Data Matters

APRIL 10, 2020

While the world seems to have ground to a halt in so many ways, time still marches on, and along with it, the California Consumer Privacy Act (“CCPA”) enforcement date (July 1, 2020) inches ever closer. However, the current framing does support a more simplified disclosure structure.

Privacy 68

Privacy Sales Insurance Compliance 68

Data Protection Report

JUNE 7, 2021

The documentation published comprises both an Implementing Decision and an Annex setting out the New SCCs themselves. This is slightly more generous than the one year period proposed in the draft SCCs, but it will still mean a large repapering exercise in the coming months, which organisations should start preparing for.

Personal data 119

Personal data GDPR Data breaches Access 119

DLA Piper Privacy Matters

NOVEMBER 12, 2020

Both documents were adopted during the EDPB’s 41 st plenary session and are intended to be a follow-up to the Schrems II decision of the Court of Justice of the European Union (“ CJEU ”) earlier this year. Importantly the Recommendations are published as a draft document, and remain open for consultation until the end of November.

Paper 98

Paper Personal data Privacy Access 98

Data Protection Report

JANUARY 6, 2020

Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs. Data retention is a rising trend in GDPR enforcement. aka data and records retention).

Privacy 85

Privacy GDPR Data breaches Risk 85

Data Matters

OCTOBER 30, 2017

Responsibility for corporate cybersecurity extends from the chief information security officer’s office, to the C-suite, to the corporate boardroom. Cyber Security Beyond Cybersecurity: CLGAs. To be sure, expectations of director-level engagement in and responsibility for managing cyber risks are growing. 1] The U.S.

Compliance 60

Compliance Cybersecurity Risk Government 60

Data Protection Report

JANUARY 6, 2020

Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs. Data retention is a rising trend in GDPR enforcement. aka data and records retention).

Privacy 52

Privacy GDPR Data breaches Risk 52

eSecurity Planet

OCTOBER 6, 2023

That makes email security software a worthwhile investment for organizations of all sizes. We analyzed the market for email security tools and software to arrive at this list of 7 top email security solutions, including their standout features, limitations and ideal use cases, followed by issues prospective buyers should consider.

Security 131

Security Phishing Compliance Cybersecurity 131

Data Protection Report

MAY 23, 2018

We have shared below some interesting points that we’ve seen arising recently, all of which relate to how things are likely to develop from today onwards, including enforcement predictions, challenges related to operationalizing data subject access procedures, and how the GDPR may change the data privacy litigation landscape in Europe.

GDPR 40

GDPR Personal data Compliance Data breaches 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

Among other things, the GDPR requires that controllers notify data subjects about the purposes for which personal data will be processed, the legal basis for processing, the categories of entities who may receive the personal data, the retention period for personal data, and the data subjects’ rights. 1. Geographic Scope.

GDPR 55

GDPR Privacy Personal data Sales 55

HL Chronicle of Data Protection

OCTOBER 3, 2018

Among other things, the GDPR requires that controllers notify data subjects about the purposes for which personal data will be processed, the legal basis for processing, the categories of entities who may receive the personal data, the retention period for personal data, and the data subjects’ rights. 1. Geographic Scope.

GDPR 40

GDPR Privacy Personal data Sales 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

Among other things, the GDPR requires that controllers notify data subjects about the purposes for which personal data will be processed, the legal basis for processing, the categories of entities who may receive the personal data, the retention period for personal data, and the data subjects’ rights. 1. Geographic Scope.

GDPR 40

GDPR Privacy Personal data Sales 40

eSecurity Planet

APRIL 26, 2024

Network security architecture is a strategy that provides formal processes to design robust and secure networks. Effective implementation improves data throughput, system reliability, and overall security for any organization. Network Elements Networks connect physical and virtual assets and control the data flow between them.

Security 120

Security Cloud Cybersecurity Risk 120

Data Matters

SEPTEMBER 3, 2020

Annuity Suitability Working Group Drafting FAQ Document to Facilitate Uniformity in State Adoption of Revised Suitability in Annuity Transactions Model Regulation. A draft of the FAQ document was exposed for a 30-day comment period to seek feedback regarding whether additional topics should be included in the document.

Insurance 68

Insurance Paper Artificial Intelligence Big data 68

Data Matters

SEPTEMBER 29, 2021

Although these proportionality factors began as an integral part of the definition of the scope of discovery, for more than two decades these limitations resided in a separate subsection of the Rule, resulting in considerable confusion and less-than-rigorous enforcement. For example, in John B.

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

Hunton Privacy

JULY 8, 2022

Below are key examples of topics the proposed regulations address. Additionally, a business may only collect PI categories that are disclosed via notice at the time of collection. To do so, a business may consider the nature of the PI, how it was obtained, and documentation related to the accuracy of the PI.

Privacy 101

Privacy Sales Compliance Access 101

Data Protector

OCTOBER 11, 2017

Where the Information Commissioner gives notices to data controllers, she can now secure compliance, with the power to issue substantial administrative penalties of up to 4% of global turnover. We think that this super-complainant system would help to protect anonymity and create a stronger enforcement framework.

GDPR 120

GDPR Personal data Government IT 120

Data Protection Report

OCTOBER 11, 2019

The proposed rules shed light on how the California AG is interpreting and will be enforcing key sections of the CCPA. For example, “Household” is defined as “a person or group of people occupying a single dwelling” (999.301(h)). The rules are not final. 999.305(d)).

Sales 40

Sales Retail Privacy Access 40

HL Chronicle of Data Protection

AUGUST 5, 2019

The Code mainly covers data sharing by private organisations subject to the GDPR and Part 2 of the DPA, but it also includes a specific section on data sharing under the Law Enforcement regime (Part 3 of the DPA). Are data sharing agreements required under the GDPR? What are the points a data sharing agreement should address?

GDPR 40

GDPR IT Personal data Compliance 40

ForAllSecure

MAY 2, 2023

VAMOSI: Once the classified documents were found online, there was an effort -- both by law enforcement and by the media -- to identify the leaker. It turns out some of the classified documents were photographed on a marble countertop, like in a kitchen countertop. That’s understandable, given his age. They could.

IT 40

IT Sales Security Honeypots 40

Data Matters

MARCH 4, 2021

establish, implement, and maintain reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of personal data, appropriate to the volume and nature of the personal data at issue. the categories of personal data that the controller shares with third parties, if any.

Personal data 74

Personal data GDPR Sales Privacy 74

Schneier on Security

MARCH 19, 2024

Microsoft cultivated proprietary document formats for years to keep you using its flagship Office product. In extreme examples, some people have formed close, perhaps even familial, bonds with AI chatbots. Additionally, governments can enforce existing regulations on advertising.

Artificial Intelligence 115

Artificial Intelligence Marketing Risk Government 115

Data Protection Report

AUGUST 27, 2020

The High Court should have reached a conclusion about whether SWP had an “appropriate policy document ” in place, as is required under section 35 of the UK Data Protection Act 2018. For example, regular reviews, oversight mechanisms and clear (and narrow) criteria setting out when and where AFT may be used.

Risk 59

Risk Retail IT GDPR 59