AIIM

JANUARY 17, 2018

Notification processes in the event of personal data breach. Subject to specific circumstances data controllers and processors may be required to conduct a privacy impact assessment. There is some uncertainty as to the conditions that necessitate the need for a privacy impact assessment.

GDPR 83

GDPR Compliance Data collection Privacy 83

Hunton Privacy

DECEMBER 2, 2020

“Data” under the Data Governance Act means any digital representation of acts, facts or information and any compilation of the same, including in the form of sound, visual or audiovisual recording. Below are some key takeaways from the draft Data Governance Act: Re-Use of Protected Data by Public Sector Authorities.

Government 70

Government Personal data Compliance GDPR 70

Hunton Privacy

DECEMBER 20, 2017

The transparency obligations require controllers to provide certain information to data subjects regarding the processing of their personal data. The Working Party also clarifies that all categories of information to be provided pursuant to Articles 13 and 14 of the GDPR are of equal importance.

GDPR 62

GDPR Personal data Privacy Communications 62

Data Matters

NOVEMBER 4, 2020

Third, it creates a new category of businesses: those that voluntarily agree to be subject to the CCPA. Entities must annually buy sell, or share personal information of 100,000 consumers, not 50,000 as under the CCPA, to qualify as a business under the second prong of the test. New Rights for Sensitive Personal Information.

Privacy 122

Privacy B2B Sales Data breaches 122

Hunton Privacy

OCTOBER 5, 2017

Last week, at the 39th International Conference of Data Protection and Privacy Commissioners in Hong Kong, data protection authorities from around the world issued non-binding guidance on the processing of personal data collected by connected cars (the “Guidance”).

Privacy 60

Privacy Personal data Data collection Data Privacy 60

AIIM

JULY 24, 2018

For example, under GDPR data subjects and/or regulators may now pursue direct remedies against data processors in the event of infringement of obligations, whereas such remedies did not exist under the prior data privacy regulation.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

IT Governance

FEBRUARY 1, 2019

Follow our advice to successfully manage risks and respond to a variety of information security incidents. Under the GDPR (General Data Protection Regulation) , organisations have 72 hours from the moment they become aware of a breach to report the incident. Assess the affected data. But do you know what would be worse?

Data breaches 99

Data breaches GDPR Personal data Compliance 99

Hunton Privacy

MARCH 17, 2017

know where the data is being transferred and to whom, where it is hosted and for how long it’s retained. This prioritization must be carried out, taking into consideration the risks to the rights and freedoms of the data subjects. verifying the data security measures implemented. Step 5: Organizing Internal Processes.

GDPR 75

GDPR Personal data Compliance Privacy 75

Data Matters

JUNE 11, 2018

Washington State notably adopted a law on net neutrality and there is the prospect of a ballot initiative in California that would give individuals the right to know which categories of their or their children’s personal data have been collected or traded by businesses. The law will go into effect on January 1, 2019.

Privacy 60

Privacy Sales Data breaches Personal data 60

DLA Piper Privacy Matters

AUGUST 23, 2021

Instead the PIPL is a robust data privacy framework designed to safeguard individuals’ personal data against abuse, but at the same time to reflect cultural and business attitudes to data in China, as well as new technologies (including advances in AI, biometrics and data analytics), and to enable flows of personal data.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Hunton Privacy

SEPTEMBER 13, 2016

Some points of interest that have been resolved or finalized include the following: The IRR has two separate defined terms, “personal data” and “personal information,” but the potential discrepancy between the two terms has been resolved. This definition no longer appears in the final IRR.

Data Privacy 61

Data Privacy Privacy Personal data Data breaches 61

IT Governance

JULY 26, 2018

It’s imperative that you’re equipped to handle a data breach correctly, swiftly and decisively. Data breach example. Timehop kick-started the digital nostalgia category across social media and continues to reinvent reminiscent behaviour online. The GDPR places stricter time pressures on organisations to report a data breach.

Data breaches 53

Data breaches GDPR Personal data Government 53

Data Matters

OCTOBER 30, 2017

They can, however, engage in probing internal due diligence of their companies’ cyber governance and compliance posture before it is too late — that is, before a cyber event occurs. Responsibility for corporate cybersecurity extends from the chief information security officer’s office, to the C-suite, to the corporate boardroom.

Compliance 60

Compliance Cybersecurity Risk Government 60

Hunton Privacy

MAY 18, 2011

On April 11, 2011, India adopted new privacy regulations, known as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “Rules”). It must be processed only for the purpose for which it was collected.

Privacy 40

Privacy Personal data Data collection Compliance 40

Hunton Privacy

SEPTEMBER 16, 2019

Section 145(g) would not apply to § 1798.100(b) of the CCPA, which provides that “a business that collect’s a consumer’s personal information shall, at or before the point of collection, inform consumers as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used.

Sales 48

Sales B2B Communications Data breaches 48

Hunton Privacy

JULY 4, 2012

Cloud providers (as data processors): Cloud providers must ensure the confidentiality of the personal data they handle, and they must comply with the requirements of Article 17 of the EU Data Protection Directive 95/46/EC (the “Data Protection Directive”) when providing the cloud services.

Cloud 40

Cloud Compliance Personal data Risk 40

Hunton Privacy

MARCH 3, 2020

The Provisions govern China’s network information content ecology—including content producers (the “Producers”), content service platforms (the “Platforms”), content service users (the “Users”), industry organizations and Departments of Cyberspace Administration at all levels. Network Information Content – Categories of Information.

Government 68

Government Content services Marketing Privacy 68