Data Matters

DECEMBER 2, 2019

On 4 November 2019, the European Data Protection Board (EDPB), the EU-wide data supervisory authority, held a stakeholders’ event on data subject rights under the GDPR. Stakeholders noted some requests were too broad, in turn, making it difficult to identify which data subject right was being exercised (e.g.,

GDPR 68

GDPR Compliance Personal data Access 68

Data Matters

DECEMBER 9, 2019

Recently, the Association of German Data Protection Authorities (“ Datenschutzkonferenz ” or “DSK”) issued guidelines setting a GDPR fining methodology (“Fining Methodology”). GDPR enforcement across the EU has picked up over the past year. The involvement of an entity is triggered when it exercises ‘decisive influence’.

GDPR 60

GDPR Personal data Privacy Manufacturing 60

Data Matters

DECEMBER 9, 2019

Recently, the Association of German Data Protection Authorities (“ Datenschutzkonferenz ” or “DSK”) issued guidelines setting a GDPR fining methodology (“Fining Methodology”). GDPR enforcement across the EU has picked up over the past year. The involvement of an entity is triggered when it exercises ‘decisive influence’.

GDPR 60

GDPR Personal data Privacy Manufacturing 60

Data Matters

JULY 8, 2019

Today we saw the ICO issue a notice of its intention to fine British Airways £183.39m for infringements of the GDPR – a record fine and the largest seen in the UK and the EU. This action by the ICO demonstrates that they are prepared to enforce the GDPR and levy significant fines.

GDPR 74

GDPR Privacy Data breaches Risk 74

AIIM

JULY 24, 2018

You might also be interested in: The Re-Permissioning Dilemma Under GDPR. Data Privacy and Open Data: Secondary Uses under GDPR. Three Critical Steps for GDPR Compliance. GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law. What Do the GDPR and new Privacy Laws Mean for U.S.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

Data Protector

AUGUST 17, 2020

If the EU’s ‘level data protection playing field’ means continuing to fully implement all aspects of European data protection law, including all aspects of the two-year-old General Data Protection Regulation (GDPR), then what was the point of Brexit? The GDPR has had a profound impact on many organisations.

Privacy 156

Privacy GDPR Personal data Computer and Electronics 156

Hunton Privacy

SEPTEMBER 10, 2020

On September 7, 2020, the European Data Protection Board (“EDPB”) released draft Guidelines 07/2020 on the concepts of controller and processor in the EU General Data Protection Regulation (“GDPR”) (the “Guidelines”). However, the GDPR has introduced new obligations on those actors.

GDPR 95

GDPR Personal data Data breaches Compliance 95

Collibra

FEBRUARY 25, 2021

The General Data Protection Regulation (GDPR) mandates businesses to make provisions for EU citizens to exercise their right to access and control their personal data, including the export of personal data outside the EU. But hurriedly planning for the GDPR is not the solution. Six phases of GDPR compliance.

GDPR 40

GDPR Compliance Personal data Data Privacy 40

IT Governance

MARCH 20, 2018

In the lead up to May, it is important your organisation prioritises steps to prove that you are making an effort to comply with the EU General Data Protection Regulation (GDPR). D ata subject access request procedures under the GDPR. What is a data subject access request?

GDPR 77

GDPR Access Personal data Compliance 77

Data Protection Report

JUNE 6, 2023

Whilst a significant part of the MPN is focussed on TikTok’s non compliance with the rules around processing children’s personal data, the MPN also clarifies how the ICO interprets the requirements in Article 13 of the UK GDPR more generally.

Privacy 97

Privacy GDPR Personal data Compliance 97

IT Governance

MAY 28, 2019

Last week, the GDPR (General Data Protection Regulation) turned one year old. GDPR compliance is an ongoing process and should be embedded by design in your data protection practices. The GDPR is as broad as possible when it comes to the security measures that organisations should implement.

GDPR 72

GDPR Compliance Personal data Risk 72

IT Governance

NOVEMBER 8, 2018

This blog was originally published before the GDPR took effect in May 2018. This blog explains how to write a GDPR-compliant DSAR (data subject access request) procedure to ensure you meet your obligations as a data controller. Data subject access request procedures under the GDPR. Updated X November 2018.

GDPR 72

GDPR Access Personal data Compliance 72

The Last Watchdog

AUGUST 23, 2021

For example, suppose you have workers in the EU. In that case, you must abide by the General Data Protection Regulation (GDPR), which imposes fines on some activities that are perfectly legal in the U.S. Similarly, different nations exercise varying amounts of authority over internet traffic. •Inconsistent data regulations.

Communications 220

Communications Cybersecurity GDPR Risk 220

IT Governance

MAY 9, 2018

A data flow map should be one of the first things your organisation produces as you prepare for the EU General Data Protection Regulation (GDPR). You might be surprised at how often your information is copied or transferred, which is why the GDPR makes it such a top priority. Where to begin? names, email addresses, records).

GDPR 66

GDPR Compliance Personal data Paper 66

IT Governance

JUNE 21, 2018

Article 30 of the EU General Data Protection Regulation (GDPR) sets out what exactly organisations need to document in order to comply with the Regulation. You might be surprised at how often your information is copied or transferred, which is why the GDPR makes it such a top priority. What does Article 30 require? Formats (e.g.

GDPR 64

GDPR Personal data Risk Cloud 64

IT Governance

APRIL 12, 2018

Compliance with the EU General Data Protection Regulation (GDPR) should be a priority for all EU organisations, and non-EU organisations that monitor the behaviour or offer goods and services to EU residents. The GDPR is far more extensive in scope and application than the current Data Protection Act.

GDPR 63

GDPR Compliance Personal data Risk 63

DLA Piper Privacy Matters

JULY 8, 2020

Companies like financial institutions and telecom providers use this information, for example, to assess whether new customers can pay a loan. The fine has been imposed due to the fact that BKR’s procedure for data subjects to obtain access to their personal data was not in line with GDPR.

Access 98

Access GDPR Personal data IT 98

Hunton Privacy

MARCH 17, 2017

On March 15, 2017, the French data protection authority (the “CNIL”) published a six step methodology and tools for businesses to prepare for the EU General Data Protection Regulation (“GDPR”) that will become applicable on May 25, 2018. This will allow them to be one step ahead and better organized to comply with the upcoming GDPR.

GDPR 75

GDPR Personal data Compliance Privacy 75

DLA Piper Privacy Matters

MARCH 6, 2023

f) GDPR) as a legal basis for processing vehicle tracking data by public authorities. GDPR in fine that excludes the possibility for public authorities to rely on legitimate interest for processing carried out “in the performance of their tasks” and concludes that the vehicle tracking system falls within the relevant authority’s tasks.

GDPR 98

GDPR Personal data Compliance IT 98

Hunton Privacy

MARCH 8, 2018

On March 6, 2018, the Centre for Information Policy Leadership (“CIPL”) at Hunton & Williams LLP issued a white paper on GDPR Implementation in Respect of Children’s Data and Consent (the “White Paper”). To read CIPL’s position on the points above, in addition to its other recommendations, please view the full White Paper.

Paper 49

Paper GDPR Personal data Marketing 49

Hunton Privacy

DECEMBER 15, 2017

Recently, the EU’s Article 29 Working Party (the “Working Party”) adopted guidelines (the “Guidance”) on the meaning of consent under the EU General Data Protection Regulation (“GDPR”). The Guidance provides further detail on what is necessary to ensure that consent satisfies the requirements of the GDPR: Freely given.

GDPR 63

GDPR Personal data Risk Compliance 63

DLA Piper Privacy Matters

APRIL 2, 2019

On 25 March 2019, the Polish data protection authority (DPA) (referred to in Polish as “PUODO”) announced the imposition of the first GDPR-related fine in Poland. EUR 230,415 ) for a failure to comply with the information obligation set forth in Article 14 of the GDPR. 14 5(b) of the GDPR. 2 of the GDPR.

GDPR 93

GDPR Personal data IT Paper 93

Hunton Privacy

MARCH 19, 2019

On March 12, 2019, the European Data Protection Board (“EDPB”) adopted an opinion on the interplay between the EU Directive on Privacy and Electronic Communications (“the ePrivacy Directive”) and the General Data Protection Regulation (“GDPR”) (the “Opinion”). Interplay between the ePrivacy Directive and the GDPR.

GDPR 45

GDPR Personal data Communications Government 45

HL Chronicle of Data Protection

MARCH 5, 2020

The Recommendation provides a methodology on how to comply with the General Data Protection Regulation (GDPR) when conducting direct marketing. In line with Article 5 of the GDPR, The Belgian DPA underlines the importance of identifying the personal data that is absolutely necessary for achieving the purpose of direct marketing.

Marketing 59

Marketing GDPR Personal data Healthcare 59

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. law, consumers and the marketplace have been comfortable with to date.

GDPR 79

GDPR Privacy Sales Data breaches 79

DLA Piper Privacy Matters

APRIL 25, 2023

15(3) GDPR must be interpreted as requiring a data controller to provide the data subject with a copy of his or her personal data, even where the data subject requests the copy for purposes unrelated to data protection. 15(3) GDPR. In particular, the AG took the view that Art. 12(5) and Art. 12(5) and Art. 12(5) and Art.

Access 52

Access GDPR Personal data IT 52

Data Protection Report

MAY 23, 2018

The wait is finally over—this Friday the European Union General Data Protection Regulation (GDPR) will come into force. However, the challenges of GDPR certainly don’t end on the date this law goes into implementation. Many of our clients ask us when and how they may be called upon to demonstrate compliance with the GDPR.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Hunton Privacy

JUNE 1, 2018

On May 30, 2018, the European Data Protection Board (“EDPB”), replacing the Article 29 Working Party , published the final version of Guidelines 2/2018 on derogations in the context of international data transfers and draft Guidelines 1/2018 on certification under the EU General Data Protection Regulation (“GDPR”). .

GDPR 58

GDPR Personal data Compliance Risk 58

Hunton Privacy

JANUARY 14, 2021

Facebook had asserted that with the General Data Protection Regulation (“GDPR”) becoming applicable in May 2018, the Belgian DPA did not have competence to continue the judicial proceedings for infringements of the GDPR in relation to cross-border data processing. and Facebook Ireland Ltd. AG Opinion.

GDPR 81

GDPR Personal data Risk IT 81

DLA Piper Privacy Matters

NOVEMBER 29, 2021

The guide is in line with the Article 29 Working Party Guidelines on Data Protection Officers (WP 243 rev 01) , but provides additional insights and practical guidance to organizations that designate a DPO in respect of GDPR and French data protection act requirements. Be the point of contact on GDPR issues.

GDPR 116

GDPR Compliance Personal data Communications 116

Data Protection Report

NOVEMBER 2, 2023

Regulated firms remain responsible for any data that they outsource and, in line with this, they must exercise appropriate oversight of any outsourcing – firms may want to consider, for example, what would happen if there was an issue, including whether back-up is adequate and if they would receive appropriate information if something did go wrong.

GDPR 77

GDPR Risk Cybersecurity Compliance 77

IT Governance

FEBRUARY 28, 2018

Privacy by design and the GDPR. The upcoming EU General Data Protection Regulation (GDPR) will supersede the DPA. Article 25 of the GDPR, “[d]ata protection by design and default”, requires you to “implement appropriate technical and organisational measures” throughout your data processing project.

Privacy 68

Privacy GDPR Personal data Compliance 68

DLA Piper Privacy Matters

JANUARY 15, 2021

In late 2019, the Claimant issued proceedings and sought various relief, including in connection with an allegation that the Defendant had failed to provide data, contrary to the Data Protection Act 2018 ( “DPA 18” ) and the General Data Protection Regulation (EU) 2016/679 ( “GDPR” ). In each case, the answer had been adequate.

Access 122

Access GDPR Personal data Retail 122

IT Governance

JUNE 13, 2019

If your organisation is subject to the GDPR (General Data Protection Regulation) , you’re probably aware of your requirement to “implement appropriate technical and organisational measures” to protect the personal data you hold. Data protection by design and by default has been recommended good practice since long before the GDPR took effect.

GDPR 90

GDPR Personal data Compliance Privacy 90

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. law, consumers and the marketplace have been comfortable with to date.

GDPR 60

GDPR Privacy Sales Data breaches 60

HL Chronicle of Data Protection

OCTOBER 3, 2018

As the most comprehensive privacy law to be enacted in the United States thus far, the California Consumer Privacy Act (CCPA) has inevitably invited comparisons to the European Union’s General Data Protection Regulation (GDPR). The GDPR and CCPA take different approaches to defining the types of entities that must comply with the law.

GDPR 55

GDPR Privacy Personal data Sales 55

Data Protection Report

JUNE 4, 2018

Websites go dark, complaints are filed within an hour, European Commission suffers an embarrassing data leak, and the US Commerce Secretary warns about the unintended trade impact of the law – all in the first week of the GDPR. billion – roughly 4 percent of each company’s revenue for 2017, the maximum penalty allowed under the GDPR.

GDPR 40

GDPR Compliance Personal data Privacy 40