the data subject with a copy of his or her personal data, even where the data subject requests the copy for purposes unrelated to data protection. In particular, the AG took the view that Art. 12(5) and Art. 12(5) and Art. 12(5) and Art.

Access 52

Access GDPR Personal data IT 52

Data Matters

AUGUST 9, 2022

They include several real world examples informed by the California Office of the Attorney General’s (OAG) enforcement experiences over the last two years; indeed two of the most senior attorneys in charge of CCPA enforcement at the OAG—Stacey Schesser and Lisa Kim—played a significant role in drafting these regulations. 11 CCR § 7012(e)(6).

Privacy 88

Privacy Sales Analytics Compliance 88

Data Matters

NOVEMBER 11, 2020

Privacy Shield program (“Privacy Shield”) and potentially required supplementary protections to be implemented when Standard Contractual Clauses (“SCCs”) are used to ensure an ‘essentially equivalent’ level of data protection. In the Schrems II decision, the CJEU assessed the degree of data access by U.S.

Personal data 126

Personal data GDPR Privacy Compliance 126

CILIP

MARCH 18, 2024

The Monitor is a community operated map, overseen by CILIP, and we use the data that you provide, as the starting point for writing to local authorities. Find out more Published: March 2024 More from Information Professional News In depth Interview Insight This reporting is funded by CILIP members.

Libraries 82

Libraries Risk Sales Government 82

DLA Piper Privacy Matters

MARCH 6, 2023

Authors: Heidi Waem and Simon Verschaeve On 21 February 2023, the Litigation Chamber of the Belgian Data Protection Authority ruled on a case relating to the lawfulness of a geolocation tracking system for employee vehicles used by a public authority. f) GDPR) as a legal basis for processing vehicle tracking data by public authorities.

GDPR 98

GDPR Personal data Compliance IT 98

DLA Piper Privacy Matters

JULY 8, 2020

On the 6 th of July 2020, the Dutch Data Protection Authority ( Autoriteit Persoonsgegevens , “Dutch DPA“) published its decision to impose a fine of 830,000 EUR on Stichting Bureau Krediet Registratie (BKR). Article 12(2) GDPR states that the controller shall facilitate the exercise of, inter alia, the right of access (Article 15 GDPR).

Access 98

Access GDPR Personal data IT 98

IT Governance

JUNE 13, 2019

If your organisation is subject to the GDPR (General Data Protection Regulation) , you’re probably aware of your requirement to “implement appropriate technical and organisational measures” to protect the personal data you hold. An essential principle of this is data protection by design and by default.

GDPR 90

GDPR Personal data Compliance Privacy 90

Privacy and Cybersecurity Law

JULY 26, 2021

On July 5, 2021, the Italian supervisory authority (“ Garante ”) published an injunction against a company operating a food delivery app (“ Company ”) over the processing of riders’ personal data with respect to the use of algorithms for the management of the orders. Retention period. Security measures in place.

Personal data 52

Personal data GDPR e-Delivery Communications 52

Collibra

JANUARY 14, 2021

Data Privacy Day is celebrated on 28th of January every year. The new work-from-home norm and consumer contract tracing apps are 2020 solutions that further complicate how organizations’ have traditionally safeguarded data. 5 Steps to build an enterprise data protection framework. Identify business data owners.

Compliance 105

Compliance Government Risk Privacy 105

DLA Piper Privacy Matters

OCTOBER 7, 2021

The Middle East’s data protection regulatory landscape is complex, and continues to develop with Saudi Arabia’s ( KSA ) newly published Personal Data Protection Law ( PDPL ). While the PDPL contains the main features of a modern data protection law, it cannot be considered a direct analogue of the GDPR. Deceased’s data.

Personal data 96

Personal data Compliance Computer and Electronics IoT 96

Collibra

MAY 5, 2020

Every business journal has displayed hyperbolic headlines or similar that proclaims, “The Future Is Digital,” “Technology Has Taken Over Our Lives,” or “Data Is the New Oil.” In some ways, this is every data citizen’s dream. Because of this, we are generating data at unprecedented rates. They need data governance. .

Data Privacy 71

Data Privacy Government Privacy Compliance 71

Hunton Privacy

JANUARY 28, 2019

On January 22, 2019, the European Data Protection Board (“EDPB”) issued a report on the Second Annual Review of the EU-U.S. Issuance of guidance for EU individuals on exercising their rights under the Privacy Shield, and for U.S. Privacy Shield (the “Report”). Although not binding on EU or U.S. authorities is needed in this regard.

Privacy 69

Privacy Compliance IT Information Security 69