Schneier on Security

AUGUST 13, 2019

A researcher abused the GDPR to get information on his fiancee: It is one of the first tests of its kind to exploit the EU's General Data Protection Regulation (GDPR) , which came into force in May 2018. Generally if it was an extremely large company -- especially tech ones -- they tended to do really well," he told the BBC.

GDPR 90

GDPR Education Compliance IT 90

eDiscovery Daily

JANUARY 22, 2019

As covered in Fortune ( France Fines Google $57 Million For GDPR Violations , written by Emily Price), France’s data protection regulator, the Commission nationale de l’informatique et des libertés (CNIL), has issued a €50 million fine (about $56.8 million ) fine to Google for failing to comply with GDPR. So, what do you think?

GDPR 69

GDPR Data Privacy Privacy Education 69

The Guardian Data Protection

OCTOBER 7, 2020

Data watchdog finds ministry broke GDPR by mishandling national database for England The Department for Education broke the law in its mishandling of the national database containing details of every school pupil in England, the Information Commissioner’s Office has concluded in a highly critical report.

Education 104

Education GDPR Privacy IT 104

IT Governance

MARCH 4, 2019

The problem, of course, is that there are so many guides to data privacy out there that it’s hard to know which one is right for you. Fortunately, we’ve done the hard work for you, selecting four essential books that can help you manage data effectively and meet your data privacy obligations. EU GDPR: A Pocket Guide.

Data Privacy 91

Data Privacy Privacy GDPR Compliance 91

Data Matters

JUNE 29, 2018

Jerry Brown signed into law the California Consumer Privacy Act of 2018 (AB 375). This legislation was enacted on an extraordinarily accelerated timeframe as part of compromise with the sponsor of a comparable privacy ballot initiative, which had qualified to be placed before state voters on Election Day in November 2018.

GDPR 79

GDPR Privacy Sales Data breaches 79

IT Governance

MARCH 28, 2019

At the recent ASCL (Association of School and College Leaders) conference , a guest said to us: “The GDPR ? Granted, 2018 was very much ‘the year of the GDPR’ in some circles. GDPR compliance in schools. Schools have a particularly hard time of it when it comes to the GDPR. Privacy notices. Wasn’t that last year?”.

GDPR 92

GDPR Compliance Data breaches Personal data 92

Hunton Privacy

JULY 1, 2020

The Italian Data Protection Authority ( Garante per la protezione dei dati personali , “Garante”) recently announced that it levied a €600,000 fine on banking institution UniCredit for several violations of the Italian Personal Data Protection Code, in its pre-General Data Protection Regulation (“GDPR”) form.

Data breaches 111

Data breaches GDPR Personal data Education 111

IT Governance

AUGUST 21, 2019

The GDPR (General Data Protection Regulation) hasn’t exactly crept up unnoticed over the past year or so, but it’s still caught many organisations by surprise. Meanwhile, although the specifics of Brexit are still unclear, one thing is certain: whatever happens, UK-based organisations will be subject to the GDPR’s requirements.

GDPR 86

GDPR Compliance Personal data Access 86

eDiscovery Daily

JULY 15, 2019

In January, we covered the first big fine for failing to comply with Europe’s General Data Protection Regulation (GDPR) when France’s data protection regulator, the Commission nationale de l’informatique et des libertés (CNIL), issued a €50 million fine (about $56.8 million ) fine to Google for failing to comply with GDPR.

GDPR 56

GDPR Data Privacy Privacy Data breaches 56

IT Governance

JANUARY 9, 2024

Source (New) Software Luxembourg Yes 3,600,000 National Automobile Dealers Association Source (New) Retail USA Yes 1,065,000 Consórcio Canopus Source (New) Professional services Brazil Yes 1,400,000 The Teaching Company (Wondrium by The Great Courses) Source (New) Education USA Yes 1.3 TB Gräbener Maschinentechnik GmbH & Co.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Data Matters

NOVEMBER 4, 2020

The results are in, and California voters have approved the California Privacy Rights Act (CPRA) which was listed on the ballot as Proposition 24. Even so, with these and other new requirements, the CPRA does not go as far as some consumer privacy advocates had hoped it would.

Privacy 122

Privacy B2B Sales Data breaches 122

IT Governance

MARCH 1, 2018

GDPR compliance should be a priority and high on every organisation’s agenda with only three months until the regulation comes into effect on 25 May 2018. Training – make sure those responsible for the project are trained on implementing the GDPR in the workplace.

GDPR 61

GDPR Compliance Privacy Data breaches 61

IT Governance

OCTOBER 15, 2018

The EU’s GDPR (General Data Protection Regulation) superseded all laws based on the EU’s Data Protection Directive, including the UK’s Data Protection Act 1998, on 25 May 2018. Some organisations believe that a simple privacy notice is all that is required, but the GDPR actually demands far more than that. . Education .

GDPR 90

GDPR Data breaches Personal data Data collection 90

Data Matters

JUNE 29, 2018

Jerry Brown signed into law the California Consumer Privacy Act of 2018 (AB 375). This legislation was enacted on an extraordinarily accelerated timeframe as part of compromise with the sponsor of a comparable privacy ballot initiative, which had qualified to be placed before state voters on Election Day in November 2018.

GDPR 60

GDPR Privacy Sales Data breaches 60

Thales Cloud Protection & Licensing

MARCH 20, 2023

Self-Sovereign Identities, The Next Step in Privacy-First User Experience divya Tue, 03/21/2023 - 06:10 There is a growing momentum around Self-Sovereign Identities (SSI) with real value to be captured by individuals, countries, and businesses. When privacy is at stake, SSI puts individuals back in control of their personal data.

Privacy 71

Privacy Blockchain Customer Experience Access 71

IT Governance

NOVEMBER 21, 2017

Staff awareness should be a major concern for organisations looking to comply with the EU General Data Protection Regulation (GDPR). However, our 2017 GDPR Report found that less than 10% of organisations have provided GDPR staff awareness training to all employees. Why implement a GDPR staff awareness training programme?

GDPR 63

GDPR Compliance Education Data breaches 63

IT Governance

JULY 25, 2018

One overlooked side-effect of the GDPR (General Data Protection Regulation) is the extent to which data privacy and information security have become widely discussed. Although many of those emails weren’t actually necessary, it certainly encouraged the public to take more of an interest. Discussion is good.

GDPR 68

GDPR Phishing Security Data Privacy 68

IT Governance

JANUARY 30, 2019

With a mammoth GDPR fine handed out to Google last week, it’s time for organisations to reassess their understanding of the Regulation. We’re through the eye of the GDPR (General Data Protection Regulation) storm. The GDPR concerns personal data that is: Collected in an enterprise context; and. Some began to lose faith.

GDPR 86

GDPR Compliance Personal data Data breaches 86

Information Governance Perspectives

MAY 8, 2020

Hunter, Dr. Tao Jin, Dr. Patricia Franks, Rae Lynn Haliday, Cheryl Pederson, and Wendy McLain on the topic of Meeting Evolving Business Needs – A Conversation Between RIM Educators and Thought Leaders. And recruiters are looking for that education and experience. Their executives… and their attorneys, they all realize this.

Education 52

Education Digital transformation Search queries Information governance 52

Data Matters

AUGUST 9, 2021

In recent weeks, Connecticut passed An Act Concerning Data Privacy Breaches (“The Act”), and the Uniform Law Commission approved and recommended the Uniform Personal Data Protection Act (“UPDPA”). Connecticut: An Act Concerning Data Privacy Breaches.

Data breaches 88

Data breaches Privacy Personal data Data Privacy 88

Information Governance Perspectives

MAY 10, 2020

In May of 2020 I was honored to speak at the MERv conference with John Frost of Box on the topic of Using Information Governance with a Privacy Compliance Plan as the Fulcrum for Data Privacy and Continuous Compliance. Privacy makes data governance ethical and tangible, and compliance leaders understand that.

Compliance 52

Compliance Information governance Privacy Data Privacy 52

Thales Cloud Protection & Licensing

AUGUST 15, 2019

375 the California Consumer Privacy Act (CCPA), making California the first U.S. state to pass its own data privacy law. A key variation with GDPR is the word “household” which adds more complexity to the implementation of the Act. Similar to GDPR, the CCPA excludes from its scope information that is publicly available.

Privacy 92

Privacy GDPR Digital transformation Sales 92

eDiscovery Daily

APRIL 10, 2019

We have covered Europe’s General Data Protection Regulation (GDPR) over several posts the past couple of years and even conducted a webcast on the topic last year. And, we have covered the California Consumer Privacy Act (CCPA) several times as well, including as recently as last week. Do they mimic GDPR policies?

Data Privacy 50

Data Privacy Privacy Compliance GDPR 50

IT Governance

NOVEMBER 20, 2017

A recent report from CenturyLink has highlighted a lack of preparation among UK law firms for the upcoming EU General Data Protection (GDPR) compliance deadline. The report questioned more than 150 legal sector IT decision makers in the UK and discovered that only 25% believe they are currently compliant with the GDPR.

GDPR 68

GDPR Compliance Data breaches Paper 68

eDiscovery Daily

FEBRUARY 20, 2018

Are you panicking about the upcoming Europe General Data Protection Regulation (GDPR) yet? I stumbled across an EU GDPR countdown clock yesterday. As of when I’m writing this, the clock says there are 92 days, 22 hours, 11 minutes and 08 seconds “Until the EU GDPR comes into force” (on May 25th). Are you ready for GDPR?

GDPR 39

GDPR Data Privacy Privacy Education 39

IT Governance

SEPTEMBER 24, 2020

Blackbaud, which provides education administration, fundraising and financial management support, was attacked earlier this year, with cyber criminals accessing victims’: Names; Dates of birth; Addresses; Phone numbers; Email addresses; Donation history; and Events that individuals attended. Do they have a case? they have suffered distress).

Ransomware 111

Ransomware Data breaches Education GDPR 111

DLA Piper Privacy Matters

NOVEMBER 21, 2018

After a very long delay and amidst rumors that the Spanish Parliament could be dissolved and early elections called, the Spanish Senate speedily dismissed all the proposals for further changes and approved the new GDPR-compliant Spanish Data Protection Act on Wednesday 21 November 2018.

GDPR 63

GDPR Personal data Access Education 63

DLA Piper Privacy Matters

AUGUST 21, 2019

In this webinar, DLA Piper’s Data Protection Privacy and Security Group will examine CCPA’s impact on programmatic and other digital advertising activities, including behavioral advertising, direct ad sales, analytics, and more. Kate Lucente , Partner, Data Protection, Privacy and Security Practice, DLA Piper, Seattle. Presenters.

Privacy 40

Privacy Education Analytics Sales 40

eDiscovery Daily

JUNE 3, 2018

Now that Europe’s General Data Protection Regulation (GDPR) is in effect, all organizations out there have a good handle on all of their data, including which personally identifiable information (PII) they handle for European data subjects out there and clear policies for how they ensure protection of that PII. OK, maybe not.

GDPR 43

GDPR Data Privacy Privacy Big data 43

IT Governance

AUGUST 2, 2019

If you think that charities might be shown lenience under the GDPR (General Data Protection Regulation) , you’re wrong. The Regulation treats charities in much the same way as any organisation, because although they’re not using personal data to make a profit, they still run the risk of data breaches and privacy violations.

GDPR 56

GDPR Compliance Personal data Risk 56

eDiscovery Daily

MAY 17, 2018

Believe it or not, Europe’s General Data Protection Regulation (GDPR) is set to go into effect in one just one week(!), EU folks seem to be generally supportive of the GDPR and think that companies shutting down service are either stupid & ignorant or evil and thus should shut down. Are you ready for GDPR? on May 25th.

GDPR 39

GDPR Data Privacy Privacy Archiving 39

HL Chronicle of Data Protection

MARCH 29, 2019

Nicola Fulford and James Denvil will speak at the workshop,” Trust in data, no longer a luxury – Privacy, security, and consumer trust for 21st century,” at the Luxury Law London Summit. International Privacy + Security Forum. Bret Cohen and Tim Tobin will be speaking at the International Privacy + Security Forum.

Privacy 40

Privacy Cybersecurity Data Privacy GDPR 40

IT Governance

MAY 7, 2024

It emerged this week, according to the New York City Department of Education, that data from a further 381,000 students was also compromised in this incident. Data breached: 1,201,000 people’s data. Organisation(s) Sector Location Data breached? Known data breached MovieBoxPro Source 1 ; source 2 (New) Leisure China? Young, Inc.

Data breaches 59

Data breaches Education Manufacturing Retail 59

HL Chronicle of Data Protection

MAY 31, 2019

Privacy Breakfast. Bret Cohen and Stephanie Gold are presenting at the annual conference of the National Association of College and University Attorneys on the panel, “Focus on GDPR and Other Privacy Laws: How to Develop and Implement a Practical Approach to Compliance.” Please join us for our June events.

Privacy 40

Privacy Cybersecurity GDPR Compliance 40

eDiscovery Daily

JUNE 13, 2018

Unless you live under a rock, you know that the deadline for compliance with Europe’s General Data Protection Regulation (GDPR) has come and gone (it was May 25 – almost three weeks ago now). Less than half ( 47 percent ) feel fully prepared to address the new GDPR requirements. Is your organization fully prepared for GDPR?

GDPR 34

GDPR Data Privacy Privacy IT 34

eDiscovery Daily

FEBRUARY 11, 2019

It’s only been three weeks, but we’ve already talked plenty about the first big GDPR fine of €50 million (or about $56.8 million ) fine to Google for failing to comply with GDPR. As covered in Alston & Bird’s Privacy and Data Security Blog ( Google-Style GDPR Fines for Everyone? Well, you may want to think again.

Privacy 46

Privacy Data Privacy GDPR Compliance 46

IT Governance

JULY 28, 2020

Blackbaud, which provides education administration, fundraising and financial management software, was infected with ransomware, giving cyber criminals access to a wealth of sensitive information. At least eight educational institutions in the US and Canada were also affected, as well as several charities on both sides of the Atlantic.

GDPR 124

GDPR Education Ransomware Data breaches 124