Remove category
Remove Education Remove Information Security Remove IT Remove Paper
article thumbnail

UK ICO Publishes First Two Reports from its Data Protection Sandbox Pilot

Hunton Privacy

On July 23, 2020, the UK Information Commissioner’s Office (the “ICO”) published the first two reports of its Data Protection Regulatory Sandbox Beta phase (the “Beta phase”) involving projects by Jisc (a not-for-profit organization serving the higher and further education and skills sectors) and Heathrow Airport Ltd.

IT 91
article thumbnail

Record Retention Policy for Businesses: A Strategic Guide to Compliance and Efficiency

Armstrong Archives

No matter the size of a business, a well-defined record retention policy serves multiple purposes: ensuring compliance with legal and regulatory requirements, aiding in efficient document management, and securing sensitive information. Each category will have different legal and operational retention requirements.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

European Commission Publishes Proposal for Artificial Intelligence Act

Hunton Privacy

The Proposal follows a public consultation on the Commission’s white paper on AI published in February 2020. High-risk systems include those used: For management and operation of critical infrastructure that could endanger individuals, such as road traffic and electricity; In education or vocational training, e.

article thumbnail

7 steps to highly effective GDPR compliance

IT Governance

Organisations of all sizes have been put under regulatory pressure, and the ICO (Information Commissioner’s Office) has already stated its intention to issue fines totalling £282 million against British Airways and Marriott International. Educate and empower your employees to make better decisions. But none of those things are true.

GDPR 86
article thumbnail

ICO issue fine of £4.4 to Interserve for security failings

DLA Piper Privacy Matters

The databases also held special category personal data including ethnic origin; religion; details of disabilities; sexual orientation, and health information relevant to ill-heath retirement applications. On the face of it, this is a sizeable fine issued to a non household name controller for perceived failings in information security.

article thumbnail

An Approach to Cybersecurity Risk Oversight for Corporate Directors

Data Matters

Information security is not yet a science; outside of the handful of issues falling under the field of cryptography, there is no formalized system of classification. Additionally, the quantity of issues that can arise throughout the data lifecycle would require a longer investigation than the scope of this paper will cover.