article thumbnail

Government surveying further education providers before Brexit

IT Governance

Among the uncertainty surrounding GDPR (General Data Protection Regulation) compliance – particularly with Brexit complicating things – the UK government has been a reliable source for advice. The government’s advice will be invaluable for understanding how to manage your data protection requirements. The GDPR and Brexit.

article thumbnail

When are schools required to report personal data breaches?

IT Governance

Under the GDPR (General Data Protection Regulation) , all personal data breaches must be recorded by the organisation and there should be a clear and defined process for doing so. In this blog, we take a look at the scenarios in which data protection breaches in schools must be reported. How to avoid data breaches.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Threat actors defaced Ukrainian government websites

Security Affairs

Threat actors defaced multiple Ukrainian government websites after talks between Ukrainian, US, and Russian officials hit a dead this week. Threat actors have defaced multiple websites of the Ukrainian government on the night between January 13 and January 14. All your personal data has been sent to a public network.

article thumbnail

Personal Data and docs of Swiss town Rolle available on the dark web

Security Affairs

The Swiss town Rolle disclosed the data breach after a ransomware attack, personal details of all its 6,200 inhabitants were stolen by threat actors. “Gigabytes of data stolen from Rolle’s vaudois community and posted on darknet. The threat actors compromised some administrative servers and exfiltrated sensitive documents.

article thumbnail

GDPR: How the definition of personal data has changed

IT Governance

On 25 May 2018, the EU’s GDPR (General Data Protection Regulation) superseded the UK’s DPA (Data Protection Act) 1998. With the Regulation expanding the definition of personal data, many organisations were uncertain as to what the new definition includes. The scope of personal data.

article thumbnail

ASEAN releases Joint Guide to ASEAN Model Contractual Clauses and EU Standard Contractual Clauses and AI Governance Guide 

Data Protection Report

On 1 and 2 February 2024, at the fourth 4 th ASEAN Digital Ministers Meeting ( ADGMIN ) in Singapore, ASEAN [1] unveiled: the updated Joint Guide to ASEAN Model Contractual Clauses and EU Standard Contractual Clauses ( Joint MCC – SCC Guide ); and the ASEAN Guide on AI Governance and Ethics ( ASEAN AI Governance Guide ).

article thumbnail

Two FTC complaints that over-retention of personal data violates Section 5

Data Protection Report

In both cases, the FTC’s complaint alleged that the companies retained personal data for longer than was necessary, and that conduct violated Section 5 of the Federal Trade Commission Act as an unfair act or practice. Under the proposed consent orders, both companies do not confirm or deny the allegations.