Data Protection Report

OCTOBER 3, 2019

BoE publish high level findings of the financial sector (“sector”) cyber simulation exercise. Exercise overview. The exercise explored the sector’s resilience to a major cyber incident impacting the UK. The exercise demonstrated the sector’s ability to respond to a dynamic and challenging disruption simulation.

Communications 40

Communications Marketing Risk IT 40

Data Matters

AUGUST 10, 2023

Securities and Exchange Commission (SEC or Commission) proposed new rules for broker-dealers (Proposed Rule 15(1)-2) and investment advisers (Proposed Rule 211(h)(2)-4) on the use of predictive data analytics (PDA) and PDA-like technologies in any interactions with investors.

Analytics 147

Analytics Communications Privacy Security 147

Security Affairs

SEPTEMBER 17, 2023

One of Thailand’s major digital financial platforms, CardX , recently disclosed a data leak that affected their customers. CardX recommends that customers keep track of transactions involving their accounts and exercise caution to avoid any potential fraud.

Cybersecurity 129

Cybersecurity Access Security IT 129

Data Protector

AUGUST 17, 2020

One of the Government's core objectives throughout the Brexit negotiations has been to respect data protection rights, slash Brussels' red tape and allow the United Kingdom to be a competitive safe haven for businesses all over the world. This is a process that would never end.

Privacy 156

Privacy GDPR Personal data Computer and Electronics 156

Krebs on Security

JULY 19, 2021

Browse the comments on virtually any story about a ransomware attack and you will almost surely encounter the view that the victim organization could have avoided paying their extortionists if only they’d had proper data backups. We have backups, the data is there, but the application to actually do the restoration is encrypted.’

Ransomware 347

Ransomware Encryption Insurance Cybersecurity 347

Data Protector

AUGUST 17, 2020

It is possible that the European Commission will fail to provide the UK with a data protection adequacy assessment by the end of the year. My experience of using SCCs over the past few decades is that few organisations take much, if any, notice of the clauses once they have been incorporated into a data processing contract.

GDPR 120

GDPR Personal data Government Privacy 120

Data Breach Today

SEPTEMBER 25, 2020

But an exercise run by Tribune Publishing Co. created a searing backlash after its phishing exercise tempted employees with bogus bonuses in a year in which they had already endured financial hardships. Employees Outraged at Phishing Test Teasing a Bonus Training employees to resist phishing emails is key to preventing compromises.

Phishing 279

Phishing IT 279

Hunton Privacy

AUGUST 10, 2023

On August 9, 2023, India’s upper house ( i.e. , Rajya Sabha) passed the Digital Personal Data Protection Bill (“DPDPB”), two days after India’s lower house ( i.e. , Lok Sabha) passed the legislation. The DPDPB now heads to India President Droupadi Murmu for signature.

Personal data 52

Personal data Data breaches Government Access 52

The Guardian Data Protection

OCTOBER 17, 2023

Data supplied to Biobank is not for sale, it’s not for trivial or suspect use, it’s for the good of humankind – and yet I had to jump through hoops to offer it I delight in messages from UK Biobank , making me feel useful for minimal effort.

Sales 81

Sales Education Privacy IT 81

Hunton Privacy

SEPTEMBER 21, 2023

362 (“Act”), a bill that would impose new requirements on data brokers and grant residents new rights designed to facilitate control over their personal data. The Act would grant California consumers the right to request that data brokers (1) delete and (2) limit the further sale and sharing of consumers’ personal data.

Insurance 69

Insurance Personal data Sales Compliance 69

AIIM

APRIL 13, 2021

Technology and apps that are helping to prevent illness, accidents, and crime also happen to collect a vast amount of personal data. Prompted by new concerns about digital privacy and ethics, The State of Virginia recently became the second state, behind California, to adopt a comprehensive consumer data privacy law.

Data Privacy 158

Data Privacy Privacy Artificial Intelligence Personal data 158

Security Affairs

SEPTEMBER 20, 2022

American Airlines disclosed a data breach, threat actors had access to an undisclosed number of employee email accounts. American Airlines recently suffered a data breach, threat actors compromised a limited number of employee email accounts. SecurityAffairs – hacking, data breach). Pierluigi Paganini.

Data breaches 92

Data breaches Cybersecurity Phishing Access 92

IT Governance

APRIL 27, 2018

This week, we discuss TSB’s chaotic system upgrade, a security flaw in electronic hotel locks and a major NATO cyber security exercise. The problems started last weekend, when Lloyds transferred its customer data from the IT system of its former owners, Lloyds, to its new owners, Sabadell. Here are this week’s stories.

Military 49

Military Manufacturing Information Security Access 49

Schneier on Security

MARCH 2, 2020

Privacy International has the details : Key facts: Despite Facebook claim, "Download Your Information" doesn't provide users with a list of all advertisers who uploaded a list with their personal data. As a user this means you can't exercise your rights under GDPR because you don't know which companies have uploaded data to Facebook.

Personal data 125

Personal data GDPR Data collection Privacy 125

Hunton Privacy

MARCH 1, 2024

On February 28, 2024, the European Data Protection Board (“EDPB”) announced the launch of its latest Coordinated Enforcement Framework action on the right of access. The results will then be analyzed in a coordinated manner and the authorities will decide on possible further supervision and enforcement actions.

Access 61

Access IT 61

Hunton Privacy

AUGUST 30, 2022

On August 16, 2022, California Assembly Member Cooley introduced amendments to Assembly Bill 1102 that would extend the California Consumer Privacy Act’s (“CCPA’s”) temporary exemptions for HR and B2B data for an additional two years – until January 1, 2025. These prohibitions would remain in effect until January 1, 2026.

B2B 108

B2B Privacy IT 108

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Yet many organizations still struggle to meet compliance requirements, and EU data protection authorities do not hesitate to hand out penalties. Irish regulators hit Meta with a EUR 1.2 billion fine in 2023.

GDPR 84

GDPR Compliance Personal data Privacy 84

The Guardian Data Protection

MAY 11, 2022

Prof Ben Goldacre cited risks of deanonymisation as his main reason for withdrawing his consent The author of a government review into medical data sharing personally opted out of the aborted plan to share GP health data , a parliamentary committee has heard.

Risk 69

Risk Government Privacy 69

DLA Piper Privacy Matters

JULY 13, 2021

Followers of Privacy Matters will be familiar with the case of Lloyd v Google LLC , which raises important issues as to the recoverability of compensation for breaches of data protection law, and is likely to be pivotal to the mass claims landscape in the UK.

Privacy 105

Privacy IT 105

Security Affairs

AUGUST 31, 2023

Also, the credentials could have been used to gain initial access into corporate networks to deploy ransomware, steal or sabotage internal documents, or gain access to user data. The data was publicly accessible for 5 months, as the leak was first indexed by IoT search engines on January 31st, 2023.

Passwords 136

Passwords Healthcare Manufacturing Access 136

IT Governance

MARCH 30, 2023

Article 17 of the GDPR (General Data Protection Regulation) plays a distinctive yet essential role in data protection law. It enshrines “the right to erasure” (sometimes referred to as “the right to be forgotten”), which allows people to request that an organisation deletes any personal data related to them.

GDPR 105

GDPR Personal data Compliance Government 105

Hunton Privacy

JANUARY 2, 2019

On December 28, 2018, the French Data Protection Authority (the “CNIL”) published guidance regarding the conditions to be met by organizations in order to lawfully share personal data with business partners or other third parties, such as data brokers. See last bullet point below.).

Personal data 109

Personal data Data collection Marketing Communications 109

Data Protector

OCTOBER 13, 2020

There is an ongoing debate on the rights that data controllers should have, compared with the rights that private individuals should have. There’s also an ongoing debate on what role our national Data Protection supervisory authority should play in developing and enforcing privacy laws. Data protection should be fun.

GDPR 156

GDPR Privacy Compliance Access 156

Security Affairs

MARCH 12, 2023

Experts warn that employees are providing sensitive corporate data to the popular artificial intelligence chatbot model ChatGPT. have provided company data to the popular chatbot model since it launched. have provided company data to the popular chatbot model since it launched. million workers at companies across industries.

Risk 96

Risk Artificial Intelligence Privacy Personal data 96

Data Protection Report

SEPTEMBER 23, 2021

The declining cost of electronic data storage may have caused some company executives to conclude that retaining personal data forever is “cheap.” The matter involved one of France’s largest insurers, SGAM AG2R LA MONDIALE, which was subject to an inspection by the French data protection authority (the CNIL), in 2019.

Personal data 110

Personal data Insurance GDPR Record destruction 110

Enterprise Software Blog

JUNE 27, 2023

as a Preview component, is a companion container for UI actions that may be used independently or in conjunction with the Data Chart and Category Chart components. This allows you to simply select from a predefined set of properties on the chart to perform deeper data analysis on the data displayed in the chart.

Analytics 52

Analytics IT 52

DLA Piper Privacy Matters

DECEMBER 3, 2021

The United Arab Emirates (“UAE”) has enacted its long awaited federal level data protection law. 45 of 2021 on the Protection of Personal Data Protection (“ PDPL ”), which was issued on 26 September 2021. This article examines some of its key features. What does the PDPL cover and who does it apply to? Definitions.

Personal data 105

Personal data Data breaches GDPR Compliance 105

DLA Piper Privacy Matters

JANUARY 15, 2021

Data Subject Access Requests – no unqualified right to documents. Due to the dates on which the DSARs had been made, the relevant legislation was in fact the Data Protection Act 1998 ( “DPA 98” ). Comparable provisions are mirrored in the new regime under the DPA 2018 and GDPR.

Access 122

Access GDPR Personal data Retail 122

HL Chronicle of Data Protection

JULY 7, 2020

The Dutch Data Protection Authority (DPA) issued a EUR 830,000 (approximately USD 937,000) fine against the Dutch Credit Registration Bureau (BKR) for violating data subject rights. The fine stems from BKR’s practice of charging fees and discouraging individuals who wanted to access their personal data.

GDPR 112

GDPR Personal data Data collection Access 112

OpenText Information Management

OCTOBER 19, 2022

It’s important to exercise sound cybersecurity best practices to protect your organization’s sensitive and valuable information against outside hackers and cybercriminals that are always identifying new ways to get to your data. October is Cybersecurity Awareness Month.

Cybersecurity 119

Cybersecurity Compliance Security 119

Hunton Privacy

JULY 14, 2020

On July 8, 2020, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth submitted its White Paper (the “Paper”) as input for the European Data Protection Board’s (the “EDPB”) future guidelines on data subject rights (“DSRs”) (the “Guidelines”).

Paper 108

Paper GDPR Education Access 108

OpenText Information Management

JANUARY 30, 2023

Businesses strive to compete in today’s market by exercising cost leadership and delivering a winning proposition. Success lies in the organizational knowledge and data locked within its people and information silos. Knowledge Management solutions such as Cognitive Search are essential to solve challenges faced in business today.

Marketing 104

Marketing Customer Experience Digital transformation IT 104

Hunton Privacy

APRIL 22, 2020

On April 21, 2020, the European Data Protection Board (“EDPB”) adopted Guidelines on the processing of health data for scientific purposes in the context of the COVID-19 pandemic. National legislation may also provide an appropriate legal basis for the processing of health data and a derogation to the Article 9 prohibition.

GDPR 96

GDPR Personal data IT Privacy 96

Collibra

OCTOBER 4, 2023

To help federal agencies maximize innovation efforts, Collibra and Accenture Federal Services recently hosted ‘Enabling a Federal Data Mesh ,’ a webinar to demonstrate the data mesh experience and illustrate how it can accelerate data discovery and speed time-to-value for federal agencies.

Government 74

Government Data science Analytics Access 74

Data Protection Report

JUNE 6, 2023

This MPN and its accompanying annexes set out details of TikTok’s non-compliance with data protection law and the reasons why the ICO considered that a fine was appropriate. However, where a DPO is appointed, it must be clear how the DPO specifically (as opposed to the privacy team or data controller generally) is to be contacted.

Privacy 97

Privacy GDPR Personal data Compliance 97

Security Affairs

AUGUST 21, 2021

The US Cybersecurity and Infrastructure Security Agency (CISA) released guidance on how to prevent data breaches resulting from ransomware attacks. “All organizations are at risk of falling victim to a ransomware incident and are responsible for protecting sensitive and personal data stored on their systems. Pierluigi Paganini.

Data breaches 113

Data breaches Ransomware Encryption Cybersecurity 113

Hunton Privacy

FEBRUARY 2, 2022

On January 28, 2022, in celebration of Data Privacy Day, the Colorado Attorney General’s Office issued prepared remarks from Colorado Attorney General Phil Weiser and published guidance on data security best practices. Lastly, it will examine the degree to which the company vets and monitors its vendors’ data security practices.

Privacy 102

Privacy Security Data breaches Ransomware 102