DLA Piper Privacy Matters

OCTOBER 25, 2022

for violations of the GDPR (the violations were pre-Brexit). The ICO found that Interserve had failed to put appropriate technical and organisational measures in place to secure personal data (in contravention of Articles 5(1)(f) and 32 GDPR) for a period of ~20 months. The Incident. Digest of points to note in the MPN.

Security 52

Security GDPR Personal data Insurance 52

DLA Piper Privacy Matters

NOVEMBER 24, 2020

Background: How to calculate GDPR fines? How to properly calculate administrative fines for non-compliance with the EU General Data Protection Regulation (‘ GDPR ’) is one of the most important questions when applying the GDPR on practical level, e.g. : What is actually meant by the reference to “undertaking” in Article 83 (4) to (6) GDPR?

GDPR 75

GDPR Authentication Compliance Personal data 75

HL Chronicle of Data Protection

MAY 29, 2019

Following the one-year anniversary of the coming into effect of the GDPR, Hogan Lovells’ Privacy and Cybersecurity practice has prepared summaries of key GDPR-related developments of the past 12 months. The summaries cover regulatory guidance, enforcement actions, court proceedings, and various reports and materials.

GDPR 40

GDPR Personal data Privacy Information architecture 40

Data Matters

JUNE 5, 2021

The New SCCs take into account the Court of Justice of the European Union’s ( CJEU ) decision in Schrems II , requirements under the EU General Data Protection Regulation ( GDPR ), and according to the EC “address the realities faced by modern business”. However, their formulation (i.e.,

GDPR 117

GDPR Personal data IT Data breaches 117

DLA Piper Privacy Matters

APRIL 26, 2018

We are now one month away from the historic enforcement of the EU General Data Protection Regulation ( GDPR ) and it is clear that there is still much to do by many Australian organisations to ensure compliance by the 25 May 2018 deadline. Public sector organisations are not immune.

GDPR 40

GDPR Compliance Personal data Privacy 40

eSecurity Planet

SEPTEMBER 23, 2022

Securities and Exchange Commission (SEC) strongly advised public companies to improve their cybersecurity. While the new security proposals have not yet become law, cybersecurity managers can begin to prepare metrics and audits that will not only help comply with those laws, but can also help create positive change now.

Cybersecurity 132

Cybersecurity Compliance Risk Communications 132

HL Chronicle of Data Protection

OCTOBER 3, 2018

As the most comprehensive privacy law to be enacted in the United States thus far, the California Consumer Privacy Act (CCPA) has inevitably invited comparisons to the European Union’s General Data Protection Regulation (GDPR). The GDPR and CCPA take different approaches to defining the types of entities that must comply with the law.

GDPR 55

GDPR Privacy Personal data Sales 55

IT Governance

DECEMBER 13, 2018

This is the deadline given to you under the EU GDPR (General Data Protection Regulation) to report information security incidents to your supervisory authority. Most breaches fit into this category, but not all of them. You can focus on assessing the incident, cauterising the damage and documenting the steps you’ve taken.

Data breaches 110

Data breaches GDPR Personal data Compliance 110

Hunton Privacy

JULY 26, 2019

The Guidelines aim to provide guidance on how to apply the EU General Data Protection Regulation (“GDPR”) in all potential areas of video device use. In compliance with the accountability requirement of the GDPR, these purposes should be documented in writing and specified for every surveillance camera in use.

GDPR 57

GDPR Personal data Privacy Compliance 57

IT Governance

OCTOBER 24, 2018

This is the deadline given to you under the EU GDPR (General Data Protection Regulation) to report information security incidents to your supervisory authority. Most breaches fit into this category, but not all of them. You can focus on assessing the incident, cauterising the damage and documenting the steps you’ve taken.

Data breaches 110

Data breaches GDPR Compliance Personal data 110

Data Protection Report

MAY 23, 2018

The wait is finally over—this Friday the European Union General Data Protection Regulation (GDPR) will come into force. However, the challenges of GDPR certainly don’t end on the date this law goes into implementation. What do we expect in terms of enforcement priorities?

GDPR 40

GDPR Personal data Compliance Data breaches 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

As the most comprehensive privacy law to be enacted in the United States thus far, the California Consumer Privacy Act (CCPA) has inevitably invited comparisons to the European Union’s General Data Protection Regulation (GDPR). The GDPR and CCPA take different approaches to defining the types of entities that must comply with the law.

GDPR 40

GDPR Privacy Personal data Sales 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

As the most comprehensive privacy law to be enacted in the United States thus far, the California Consumer Privacy Act (CCPA) has inevitably invited comparisons to the European Union’s General Data Protection Regulation (GDPR). The GDPR and CCPA take different approaches to defining the types of entities that must comply with the law.

GDPR 40

GDPR Privacy Personal data Sales 40

DLA Piper Privacy Matters

APRIL 26, 2021

There are parallels here with the extra-territorial effect of the GDPR. High-risk AI systems are defined by a classification model that focuses on the risk associated with the product itself: A first category covers AI systems intended to be used as a safety component of products (or which are themselves a product).

Artificial Intelligence 114

Artificial Intelligence Risk Marketing GDPR 114

Data Protection Report

JUNE 7, 2021

The documentation published comprises both an Implementing Decision and an Annex setting out the New SCCs themselves. Greater alignment with the GDPR: Many of the provisions in the New SCCs have been brought more in line with the GDPR requirements. They will also be a lawful mechanism for UK companies to use too.

Personal data 119

Personal data GDPR Data breaches Access 119

Data Protection Report

DECEMBER 8, 2022

The TRA Guidance and TRA Tool are relevant whenever an organisation that is subject to the UK GDPR transfers personal data to a non-adequate jurisdiction based on one of the transfer mechanisms in Article 46 of the UK GDPR (i.e. 46 transfer mechanism will likely be enforceable in the UK and any other relevant jurisdiction.

Risk 93

Risk Personal data GDPR Privacy 93

DLA Piper Privacy Matters

FEBRUARY 7, 2019

Given the potential financial exposure under GDPR, it is no surprise that a great deal of time is being spent working out how to allocate the risk and liability when negotiating commercial contracts. Before we look at limiting liability, we need to first consider how liability can arise in the first place in the context of GDPR.

GDPR 49

GDPR Risk Data breaches Personal data 49

Data Protection Report

JANUARY 6, 2020

Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs. Data retention is a rising trend in GDPR enforcement. Overwhelmed at the prospect?

Privacy 85

Privacy GDPR Data breaches Risk 85

eSecurity Planet

MAY 24, 2024

Cloud security fundamentals are the core requirements that ensure data protection, regulatory compliance, and access management in a cloud environment. Understanding cloud security challenges and knowing the cloud security tools available in the market significantly contribute to enhanced cloud security.

Cloud 119

Cloud Security Compliance Encryption 119

Data Protection Report

JANUARY 6, 2020

Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs. Data retention is a rising trend in GDPR enforcement. Overwhelmed at the prospect?

Privacy 52

Privacy GDPR Data breaches Risk 52

HL Chronicle of Data Protection

AUGUST 5, 2019

On the same day, the ICO also announced its intention to fine Marriott International just over £99m for infringements of the General Data Protection Regulation (GDPR), highlighting the importance of due diligence in the context of data sharing. Are data sharing agreements required under the GDPR? Specific data sharing cases.

GDPR 40

GDPR IT Personal data Compliance 40

DLA Piper Privacy Matters

JUNE 18, 2020

With the California Consumer Privacy Act (CCPA) enforcement deadline only a month away, Chief Privacy Officers still must grapple with significant uncertainties about what exactly the law requires. They remain far apart on preemption and private class action enforcement. By Jim Halpert.

Privacy 84

Privacy Compliance Sales Risk 84

Data Matters

MARCH 4, 2021

The VCDPA, which will not enter into effect until January 1, 2023, borrows heavily from the California Consumer Privacy Act (CCPA) and the European Union (EU) General Data Protection Regulation (GDPR). It remains to be seen how Virginia regulators will interpret this “targeting” test — which obviously echoes a similar approach in the GDPR.

Personal data 74

Personal data GDPR Sales Privacy 74

eSecurity Planet

DECEMBER 9, 2021

We make IT, security, or any business decision by weighing the risks and the rewards. Or as is often the case with security, what costs can we skip and still escape big penalties later? Document the incident response process as a plan. The building manager to handle threats to physical security at a specific office.

Insurance 125

Insurance Ransomware Data breaches Cloud 125

DLA Piper Privacy Matters

JULY 23, 2019

The EDPB acknowledges the ubiquity of video devices in modern life (everything from smartphone cameras to video-enabled doorbells and home security systems), and accepts that many individuals may be comfortable with the use of such devices for certain purposes such as security. 1. Application of the GDPR.

Personal data 40

Personal data GDPR Access Marketing 40

Data Protector

OCTOBER 11, 2017

Where the Information Commissioner gives notices to data controllers, she can now secure compliance, with the power to issue substantial administrative penalties of up to 4% of global turnover. We think that this super-complainant system would help to protect anonymity and create a stronger enforcement framework.

GDPR 120

GDPR Personal data Government IT 120

Reltio

MARCH 18, 2020

As teams look to pursue their customer data initiatives, they have traditionally focused on two key categories of offerings: Customer data platforms (CDPs). Think of the holistic data strategy that includes master data, analytics, compliance, privacy & security, investments in AI/ML. Does it aligns with the customer expectations?

MDM 83

MDM Analytics Customer Experience Marketing 83

eSecurity Planet

AUGUST 11, 2022

Many of the basic principles for securing a data lake will be familiar to anyone who has secured a cloud security storage container. Essentially, we are securing an app at scale with enormous requirements for stored data, incoming data, data interactions, and network connections. Data Lake Security Scope.

Security 123

Security Encryption Cloud Access 123

Data Matters

SEPTEMBER 29, 2021

Although these proportionality factors began as an integral part of the definition of the scope of discovery, for more than two decades these limitations resided in a separate subsection of the Rule, resulting in considerable confusion and less-than-rigorous enforcement. The principle of proportionality in civil discovery is hardly new.4

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

Data Protection Report

AUGUST 27, 2020

The High Court should have reached a conclusion about whether SWP had an “appropriate policy document ” in place, as is required under section 35 of the UK Data Protection Act 2018. For example, regular reviews, oversight mechanisms and clear (and narrow) criteria setting out when and where AFT may be used.

Risk 59

Risk Retail IT GDPR 59

Hunton Privacy

JULY 8, 2022

The Notice of Proposed Rulemaking notes that the CPPA has taken into consideration privacy laws in other jurisdictions, and that the proposed regulations would allow businesses to implement compliance with the CCPA/CPRA “in such a way that would not contravene a business’s compliance with other privacy laws,” such as the GDPR, and the U.S.

Privacy 101

Privacy Sales Compliance Access 101

eSecurity Planet

JUNE 8, 2023

Organizations that understand email security in detail can adopt email security options that are a good fit for their needs and resources. Microsoft estimates that 94% of cyberattacks begin with a malicious email — a horrific statistic that can be dramatically reduced by adopting email security standards, tools, and services.

Security 80

Security Authentication Encryption Phishing 80

eDiscovery Daily

SEPTEMBER 30, 2018

In this session, hear leading national experts with perspectives from major law firms, federal law enforcement, and computer forensics as we examine recent case law, practical technical challenges, current issues—including the regulation of self-driving cars, and the legal considerations of IoT data tracking.

e-Discovery 47

e-Discovery Education Computer and Electronics Privacy 47

Data Protection Report

JUNE 6, 2019

Instead, enforcement authority is granted to the Attorney General, which can institute a legal proceeding and have the court issue a temporary or permanent injunction, or impose a civil penalty not to exceed $5,000 for each violation. Narrows disclosure requirement to categories of third parties sold to.

Sales 40

Sales Privacy Insurance Manufacturing 40

ARMA International

SEPTEMBER 27, 2021

Thus, common tools and techniques are risk matrices, risk registers, risk logs, risk breakdown structures, risk categories, Monte Carlo simulations, and sensitivity analyses. law enforcement agencies recovered most of the bitcoin paid in ransomware. In May 2021, Colonial Pipeline paid $ 4.4 In this case, U.S.

Digital transformation 54

Digital transformation Risk IT Computer and Electronics 54