Gimmal

JUNE 10, 2022

Craig Carpenter and Dean Gonsowski , Gimmal’s CEO and CRO respectively, spoke with Ari about information discovery, migration, governance, and compliance, and how Gimmal helps organization address their biggest information governance challenges. It started as a GRC — governance risk and compliance — consulting firm.

Information governance 52

Information governance Government Privacy Risk 52

Thales Cloud Protection & Licensing

AUGUST 15, 2019

375 the California Consumer Privacy Act (CCPA), making California the first U.S. state to pass its own data privacy law. For example, data collected by an entity may not be associated with an individual but could identify a household. On June 28, 2018 the governor of California Jerry Brown signed into law with Assembly Bill No.

Privacy 92

Privacy GDPR Digital transformation Sales 92

Privacy and Cybersecurity Law

DECEMBER 10, 2020

Chantal Bernier, National Practice Leader, Privacy and Cybersecurity, Dentons Canada LLP Former Interim Privacy Commissioner of Canada. It will apply to all businesses across Canada, except to provincial businesses in Alberta, British Columbia and Québec where provincial privacy laws apply to the private sector. .

Privacy 89

Privacy Compliance Artificial Intelligence Risk 89

Data Matters

NOVEMBER 16, 2020

The changes become law once a government gazette is passed (possibly before the end of 2020). If you operate in Singapore, handle Singapore data, or maintain a server in Singapore, it is crucial that you have protocols in place to guide employees on what to do when a data breach occurs and consider doing a data breach tabletop exercise. (We

Data Privacy 68

Data Privacy Privacy Data breaches Personal data 68

Data Matters

JANUARY 28, 2022

The advisory was promptly endorsed by the National Cyber Security Centre, a division of Government Communications Headquarters (“GCHQ”), a UK intelligence agency. government, especially in light of ongoing tensions between the U.S. Create, Maintain, and Exercise a Cyber Incident Response, Resilience, and Continuity of Operations Plan.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

The Last Watchdog

AUGUST 23, 2021

For example, suppose you have workers in the EU. For instance, if you have employees in China and the EU, you’ll have to obtain Chinese government approval to provide data from China to EU authorities enforcing the GDPR. Government Monitoring. In some countries, government agencies may monitor your employees’ web activity.

Communications 223

Communications Cybersecurity GDPR Risk 223

Data Matters

JULY 8, 2019

Ensuring that a company is properly prepared for and responds to privacy and cyber security threats is a key corporate governance responsibility for directors and senior officers. The post UK ICO issues largest ever GDPR privacy fine of £183m ($228m) appeared first on Data Matters Privacy Blog.

GDPR 74

GDPR Privacy Data breaches Risk 74

Hunton Privacy

MARCH 11, 2019

On March 5, 2019, the Global Privacy Enforcement Network (“GPEN”), a global network of more than 60 data protection authorities (“DPAs”) around the world, published the results of its 2018 intelligence gathering operation on organizations’ data privacy accountability practices (the “Sweep”).

Privacy 74

Privacy Data Privacy GDPR Personal data 74

HL Chronicle of Data Protection

MARCH 31, 2020

The reported goals of the bill include, for example: (i) broadening data subjects’ powers to exercise control over their data; and (ii) to establish a system to facilitate corporation’s internal use of “big data.” This may apply to, for example, data collected through Internet cookies.

Privacy 66

Privacy Personal data Big data Data collection 66

Hunton Privacy

MAY 12, 2023

This independent exercise will provide critical information to researchers and the public about the impacts of these models, and will enable AI companies and developers to take steps to fix issues found in those models. government is leading by example on mitigating AI risks and harnessing AI opportunities.

Artificial Intelligence 110

Artificial Intelligence Agriculture Cybersecurity Risk 110

DLA Piper Privacy Matters

JULY 1, 2019

Why are SCCs and Privacy Shield important? Privacy Shield is a separate scheme which legitimises transfers of data to the US. Privacy Shield allows businesses to lawfully transfer personal data from within the EEA to US businesses who self-certify compliance to certain privacy principles. How has the Schrems 2.0

Privacy 94

Privacy Personal data GDPR Risk 94

Data Matters

JUNE 29, 2018

Jerry Brown signed into law the California Consumer Privacy Act of 2018 (AB 375). This legislation was enacted on an extraordinarily accelerated timeframe as part of compromise with the sponsor of a comparable privacy ballot initiative, which had qualified to be placed before state voters on Election Day in November 2018.

GDPR 79

GDPR Privacy Sales Data breaches 79

IBM Big Data Hub

JANUARY 22, 2024

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. The law outlines a set of data privacy rights for users and a series of principles for the processing of personal data. Schools, hospitals and government agencies all fall under GDPR authority.

GDPR 89

GDPR Compliance Personal data Privacy 89

Data Protection Report

JANUARY 6, 2020

The Court of Justice of the European Union (CJEU) will determine the validity of the EU Standard Contractual Clauses (SCCs) ( Data Protection Commissioner v Facebook Ireland Limited, Maximillan Schrems ) whilst the General Court of the EU will consider the future of Privacy Shield (La Quadrature du Net v Commission).

Privacy 84

Privacy GDPR Data breaches Risk 84

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. For example, a business that collects user health data needs stronger protections than one that collects only email addresses. Privacy policies should use plain language that anyone can understand.

GDPR 83

GDPR Compliance Personal data Privacy 83

DLA Piper Privacy Matters

OCTOBER 31, 2019

An updated draft of China’s Amended Personal Information Security Specification (“Amended PIS Specification”) and proposed new amendments to the privacy specification for mobile apps (“App Privacy Specification”) were published this week, alongside brand new draft privacy regulations for the banking sector.

Data Privacy 49

Data Privacy Privacy Data collection Data breaches 49

eSecurity Planet

JANUARY 27, 2023

.” A Widespread Campaign CISA determined via its EINSTEIN intrusion detection system that in mid-June 2022, attackers sent a phishing email containing a phone number to a federal employee’s government email address. Implement a user training program and phishing exercises to raise awareness among users.

Phishing 109

Phishing Data Privacy Cybersecurity Access 109

Hunton Privacy

JULY 5, 2023

NYDFS clarified that where a cybersecurity program or part of a cybersecurity program is adopted from an affiliate, the “senior governing body” ( e.g. , a board or equivalent governing body) may be that of the affiliate. As described below, senior governing bodies would have new oversight responsibilities under the amendments.

Cybersecurity 113

Cybersecurity IT Compliance Financial Services 113

Data Matters

JUNE 29, 2018

Jerry Brown signed into law the California Consumer Privacy Act of 2018 (AB 375). This legislation was enacted on an extraordinarily accelerated timeframe as part of compromise with the sponsor of a comparable privacy ballot initiative, which had qualified to be placed before state voters on Election Day in November 2018.

GDPR 60

GDPR Privacy Sales Data breaches 60

Data Matters

JUNE 1, 2021

Earlier this month, at the request of the UK’s Government, the DRCF published a series of recommendations to improve cooperation between the DRCF members. For example, this was a key question in a case recently referred to, and awaiting preliminary judgment from, the EU’s highest court. DRCF’s Recommendations.

Government 68

Government Privacy Communications Marketing 68

DLA Piper Privacy Matters

DECEMBER 3, 2021

International businesses with global privacy compliance programs should seek to expand those to cover the UAE and achieve some synergies. For example, consents must be clear, simple, unambiguous and in an easily accessible form, whether in writing or electronically. The PDPL therefore has extraterritorial application. Exceptions.

Personal data 105

Personal data Data breaches GDPR Compliance 105

Hunton Privacy

JUNE 29, 2018

On June 28, 2018, the Governor of California signed AB 375 , the California Consumer Privacy Act of 2018 (the “Act”). The Act introduces key privacy requirements for businesses, and was passed quickly by California lawmakers in an effort to remove a ballot initiative of the same name from the November 6, 2018, statewide ballot.

Privacy 55

Privacy Sales Personal data Communications 55

IT Governance

OCTOBER 3, 2019

You must tell people when you’re collecting their personal information to give them the opportunity to exercise their data subject rights. If you’re using CCTV to monitor employees, you should also explain in your privacy policy that they are being recorded. What’s the difference between a privacy policy and privacy notice?

GDPR 110

GDPR Privacy Retail Personal data 110

Collibra

MARCH 12, 2020

Collibra recently partnered with Kelle O’Neal, CEO of First San Francisco Partners (FSFP), to host a joint webinar “ Meeting the CCPA Challenge ” about the complexities of the California Consumer Protection Act (CCPA) for the International Association of Privacy Professionals (IAPP). Competition is fierce. Right to equal service.

Data Privacy 59

Data Privacy Privacy Government Compliance 59

Collibra

JANUARY 14, 2021

Data Privacy Day is celebrated on 28th of January every year. In this blog post, we’ll outline the steps it takes to get an enterprise data protection program going by leveraging core data governance principles. Each control is managed within the governance function together with expected answers. Identify business data owners.

Compliance 101

Compliance Government Risk Privacy 101

IT Governance

NOVEMBER 15, 2021

Microsoft’s exam description notes that the qualification demonstrates candidates’ “fundamental knowledge of cloud concepts, as well as Azure services, workloads, security, privacy, pricing, and support”. The Azure Administrator certification, for example, must be renewed each year. So what do you need to pass the Azure AZ-900 exam?

Cloud 98

Cloud Compliance Privacy Government 98

Data Matters

OCTOBER 24, 2019

Today we look at verification, children’s privacy and the non-discrimination provisions. In the summer of 2018, the California Legislature drafted and passed the California Consumer Privacy Act (CCPA) in record time. DETAILED ANALYSIS ON VERIFICATION, CHILDREN’S PRIVACY AND NON-DISCRIMINATION. INTRO AND BACKGROUND.

Privacy 60

Privacy Sales Authentication Passwords 60

AIIM

JULY 24, 2018

This is the 11th post in a series on privacy by Andrew Pery. Data Privacy and Open Data: Secondary Uses under GDPR. Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. Privacy by Design: The Intersection of Law and Technology. Three Critical Steps for GDPR Compliance.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

Data Protection Report

JANUARY 6, 2020

The Court of Justice of the European Union (CJEU) will determine the validity of the EU Standard Contractual Clauses (SCCs) ( Data Protection Commissioner v Facebook Ireland Limited, Maximillan Schrems ) whilst the General Court of the EU will consider the future of Privacy Shield (La Quadrature du Net v Commission).

Privacy 52

Privacy GDPR Data breaches Risk 52

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

Consumer privacy rights in California are well established. The California Constitution expressly grants California citizens a right to privacy. The International Association of Privacy Professionals estimates at least 500,000 U.S. The CCPA governs how businesses treat “consumer” “personal information.” What Is Covered?

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

Consumer privacy rights in California are well established. The California Constitution expressly grants California citizens a right to privacy. The International Association of Privacy Professionals estimates at least 500,000 U.S. The CCPA governs how businesses treat “consumer” “personal information.” What Is Covered?

Privacy 58

Privacy Sales Education Compliance 58

Elie

DECEMBER 12, 2019

is a landmark European ruling that governs the delisting of personal information from search results. Each delisting decision requires careful consideration of the balance between respecting user privacy and ensuring open access to information via Google Search. Right to be Forgotten” (RTBF). transparency report.

Privacy 118

Privacy Paper Government GDPR 118

Data Matters

JUNE 13, 2022

More than ever, a ‘joined up’ approach is required to assess them, and the UK’s main regulators are working together to try to formulate a coherent policy, setting an interesting example that could be a template for global approaches to digital regulation. This can result in difficulties in people exercising their rights (e.g.,

Paper 97

Paper Communications Risk Marketing 97

DLA Piper Privacy Matters

NOVEMBER 29, 2021

The DPO must be invited to strategic meetings and requested to provide advice on all processing where his/her intervention or presence must be systematic, notably in case of evolution of processing, conduct of a data protection impact assessment(“DPIA”), revision of existing privacy policies or drafting of new policies, data breaches etc.

GDPR 116

GDPR Compliance Personal data Communications 116

Data Protection Report

JUNE 17, 2020

The opinion suggested that parties using the SCCs need to make an assessment of whether the national security, communication and surveillance laws of the country of the data importer are “essentially equivalent” to those in the EU, i.e. they respects privacy rights and freedoms, provide effective remedies, etc.

Personal data 119

Personal data Communications Access GDPR 119

Hunton Privacy

JULY 14, 2020

The EDPB Guidelines should describe the applicable grounds to exercise DSRs and provide a common assessment matrix for their handling. The Paper also highlights the current lack of harmonization across the EU in how DSRs are applied, stemming from inconsistency in guidelines and standard forms issued by DPAs.

Paper 108

Paper GDPR Education Access 108

Data Protection Report

AUGUST 1, 2019

Clarifying Lawful Overseas Use of Data Act (“CLOUD Act”) is apparently the Goldilocks of the privacy world, according to recent statements issued by two international jurisdictions. The EDPB and EDPS (collectively, the “European Regulators”) found that the CLOUD Act’s privacy protections were “too soft.”. 2523(b)(3)).

Cloud 40

Cloud Privacy e-Discovery Personal data 40