IT Governance

OCTOBER 15, 2019

Any organisation that’s required to comply with the GDPR (General Data Protection Regulation) must conduct regular risk assessments. However, the GDPR is clear that data is also vulnerable to accidental or unlawful destruction, loss or disclosure. The GDPR risk assessment methodology. Get started with vsRisk.

GDPR 57

GDPR Risk Compliance Personal data 57

HL Chronicle of Data Protection

SEPTEMBER 14, 2018

101 of 10 August 2018 (the “Decree”) for the national implementation of General Data Protection Regulation (EU) 2016/679 (the “GDPR”) has been published in the Official Journal. Also, the Decree governs the transition from the current to the future regime. On 4 September, the Legislative Decree no.

GDPR 40

GDPR Personal data Privacy Communications 40

IT Governance

NOVEMBER 23, 2018

DPIAs (data protection impact assessments) are a type of risk assessment that identify the risks affecting the security of personal data, and work out their likely effects. It’s particularly important to carry one out when introducing new processes, systems or technologies for processing personal data. Who should conduct a DPIA?

GDPR 51

GDPR Personal data Risk Marketing 51

IT Governance

JUNE 19, 2019

The GDPR (General Data Protection Regulation) requires organisations to conduct a DPIA (data protection impact assessment) whenever processing is ‘likely to result in a high risk’ to the rights and freedoms of individuals. Damage : the effects on the individual if a data breach or privacy violation occurs.

GDPR 58

GDPR Personal data Risk Data breaches 58

HL Chronicle of Data Protection

SEPTEMBER 27, 2017

government introduced in Parliament the Data Protection Bill. The main aim of the bill is to implement the General Data Protection Regulation (EU) 2016/679 into U.K. Ensuring that the GDPR, as implemented by the bill, will continue to apply to the U.K. First and foremost, the bill applies the GDPR to U.K.

GDPR 40

GDPR Personal data Government Privacy 40

IT Governance

MARCH 28, 2018

Whatever the size and setting of your school, the General Data Protection Regulation (GDPR) places high expectations on protecting the personal data of your data subjects, especially children. They are the point of contact for data subjects and the Information Commissioner’s Office. What is a DPO?

GDPR 52

GDPR Personal data Compliance Data breaches 52

IT Governance

SEPTEMBER 4, 2019

Under the GDPR, DPIAs (data protection impact assessments) are mandatory for data processing that is “likely to result in a high risk to the rights and freedoms of data subjects” Effectively a type of risk assessment, DPIAs assess how these high-risk processing activities could impact data subjects.

Personal data 75

Personal data GDPR Risk Access 75

IT Governance

MAY 15, 2024

However, physical security is also an important aspect of information and data security. Matthew Peers, one of our GRC (governance, risk and compliance) consultants, helps organisations implement the Standard and prepare for ISO 27001 certification. I’d say that the separate category just filters out those controls better.

Security 52

Security Information Security Access Cloud 52

Data Protection Report

JUNE 29, 2018

On June 28, 2018, California lawmakers enacted the California Consumer Privacy Act of 2018 (the “CCPA”) a sweeping, GDPR-like privacy law which is intended to give California consumers more control over how businesses collect and use their data. Consumer access and data portability rights. Disclosure requirements.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

JUNE 29, 2018

On June 28, 2018, California lawmakers enacted the California Consumer Privacy Act of 2018 (the “CCPA”) a sweeping, GDPR-like privacy law which is intended to give California consumers more control over how businesses collect and use their data. Consumer Access and Data Portability Rights. Disclosure Requirements.

Privacy 40

Privacy GDPR Personal data Risk 40

IT Governance

AUGUST 6, 2018

In our first blog ( sign up to the series here ) , we explore data breaches. Across all sectors and organisation sizes, simple mistakes such as emailing and posting or faxing information to the wrong people top the Information Commissioner’s Office’s (ICO’s) quarterly statistics in data security incidents. The human factor.

Data breaches 51

Data breaches Education GDPR Risk 51

DLA Piper Privacy Matters

FEBRUARY 4, 2021

On 27 January 2021, the Belgian Data Protection Authority (“BDPA”) imposed a EUR 50,000 fine and an obligation to change its data processing activity on the company “ Nationale Dienst Voor Promotie van Kinderartikelen NV ”/” Service National de Promotion des Marques Enfantines SA ” (“Family Service”, its tradename).

Personal data 64

Personal data GDPR Marketing IT 64

Thales Cloud Protection & Licensing

JANUARY 16, 2020

Objectives of the Personal Data Protection Bill. Many privacy professionals consider the European Union’s General Data Protection Regulation (GDPR), which took effect in May 2018, as the cornerstone of privacy regulation. GDPR is harmonizing data protection and privacy requirements across the EU.

Personal data 24

Personal data Compliance Data breaches GDPR 24

Data Protector

OCTOBER 11, 2017

What follows below is an edited version of the debate in the House of Lords of the Second Reading of the Data Protection Bill, held on 10 October. Data is not just a resource for better marketing, better service and delivery. Data is used to build products themselves. It has become a cliché that data is the new oil.

GDPR 120

GDPR Personal data Government IT 120

erwin

APRIL 18, 2019

California Consumer Privacy Act (CCPA) compliance shares many of the same requirements in the European Unions’ General Data Protection Regulation (GDPR). Luckily, many organizations have already laid the regulatory groundwork for it because of their efforts to comply with GDPR. CCPA Compliance Requirements vs. GDPR FAQ.

GDPR 81

GDPR Compliance Privacy Personal data 81

DLA Piper Privacy Matters

APRIL 26, 2021

There are parallels here with the extra-territorial effect of the GDPR. High-risk AI systems are defined by a classification model that focuses on the risk associated with the product itself: A first category covers AI systems intended to be used as a safety component of products (or which are themselves a product).

Artificial Intelligence 114

Artificial Intelligence Risk Marketing GDPR 114

HL Chronicle of Data Protection

SEPTEMBER 14, 2018

This is the second installment in Hogan Lovells’ series on the California Consumer Privacy Act. Legislative history can speak volumes about those word choices, and the unique legislative history of the California Consumer Privacy Act of 2018 (CCPA) only highlights the importance of understanding the terms used in the act.

Privacy 40

Privacy Sales GDPR Personal data 40

DLA Piper Privacy Matters

OCTOBER 19, 2017

On 14 September the UK Government published the draft Data Protection Bill, to replace the Data Protection Act 1998 (DPA) and supplement the forthcoming General Data Protection Regulation (GDPR) in certain key areas. Extra safeguards for special categories of data. By Helen Hall.

GDPR 40

GDPR Compliance Personal data Government 40

Data Matters

JUNE 26, 2018

On June 25, 2018, California Secretary of State Alex Padilla announced that a potentially significant privacy initiative is eligible for the Nov. If passed, the ballot initiative — the California Consumer Privacy Act (CCPA) — would immediately make sweeping changes to California’s privacy laws. biometric data.

Privacy 60

Privacy GDPR Data breaches Sales 60

Data Matters

JULY 16, 2018

*Originally Published July 12, 2018 by Chambers and Partners Data Protection & Cyber Security 2018. There is a lot going on with privacy around the world. There ought to be a greater effort among policymakers to correlate what companies are required to do to protect privacy with actual, identified harms or abuses.

Privacy 74

Privacy Cloud Artificial Intelligence Data Privacy 74