Collibra

JANUARY 28, 2019

For companies, getting data privacy right is no longer just a compliance exercise – a box to be ticked. Instead, having a robust approach to managing personal data well is beginning to be seen as an important competitive advantage for organizations. Today – January 28 – is Data Privacy Day around the globe.

Personal data 40

Personal data Compliance Data Privacy Artificial Intelligence 40

Data Matters

SEPTEMBER 30, 2020

government released a “White Paper” addressing how U.S. of personal data of EU residents, following the decision of the Court of Justice of the European Union (“CJEU,” or “ECJ”) in Schrems II – more formally known as Data Protection Commissioner v. national security law protects EU personal data.

Paper 128

Paper Government Security Privacy 128

IBM Big Data Hub

JANUARY 22, 2024

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Any company operating in the EU or handling EU residents’ data must adhere to GDPR requirements. Schools, hospitals and government agencies all fall under GDPR authority.

GDPR 86

GDPR Compliance Personal data Privacy 86

Hunton Privacy

APRIL 25, 2022

Interested parties are invited to provide contributory research to reference and use case examples from the practice that impact or manipulate consumer choice.

Privacy 110

Privacy Personal data Sales Compliance 110

Data Protection Report

DECEMBER 17, 2020

On 25 November 2020, the European Commission ( EC ) published its proposed Data Governance Regulation (the DGR ), which will create a new legal framework to encourage the development of a European single market for data. They will be the only third parties able to run so-called data exchanges or trusts for data pools.

Government 90

Government Personal data GDPR Access 90

DLA Piper Privacy Matters

DECEMBER 3, 2021

45 of 2021 on the Protection of Personal Data Protection (“ PDPL ”), which was issued on 26 September 2021. In this regard we expect it will be welcomed by local, regional and international businesses, in particular those that rely heavily upon personal data and international personal data flows. Exceptions.

Personal data 105

Personal data Data breaches GDPR Compliance 105

Data Matters

JANUARY 28, 2022

The advisory was promptly endorsed by the National Cyber Security Centre, a division of Government Communications Headquarters (“GCHQ”), a UK intelligence agency. government, especially in light of ongoing tensions between the U.S. Create, Maintain, and Exercise a Cyber Incident Response, Resilience, and Continuity of Operations Plan.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Data Protection Report

DECEMBER 17, 2020

On 25 November 2020, the European Commission ( EC ) published its proposed Data Governance Regulation (the DGR ), which will create a new legal framework to encourage the development of a European single market for data. What are the objectives of the Data Governance Regulation?

Government 101

Government Personal data Marketing Artificial Intelligence 101

Data Protection Report

JUNE 17, 2020

This judgement concerns the legality of the European Commission approved Standard Contractual Clauses ( SCCs ) which many organisations rely on to transfer personal data outside of the UK and the European Economic Area ( EEA ), particularly in relation to outsourcing services. The third thing to consider is your position.

Personal data 118

Personal data Communications Access GDPR 118

Data Protector

AUGUST 17, 2020

I see the IPA as an outstanding example that Governments of all countries should adopt to ensure that public authorities act transparently and put effective mechanisms in place to ensure that human rights are appropriately respected. Where opinion formers had concerns, these issues should be addressed.

Communications 156

Communications Government Personal data Compliance 156

IBM Big Data Hub

FEBRUARY 23, 2024

The GDPR puts forth a litany of rules for how organizations in and outside of Europe handle the personal data of EU residents. The details of any organization’s plan to become fully GDPR compliant will vary based on the data the organization collects and what it does with that data.

GDPR 80

GDPR Compliance Personal data Privacy 80

DLA Piper Privacy Matters

AUGUST 3, 2021

Before Schrems II, the “old” SCCs were routinely included in IT contracts without actually considering thoroughly the interplay between those old SCCs and the IT agreement as such, for example, in case of suspension or termination of the data transfers, as such suspension or termination did not happen in practice.

IT 119

IT Personal data Compliance Risk 119

Data Matters

NOVEMBER 16, 2020

On November 2, 2020, Singapore’s legislature finally approved amendments to the Personal Data Protection Act (PDPA). The changes become law once a government gazette is passed (possibly before the end of 2020). NEW mandatory data breach notification requirement. Note similarities to the General Data Protection Regulation.

Data Privacy 68

Data Privacy Privacy Data breaches Personal data 68

HL Chronicle of Data Protection

MARCH 31, 2020

On Tuesday, March 10, the Japanese Cabinet approved a bill to revise the Act on the Protection of Personal Information (“APPI”), which would require companies to take certain additional measures to protect personal data of data subjects. This may apply to, for example, data collected through Internet cookies.

Privacy 66

Privacy Personal data Big data Data collection 66

IT Governance

DECEMBER 6, 2023

As privacy professionals, we see consumers exercising their rights to withdraw consent to their data being processed via ‘opt out’ or ‘unsubscribe’ buttons, for example. The guidance in ISO 29151, which specifies controls that help protect personal data. An ISO 27701 PIMS (privacy information management system).

Data Privacy 59

Data Privacy Privacy GDPR IT 59

Data Protection Report

NOVEMBER 2, 2023

In 2017, Equifax Inc, suffered a cybersecurity breach, with hackers able to access the personal data of around 13.8 The breach included data held by Equifax Inc in connection with two of Equifax’s products.

GDPR 77

GDPR Risk Cybersecurity Compliance 77

Data Matters

NOVEMBER 11, 2020

Privacy Shield program (“Privacy Shield”) and potentially required supplementary protections to be implemented when Standard Contractual Clauses (“SCCs”) are used to ensure an ‘essentially equivalent’ level of data protection. Government White Paper guidance on Schrems II.

Personal data 126

Personal data GDPR Privacy Compliance 126

DLA Piper Privacy Matters

NOVEMBER 29, 2021

The CNIL provides practical advice to the management and the operational staff who process personal data, in order to ensure that such processing is carried out in compliance with the applicable data protections laws. The DPO is the key contact for the CNIL and data subjects. Provide information and advice.

GDPR 116

GDPR Compliance Personal data Communications 116

ARMA International

APRIL 18, 2022

The purpose of this article is to remove the fear and intimidation of domestic and global data protection laws and show how these laws and requirements are consistent with the existing objectives of your records retention schedule and information governance policy. Definition and Purpose of a Records Retention Schedule.

Personal data 100

Personal data GDPR Privacy Records Management 100

Hunton Privacy

NOVEMBER 12, 2020

Accordingly, the Recommendations include a 6-step process outlining the steps data exporters must take to determine if they need to identify and implement effective supplementary measures. The Recommendations also include examples of supplementary measures, setting forth some of the conditions they must satisfy in order to be effective.

GDPR 78

GDPR Personal data Access Government 78

Hunton Privacy

FEBRUARY 24, 2020

This is the first piece of guidance published by the ICO that has a broad focus on the management of several different risks arising from AI systems, as well as governance and accountability measures. It also provides a methodology to audit AI applications and ensure they process personal data fairly.

Personal data 57

Personal data Artificial Intelligence Risk Privacy 57

DLA Piper Privacy Matters

OCTOBER 7, 2021

The Middle East’s data protection regulatory landscape is complex, and continues to develop with Saudi Arabia’s ( KSA ) newly published Personal Data Protection Law ( PDPL ). While the PDPL contains the main features of a modern data protection law, it cannot be considered a direct analogue of the GDPR. Direct marketing.

Personal data 96

Personal data Compliance Computer and Electronics IoT 96

IT Governance

OCTOBER 3, 2019

You must tell people when you’re collecting their personal information to give them the opportunity to exercise their data subject rights. These rights enable individuals to access the personal data organisations store on them and to challenge the way their information is used.

GDPR 110

GDPR Privacy Retail Personal data 110

IT Governance

JUNE 13, 2019

If your organisation is subject to the GDPR (General Data Protection Regulation) , you’re probably aware of your requirement to “implement appropriate technical and organisational measures” to protect the personal data you hold. An essential principle of this is data protection by design and by default.

GDPR 90

GDPR Personal data Compliance Privacy 90

IT Governance

NOVEMBER 8, 2018

The EU’s GDPR (General Data Protection Regulation) gives data subjects the right to access their personal data from data controllers that are processing it and “to exercise that right easily and at reasonable intervals, in order to be aware of, and verify, the lawfulness of the processing”.

GDPR 72

GDPR Access Personal data Compliance 72

IT Governance

OCTOBER 7, 2019

HR plays a crucial role in an organisation’s GDPR (General Data Protection Regulation) compliance. The department is full of personal data, whether it’s of employees, their next of kin or candidates responding to job adverts. Let’s take a look at five issues that HR must address when handling personal data.

GDPR 68

GDPR Personal data Compliance Communications 68

DLA Piper Privacy Matters

FEBRUARY 23, 2022

The European Commission today presented its second instrument in the European Data Strategy; a “Regulation on harmonised rules on fair access to and use of data”, better known as the Data Act. In the proposal, “data” is broadly defined and contains both personal and non-personal data.

GDPR 97

GDPR Personal data IoT Access 97

AIIM

JANUARY 10, 2019

One of the most notable blockchain skeptics – David Gerard –argues that if “you were silly enough to put personal data into an append-only ledger which is a proof-of-work blockchain — that’d be flat-out insane.”. Both blockchain and GDPR are designed to “democratize” data by giving more control over its use to individuals.

Blockchain 115

Blockchain GDPR Privacy Personal data 115

Hunton Privacy

NOVEMBER 5, 2020

On October 22, 2020, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth submitted its response to the UK Department for Digital, Culture, Media and Sport (“DCMS”) call for views and evidence on its review of representative actions under Section 189 of the Data Protection Act 2018 (“DPA”).

Compliance 107

Compliance Data breaches Personal data Marketing 107

DLA Piper Privacy Matters

MAY 23, 2023

For Meta, the decision has resulted in a record administrative fine of €1.2bn, an order to suspend further transfers of EEA personal data to the US within five months, and an order to cease all unlawful processing of EEA personal data transferred to the US in violation of GDPR, within six months.

Personal data 59

Personal data GDPR Risk Privacy 59

Hunton Privacy

MARCH 19, 2019

The Belgian Data Protection Authority (“DPA”) requested the Opinion, highlighting questions on the competence, tasks and powers of EU DPAs and the applicability of the GDPR’s cooperation and consistency mechanisms in those situations where both the GDPR and the ePrivacy Directive apply to the processing of personal data.

GDPR 45

GDPR Personal data Communications Government 45

Data Matters

FEBRUARY 19, 2021

which addresses UK government surveillance activities). The EU GDPR prohibits the transfer of personal data to a country outside the European Economic Area ( EEA ) (otherwise known as a third country ) that is not considered to provide an ‘adequate level’ of data protection by the EC unless ‘appropriate safeguards’ are implemented (e.g.,

GDPR 68

GDPR Personal data Privacy Access 68

Collibra

FEBRUARY 25, 2021

The General Data Protection Regulation (GDPR) mandates businesses to make provisions for EU citizens to exercise their right to access and control their personal data, including the export of personal data outside the EU. People and processes to manage the security and privacy of customer data.

GDPR 40

GDPR Compliance Personal data Data Privacy 40

Data Matters

MARCH 4, 2021

Rather, to be covered by the VCDPA, an entity must either “(i) during a calendar year, control or process personal data of at least 100,000 consumers or (ii) control or process personal data of at least 25,000 consumers and derive over 50 percent of gross revenue from the sale of personal data.”. Exemptions.

Personal data 74

Personal data GDPR Sales Privacy 74

Data Matters

JUNE 25, 2021

The European Data Protection Board (“ EDPB ”), adopted on 18 June 2021 its final recommendations describing how controllers and processors transferring personal data outside the European Economic Area (“ EEA ”) may comply with the Schrems II ruling (“ Final Schrems II Recommendations ”). STEP 1 – Mapping Exercise.

Personal data 79

Personal data Access Communications Cloud 79

IT Governance

MARCH 11, 2019

Technically, this is the law that replaces the DPA 1998, and both it and the GDPR currently apply to all organisations in the UK that process personal data. The UK government decided that it makes sense to continue using the existing framework, given that it already applies in the UK. Wait… what? An overview of the DPA.

GDPR 79

GDPR Personal data Compliance Government 79

Hunton Privacy

AUGUST 12, 2020

On the first ground, the Court of Appeal overturned the High Court’s determination, finding “fundamental deficiencies” in the legal framework around the use of AFR, specifically the policies that governed its use. For example, it highlighted that the DPIA had specifically referred to the relevance of Article 8 of the ECHR.

Personal data 111

Personal data Risk IT Privacy 111