DLA Piper Privacy Matters

JANUARY 15, 2021

Data Subject Access Requests – no unqualified right to documents. A collateral purpose of the requestor wanting the material to assist in litigation is not an absolute exemption to the DSAR obligations [2] , but it is a relevant factor in the exercise of the court’s discretion.

Access 122

Access GDPR Personal data Retail 122

Security Affairs

MARCH 12, 2023

This percentage could rapidly increase in the next months with the integration of the technology in multiple services, for example through the use of ChatGPT API. In general, it’s always important to exercise due diligence when discussing sensitive information online. “Since ChatGPT launched publicly, 5.6%

Risk 97

Risk Artificial Intelligence Privacy Personal data 97

AIIM

AUGUST 8, 2019

My doctor wrote a prescription for a stronger analgesic, advised me to get more exercise, and sent me on my way. And that is the challenge of authoring highly polished, high-impact documents. Pharmaceutical and Life Science are good examples of industries that are feeling the pain. Better in fact. only I’d taken action sooner!

Healthcare 86

Healthcare IT Digital transformation 86

Data Matters

SEPTEMBER 6, 2022

The OAG issued its first CCPA enforcement fine, updated CCPA enforcement examples on the OAG’s CCPA webpage, and made related statements to the press regarding what we can expect in the future from the OAG with respect to CCPA enforcement. New CCPA Enforcement Case Examples – Opt Outs, GPC, Clarity & Functionality Are Top of Mind.

Privacy 197

Privacy B2B Sales Compliance 197

The Texas Record

MARCH 31, 2021

For example, if you have interrelated records with different retention periods that have a likelihood of being tied to investigations, litigation, studies, public information requests, audits, and consequently destruction holds or freezes, consider using the bucketing strategy to avoid the separation of those documents.

Records Management 98

Records Management Government Risk Archiving 98

ForAllSecure

DECEMBER 1, 2022

The target of interest for this example comes from Philipp Opperman's amazing " BlogOS ". The main idea with this harness is to initialize the heap object with a random size, then exercise the other functions at random. Of course, we still have to abide by the documentation since these functions are marked unsafe. The Target.

Security 52

Security Libraries Data structuring Metadata 52

eSecurity Planet

DECEMBER 9, 2021

Document the incident response process as a plan. For example, we might nominate: The IT security manager to handle a ransomware incident; Our external accountant to investigate financial fraud; or. Some of us don’t formally document our processes. Then we must effectively circulate the incident response documents.

Insurance 120

Insurance Ransomware Data breaches Cloud 120

Security Affairs

SEPTEMBER 15, 2023

For example, camera access is reasonable for a camera app or a social media app that allows users to capture and share photos. Purpose: The primary purpose of this permission is to allow the app to access files, documents, images, or other data stored on the device’s external storage.

Privacy 105

Privacy Access IT Security 105

Hunton Privacy

NOVEMBER 1, 2022

Below are key examples of topics addressed by the proposed regulations. Right to Request to Exercise Personal Data Rights (Rule 4.02 – Rule 4.07; 6.11). Businesses are required to document and maintain records of all consumer data rights requests, in a readable format, for at least twenty-four (24) months.

Privacy 78

Privacy Personal data Data collection Compliance 78

Adam Shostack

APRIL 15, 2021

A threat model is a collaborative security exercise where we evaluate and validate the design and task planning? This exercise involves structured thinking about potential security vulnerabilities that could adversely affect your service.” Note that the product team is generating documentation and bringing it for review.

Paper 45

Paper Security IT 45

eSecurity Planet

SEPTEMBER 23, 2022

For example, in the Enron financial fraud, executives and board members claimed ignorance or that they could not understand the financial maneuvering of Enron’s CFO (chief financial officer). In an ideal world, a team should also have the time to perform drills or tabletop exercises to simulate an event and practice the reporting process.

Cybersecurity 109

Cybersecurity Compliance Risk Communications 109

IBM Big Data Hub

JANUARY 22, 2024

Returning to a previous example, a company collecting phone numbers for marketing purposes would be a controller. An organization must establish and document its legal basis before collecting any data. Examples include conducting background checks on employees or tracking IP addresses on a corporate network for cybersecurity purposes.

GDPR 92

GDPR Compliance Personal data Privacy 92

Unwritten Record

AUGUST 2, 2022

Army’ 3rd Armd Div Winter Shield Exercise plan the day’s reconnaissance during field exercise in Bavaria in West Germany. during the US Army’s Winter Shield exercise is played as realistically as possible. German and American Armies worked together on Winter Shield Exercise in Bavaria, West Germany.

Military 52

Military Archiving Libraries Government 52

IT Governance

MARCH 20, 2018

Recital 63 of the GDPR states, “a data subject should have the right of access to personal data which have been collected concerning him or her, and to exercise that right easily and at reasonable intervals, in order to be aware of, and verify, the lawfulness of the processing.”. D ata subject access request procedures under the GDPR.

GDPR 77

GDPR Access Personal data Compliance 77

AIIM

JANUARY 14, 2021

This can comprise increased interactions, team-building exercises, quizzes, and collaborations. This can be documented and preserved as part of the organization's knowledge library. Lead by Example. You must lead by example and show that it's equally important for everyone to do it.

Communications 158

Communications Access Libraries Education 158

DLA Piper Privacy Matters

APRIL 25, 2023

Also, the AG states that in the context of a doctor-patient relationship, Article 15(3) GDPR cannot be interpreted as conferring on the data subject a general right to obtain a full copy of the documents included in his or her medical file.

Access 52

Access GDPR Personal data IT 52

DLA Piper Privacy Matters

NOVEMBER 29, 2021

Document properly the processing activities. Some guidance is provided on how to ensure that the DPO can perform his or her duties independently without receiving any instruction to exercise his/her mission, without conflict of interests and with real effectiveness for the organization.

GDPR 116

GDPR Compliance Personal data Communications 116

IT Governance

FEBRUARY 28, 2018

Under the GDPR, you are required to document your data processing activities. This method also enables you to assess the risks in your data processing activities and identify where controls are required, for example, assessing privacy and data security risks. One way to do this is to map your organisation’s data flows.

Privacy 68

Privacy GDPR Personal data Compliance 68

ARMA International

MAY 16, 2022

For example, a previous box management system utilized by our office did not support a consistent format for data entry and did not require key information. Examples include: Setting your budget. Document how the current system works. This will serve as your specifications document. Your current system may be outdated.

Records Management 79

Records Management IT Security Communications 79

Data Matters

JANUARY 31, 2022

The CMA has statutory investigative powers including powers to compel any person to attend a specified place to give evidence to the CMA; to produce specified documents or categories of documents that are in that person’s custody or control; and to supply specified forecasts, estimates, returns, or other information in a specified form and manner.

Marketing 78

Marketing Privacy IT 78

Troy Hunt

NOVEMBER 3, 2022

The API is actually pretty simple: plug in an email address, get a result, and that's a very clearly documented process. For example, how do you cancel a subscription once it's started? — Troy Hunt (@troyhunt) September 29, 2022 This was a non-trivial exercise. Any suggestions on a service?

Data breaches 118

Data breaches IT 118

IT Governance

NOVEMBER 8, 2018

The EU’s GDPR (General Data Protection Regulation) gives data subjects the right to access their personal data from data controllers that are processing it and “to exercise that right easily and at reasonable intervals, in order to be aware of, and verify, the lawfulness of the processing”.

GDPR 72

GDPR Access Personal data Compliance 72

AIIM

JULY 24, 2018

For example, under GDPR data subjects and/or regulators may now pursue direct remedies against data processors in the event of infringement of obligations, whereas such remedies did not exist under the prior data privacy regulation. Clustering that categorizes documents based on their similarity and relationship.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

Lenny Zeltser

JANUARY 6, 2021

Be sure to exercise caution when experimenting with real-world malware like this.). For example, you’ll find a variety of tools for static properties analysis, including FLOSS , which helps identify risky API calls in Windows malware, as documented in a Malware Triage post by Xavier Mertens.

Metadata 145

Metadata IT Access Security 145

erwin

MAY 2, 2022

I’m not proposing that business logic be held in the database, but it needs to be documented in the data model even if it will be implemented in application code. No matter where you implement it, you must fully document the business requirements in order to produce an effective final result. Figure 3: Example sentence diagram.

Cloud 98

Cloud Insurance Metadata IT 98

Hunton Privacy

SEPTEMBER 2, 2020

The DPA calls on companies in its jurisdiction to assess and document the necessity of the transfer, rely on reasonable alternative transfer mechanisms and/or select a contractual partner/service provider that would reduce the risks associated with the transfer.

Personal data 143

Personal data GDPR Risk Encryption 143

Hunton Privacy

MARCH 17, 2017

The CNIL’s methodology notes that, under the GDPR, organizations will have to keep full internal documentation of their data processing activities. Pending that service, organizations may consult, by way of example, the French data breach notification form used by telecommunications providers to notify their breaches.

GDPR 75

GDPR Personal data Compliance Privacy 75

Data Matters

JUNE 25, 2021

allow more flexibility in carrying out the assessment of third country laws in Step 3 by being able to take into account practice in the third country as well as the documented practical experience of the data importer. STEP 1 – Mapping Exercise. and so avoid having to enter into SCCs with such consumers.

Personal data 79

Personal data Access Communications Cloud 79

DLA Piper Privacy Matters

DECEMBER 3, 2021

However, businesses that are not used to compliance with laws like the GDPR may find some of the new obligations challenging, for example, the PDPL introduces rights for individuals to access; rectify; correct; delete; restrict processing; request cessation of processing or transfer of data; and object to automated processing.

Personal data 105

Personal data Data breaches GDPR Compliance 105

DLA Piper Privacy Matters

MARCH 6, 2023

e) GDPR : Processing “necessary for the performance of a task carried out in the public interest or in the exercise of official authority” needs to be interpreted in a broad sense (which is rather uncommon in GDPR terms). Second, the decision clarifies the scope of the “public interest” legal basis of article 6.1(e)

GDPR 98

GDPR Personal data Compliance IT 98

National Archives Records Express

SEPTEMBER 17, 2020

I was responsible for training development, design, assessment and evaluations that supported the organization’s digital documentation improvement and change management plan. I also knew that NARA preserved such historical documents as the Declaration of Independence, the Constitution, the Bill of Rights.

Records Management 52

Records Management Education Military Archiving 52

IT Governance

MAY 28, 2019

Documenting this gives you a true reflection of your security posture and helps you prioritise which defences you should implement. It could be a simple tick-box exercise, with the unchecked steps forming the gaps that need to be addressed. Organisations must also: Write a privacy notice. Write a data protection policy.

GDPR 72

GDPR Compliance Personal data Risk 72

Data Matters

NOVEMBER 16, 2020

If you operate in Singapore, handle Singapore data, or maintain a server in Singapore, it is crucial that you have protocols in place to guide employees on what to do when a data breach occurs and consider doing a data breach tabletop exercise. (We Carry out data breach drills or tabletop exercises.

Data Privacy 68

Data Privacy Privacy Data breaches Personal data 68

erwin

JULY 11, 2019

Fidelity International is an example of a successful digital transformation adopter and innovator. Digital and business transformation is about being able to do three things at the same time, all working toward the same goals: Collect, document and analyze requirements. Supporting and reference documentation. Data usage.

Digital transformation 106

Digital transformation Information capture Compliance Financial Services 106

eDiscovery Daily

AUGUST 14, 2019

Our seven-custodian example might be a bit light for the amount of email we get today, but it’s still a relevant exercise. Documents during review may be classified in a number of ways, but the most common ways to classify documents as to whether they are responsive, non-responsive, or privileged.

Education 48

Education Passwords IT 48

ForAllSecure

SEPTEMBER 25, 2019

This time we’ll take a look at how to write better tests in the form of harness programs (also known as fuzz drivers, programs written to exercise specific parts of the code) that we will use for fuzz testing. If we want to improve our confidence, we can add steps to exercise more of the code. Enter the Ninja.

Libraries 52

Libraries IT 52

DLA Piper Privacy Matters

AUGUST 3, 2020

Also, under the current APPI, data subjects may exercise the right of deletion and cessation of use of personal data only if a PIH Operator [1] (i) has obtained the personal data by deceit or other improper means; or (ii) uses such personal data beyond the necessary scope to achieve the purpose of use [2].

Personal data 122

Personal data Data breaches Compliance Analytics 122