Hunton Privacy

SEPTEMBER 10, 2020

On September 7, 2020, the European Data Protection Board (“EDPB”) released draft Guidelines 07/2020 on the concepts of controller and processor in the EU General Data Protection Regulation (“GDPR”) (the “Guidelines”). However, the GDPR has introduced new obligations on those actors.

GDPR 95

GDPR Personal data Data breaches Compliance 95

IT Governance

AUGUST 2, 2019

If you think that charities might be shown lenience under the GDPR (General Data Protection Regulation) , you’re wrong. This is a lesson that the transgender advocacy charity Mermaids learned recently , after it accidentally made internal emails containing confidential client information available online. GDPR exemptions for charities.

GDPR 56

GDPR Compliance Personal data Risk 56

IT Governance

OCTOBER 15, 2019

Any organisation that’s required to comply with the GDPR (General Data Protection Regulation) must conduct regular risk assessments. However, the GDPR is clear that data is also vulnerable to accidental or unlawful destruction, loss or disclosure. The GDPR risk assessment methodology. The software tool is: Easy to use.

GDPR 71

GDPR Risk Compliance Personal data 71

eSecurity Planet

MARCH 18, 2022

Many security professionals think that if they have done the hard work of securing their organization, that should be enough. There is, however, a next step: Documenting policies. Written documentation. Written security policies. However, even a handwritten spiral notebook could work for a small organization.

IT 123

IT Compliance Security Access 123

Hunton Privacy

MARCH 17, 2017

On March 15, 2017, the French data protection authority (the “CNIL”) published a six step methodology and tools for businesses to prepare for the EU General Data Protection Regulation (“GDPR”) that will become applicable on May 25, 2018. This person will internally carry out informational, advisory and control tasks.

GDPR 75

GDPR Personal data Compliance Privacy 75

Hunton Privacy

JULY 7, 2017

The Belgian Privacy Commission (the “Belgian DPA”) recently released a Recommendation (in French and Dutch ) regarding the requirement to maintain internal records of data processing activities (the “Recommendation”) pursuant to Article 30 of the EU General Data Protection Regulation (“GDPR”). Content of internal records.

GDPR 58

GDPR Privacy Personal data Data breaches 58

Hunton Privacy

SEPTEMBER 21, 2016

On September 16, 2016, the Belgian Data Protection Authority (the “Privacy Commission”) published a 13-step guidance document (in French and Dutch ) to help organizations prepare for the EU General Data Protection Regulation (“GDPR”). Internal Records. Review existing privacy notices and update them to comply with the GDPR.

GDPR 45

GDPR Privacy Personal data Data breaches 45

DLA Piper Privacy Matters

NOVEMBER 29, 2021

The guide is in line with the Article 29 Working Party Guidelines on Data Protection Officers (WP 243 rev 01) , but provides additional insights and practical guidance to organizations that designate a DPO in respect of GDPR and French data protection act requirements. Be the point of contact on GDPR issues. i) Appointment of the DPO.

GDPR 116

GDPR Compliance Personal data Communications 116

HL Chronicle of Data Protection

MAY 29, 2019

Following the one-year anniversary of the coming into effect of the GDPR, Hogan Lovells’ Privacy and Cybersecurity practice has prepared summaries of key GDPR-related developments of the past 12 months. The summaries cover regulatory guidance, enforcement actions, court proceedings, and various reports and materials.

GDPR 40

GDPR Personal data Privacy Information architecture 40

eSecurity Planet

SEPTEMBER 23, 2022

Securities and Exchange Commission (SEC) strongly advised public companies to improve their cybersecurity. While the new security proposals have not yet become law, cybersecurity managers can begin to prepare metrics and audits that will not only help comply with those laws, but can also help create positive change now.

Cybersecurity 132

Cybersecurity Compliance Risk Communications 132

Data Matters

JUNE 5, 2021

The European Commission ( EC ) on June 4, 2021 adopted a new set of Standard Contractual Clauses for international data transfers ( New SCCs ). ex-EEA) whose processing of the personal data is not subject to the requirements of the GDPR. However, their formulation (i.e.,

GDPR 117

GDPR Personal data IT Data breaches 117

HL Chronicle of Data Protection

SEPTEMBER 14, 2018

101 of 10 August 2018 (the “Decree”) for the national implementation of General Data Protection Regulation (EU) 2016/679 (the “GDPR”) has been published in the Official Journal. Below, a brief summary of the most relevant provisions: PROVISIONS WHICH INTEGRATE THE GDPR. On 4 September, the Legislative Decree no.

GDPR 40

GDPR Personal data Privacy Communications 40

DLA Piper Privacy Matters

FEBRUARY 2, 2018

Article 32 of the GDPR requires data controllers and processors to “ implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk ”. Although the GDPR provides some guidance as to the types of measures that may be considered appropriate (i.e., Workstations security.

Security 49

Security Personal data GDPR Compliance 49

HL Chronicle of Data Protection

OCTOBER 3, 2018

As the most comprehensive privacy law to be enacted in the United States thus far, the California Consumer Privacy Act (CCPA) has inevitably invited comparisons to the European Union’s General Data Protection Regulation (GDPR). The GDPR and CCPA take different approaches to defining the types of entities that must comply with the law.

GDPR 55

GDPR Privacy Personal data Sales 55

IT Governance

FEBRUARY 19, 2019

The investigation into Magnacrest predates the GDPR (General Data Protection Regulation) , resulting in a relatively small fine. The categories of personal data involved. The recipients (or categories of recipients) to whom the personal data has been or will be disclosed. Documenting the facts relating to the DSARs.

Access 91

Access GDPR Personal data Compliance 91

DLA Piper Privacy Matters

APRIL 9, 2018

Italian companies can now rely on guidelines on how to comply with the European privacy regulation (GDPR) which unvail some interesting positions. . health related data that are now incorporated in the broader “ special ” category of data) and to the processing based on automated decision making, including profiling.

GDPR 40

GDPR Personal data Privacy Data breaches 40

Data Protection Report

MAY 23, 2018

The wait is finally over—this Friday the European Union General Data Protection Regulation (GDPR) will come into force. However, the challenges of GDPR certainly don’t end on the date this law goes into implementation. Many of our clients ask us when and how they may be called upon to demonstrate compliance with the GDPR.

GDPR 40

GDPR Personal data Compliance Data breaches 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

As the most comprehensive privacy law to be enacted in the United States thus far, the California Consumer Privacy Act (CCPA) has inevitably invited comparisons to the European Union’s General Data Protection Regulation (GDPR). The GDPR and CCPA take different approaches to defining the types of entities that must comply with the law.

GDPR 40

GDPR Privacy Personal data Sales 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

As the most comprehensive privacy law to be enacted in the United States thus far, the California Consumer Privacy Act (CCPA) has inevitably invited comparisons to the European Union’s General Data Protection Regulation (GDPR). The GDPR and CCPA take different approaches to defining the types of entities that must comply with the law.

GDPR 40

GDPR Privacy Personal data Sales 40

DLA Piper Privacy Matters

MARCH 2, 2022

In addition, the Belgian DPA’s Inspection Service (the body within the DPA which investigates potential violations of the GDPR) also carried out inspections on its own behalf. The Belgian DPA handled this case as lead supervisory authority drawing its jurisdiction from a combined reading of articles 56 and 4(23)b GDPR. 13 and 14 GDPR.

GDPR 98

GDPR Personal data IT Compliance 98

DLA Piper Privacy Matters

FEBRUARY 7, 2019

Given the potential financial exposure under GDPR, it is no surprise that a great deal of time is being spent working out how to allocate the risk and liability when negotiating commercial contracts. Before we look at limiting liability, we need to first consider how liability can arise in the first place in the context of GDPR.

GDPR 49

GDPR Risk Data breaches Personal data 49

Managing Your Information

MAY 25, 2017

With just one year to go until the GDPR applies, now is the time for action. With one year to go, it must be time for a GDPR checklist! It is essential to make a start on preparations for compliance with the GDPR as there is lots to do. Initial Preparations. Awareness raising is essential at all levels of the organisation.

GDPR 31

GDPR Personal data Compliance Data breaches 31

Hunton Privacy

NOVEMBER 18, 2022

On November 17, 2022, the UK data protection regulator, the Information Commissioner’s Office (“ICO”), published updated guidance on international transfers that includes a new section on transfer risk assessments (“TRAs”) and a TRA tool. The TRA tool is a template document with six questions and guidance on how to complete the TRA.

Risk 80

Risk Privacy Government Access 80

DLA Piper Privacy Matters

DECEMBER 3, 2021

Reassuringly, the PDPL does not contain any major divergences from other well-known data protection regimes, including the GDPR. In this regard we expect it will be welcomed by local, regional and international businesses, in particular those that rely heavily upon personal data and international personal data flows.

Personal data 105

Personal data Data breaches GDPR Compliance 105

Managing Your Information

MAY 25, 2017

With just one year to go until the GDPR applies, now is the time for action. With one year to go, it must be time for a GDPR checklist! It is essential to make a start on preparations for compliance with the GDPR as there is lots to do. Initial Preparations. Awareness raising is essential at all levels of the organisation.

GDPR 28

GDPR Personal data Compliance Data breaches 28

IT Governance

MARCH 28, 2018

Whatever the size and setting of your school, the General Data Protection Regulation (GDPR) places high expectations on protecting the personal data of your data subjects, especially children. Sensitive personal data is a specific set of “special categories” that must be treated with extra security, such as genetic and biometric data.

GDPR 68

GDPR Personal data Compliance Data breaches 68

Data Protection Report

FEBRUARY 5, 2020

The “standard” is essentially a reference document which serves as guidance for those implementing whistleblowing systems. This new standard replaces the single authorisation AU-004 of 22 June 2017 (as amended) which, since the GDPR came into force, no longer has legal force. Clarifications on security measures.

GDPR 77

GDPR Compliance Personal data Privacy 77

Data Protection Report

DECEMBER 8, 2022

On 17 November 2022, the Information Commissioner’s Office ( ICO ) published an update to its guidance on international transfers ( Transfers Guidance ). the ICO’s International Data Transfer Agreement, the EU Standard Contractual Clauses (together with the UK Addendum) or Binding Corporate Rules). When is a TRA required? The TRA Tool.

Risk 93

Risk Personal data GDPR Privacy 93

IT Governance

SEPTEMBER 4, 2019

Under the GDPR, DPIAs (data protection impact assessments) are mandatory for data processing that is “likely to result in a high risk to the rights and freedoms of data subjects” Effectively a type of risk assessment, DPIAs assess how these high-risk processing activities could impact data subjects.

Personal data 75

Personal data GDPR Risk Access 75

eSecurity Planet

DECEMBER 9, 2021

We make IT, security, or any business decision by weighing the risks and the rewards. Or as is often the case with security, what costs can we skip and still escape big penalties later? Document the incident response process as a plan. The building manager to handle threats to physical security at a specific office.

Insurance 125

Insurance Ransomware Data breaches Cloud 125

Data Matters

NOVEMBER 13, 2020

In relation to special categories of personal data (e.g., The draft SCCs are intended to also satisfy the requirements of Article 28(3) of the GDPR (i.e., data concerning health) the data importer must agree to apply additional safeguards adapted to the specific nature of the data and the risks.

Personal data 68

Personal data GDPR Privacy Compliance 68

HL Chronicle of Data Protection

AUGUST 5, 2019

On the same day, the ICO also announced its intention to fine Marriott International just over £99m for infringements of the General Data Protection Regulation (GDPR), highlighting the importance of due diligence in the context of data sharing. Are data sharing agreements required under the GDPR? Specific data sharing cases.

GDPR 40

GDPR IT Personal data Compliance 40

DLA Piper Privacy Matters

NOVEMBER 8, 2022

Most AI will typically fall within the remit of ‘high-risk’ if it engages with personal information for the purposes of the proposed EU AI Regulation (“ AI Act ”) (and likely a similar category within the developing UK framework). accounting for other additional factors that weren’t included as part of the initial input data.

Artificial Intelligence 98

Artificial Intelligence Data Privacy Personal data Privacy 98

DLA Piper Privacy Matters

JULY 23, 2019

The EDPB acknowledges the ubiquity of video devices in modern life (everything from smartphone cameras to video-enabled doorbells and home security systems), and accepts that many individuals may be comfortable with the use of such devices for certain purposes such as security. 1. Application of the GDPR.

Personal data 40

Personal data GDPR Access Marketing 40

eSecurity Planet

MAY 24, 2024

Cloud security fundamentals are the core requirements that ensure data protection, regulatory compliance, and access management in a cloud environment. Understanding cloud security challenges and knowing the cloud security tools available in the market significantly contribute to enhanced cloud security.

Cloud 119

Cloud Security Compliance Encryption 119

Data Matters

MARCH 4, 2021

The VCDPA, which will not enter into effect until January 1, 2023, borrows heavily from the California Consumer Privacy Act (CCPA) and the European Union (EU) General Data Protection Regulation (GDPR). It remains to be seen how Virginia regulators will interpret this “targeting” test — which obviously echoes a similar approach in the GDPR.

Personal data 74

Personal data GDPR Sales Privacy 74

DLA Piper Privacy Matters

APRIL 11, 2019

employees, agents, interns and contractors). The CNIL reminds that the rules resulting from the Regulation do not exclude the application of the general obligations under the GDPR, notably regarding compliance with the general principles for processing personal data, data subject rights and international transfers.

Personal data 40

Personal data GDPR Access Compliance 40