DLA Piper Privacy Matters

SEPTEMBER 17, 2018

30 of 2018 on the Personal Data Protection Law (PDPL). It will provide individuals with rights in relation to how their personal data can be collected, processed and stored. The PDPL also imposes new obligations upon businesses to ensure that the personal data they collect is kept secure. REGULATION.

Personal data 49

Personal data GDPR Compliance Risk 49

Data Protector

AUGUST 17, 2020

Some UK organisations will inevitably have to follow all the EU’s data protection rules because they will continue to process the personal data of individuals in the EU. Money spent on improving information security controls is always appropriate – and such expenditure should have been made, regardless of the GDPR.

Privacy 156

Privacy GDPR Personal data Computer and Electronics 156

DLA Piper Privacy Matters

DECEMBER 3, 2021

45 of 2021 on the Protection of Personal Data Protection (“ PDPL ”), which was issued on 26 September 2021. In this regard we expect it will be welcomed by local, regional and international businesses, in particular those that rely heavily upon personal data and international personal data flows. Exceptions.

Personal data 105

Personal data Data breaches GDPR Compliance 105

Hunton Privacy

MARCH 20, 2020

On March 19, 2020, the Irish Data Protection Authority (the “DPC”) published guidance to assist organizations in understanding their data security obligations and to mitigate their risks of a personal data breach when using cloud-based services (the “Guidance”). Reviewing Default Security Settings.

Cloud 75

Cloud Security Personal data Encryption 75

IBM Big Data Hub

JANUARY 22, 2024

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Any company operating in the EU or handling EU residents’ data must adhere to GDPR requirements. Everything from email addresses to political opinions counts as personal data.

GDPR 86

GDPR Compliance Personal data Privacy 86

Data Protection Report

JUNE 17, 2020

This judgement concerns the legality of the European Commission approved Standard Contractual Clauses ( SCCs ) which many organisations rely on to transfer personal data outside of the UK and the European Economic Area ( EEA ), particularly in relation to outsourcing services.

Personal data 118

Personal data Communications Access GDPR 118

HL Chronicle of Data Protection

APRIL 21, 2020

The new guidelines are applicable to public and private companies for the processing of their employees’ personal data. For example, for recruitment purposes, pre-contractual measures or legitimate interests are acceptable legal bases for the CNIL. Categories of personal data. Retention periods.

Personal data 133

Personal data GDPR Big data Compliance 133

Security Affairs

MARCH 12, 2023

This percentage could rapidly increase in the next months with the integration of the technology in multiple services, for example through the use of ChatGPT API. The experts also warn that enterprise security software cannot monitor the use of ChatGPT by employees and prevent the leak of sensitive/confidential company data.

Risk 98

Risk Artificial Intelligence Privacy Personal data 98

DLA Piper Privacy Matters

OCTOBER 5, 2021

A The data sharing code (“ Code ”), published by the UK Information Commissioner’s Office (“ ICO ”), enters into force today (5 October 2021) following its publication on 14 September 2021. Any sharing of personal data must be reasonable and proportionate and individuals must know what is happening to their data.

Personal data 105

Personal data Compliance Risk Privacy 105

IBM Big Data Hub

FEBRUARY 23, 2024

The GDPR puts forth a litany of rules for how organizations in and outside of Europe handle the personal data of EU residents. The details of any organization’s plan to become fully GDPR compliant will vary based on the data the organization collects and what it does with that data.

GDPR 80

GDPR Compliance Personal data Privacy 80

Data Matters

SEPTEMBER 30, 2020

of personal data of EU residents, following the decision of the Court of Justice of the European Union (“CJEU,” or “ECJ”) in Schrems II – more formally known as Data Protection Commissioner v. Privacy Shield as a basis for transferring EU personal data to the United States because of the Court’s view that U.S.

Paper 128

Paper Government Security Privacy 128

Data Matters

JANUARY 28, 2022

The advisory was promptly endorsed by the National Cyber Security Centre, a division of Government Communications Headquarters (“GCHQ”), a UK intelligence agency. Create, Maintain, and Exercise a Cyber Incident Response, Resilience, and Continuity of Operations Plan.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

IT Governance

DECEMBER 20, 2022

Although there have still been a few surprises, with the death of Queen Elizabeth II and blazing heatwaves across the UK to name but two, it was a familiar year in the cyber security landscape. Cyber criminals continued to wreak havoc, with the likes of Twitter , Uber and Neopets all reporting mammoth data breaches.

Security 132

Security Data breaches Ransomware Military 132

DLA Piper Privacy Matters

AUGUST 3, 2020

The amended APPI could have a significant impact on companies that handle personal information. Under the current APPI, data subjects have the right to request access, correction, deletion and cessation of the use of their personal data that is or is intended to be retained for six months or more (the “ Rights of Data Subjects “).

Personal data 122

Personal data Data breaches Compliance Analytics 122

Data Protection Report

JUNE 7, 2021

On Friday 4 June, the European Commission published the finalised version of the new Standard Contractual Clauses for transferring personal data from the EU to third countries (the New SCCs). Companies now have 18 months to update their supplier contracts and other data export arrangements. Article 4 of Implementing Decision ).

Personal data 118

Personal data GDPR Data breaches Access 118

Hunton Privacy

MAY 4, 2021

Decedent’s Personal Information. Article 49 adds provisions regarding the protection of personal information of decedents, whose rights provided under the Draft PIPL may be exercised by near relatives on the decedent’s behalf. Specific Data Processor. Inversion of Burden of Proof.

Personal data 94

Personal data IT Information Security Privacy 94

Security Affairs

SEPTEMBER 15, 2023

Behind the sleek interfaces and promising functionalities lurks a hidden concern that has captured the attention of security researchers and users alike – dangerous Android app permissions. Android permissions The Android operating system has a comprehensive permission system designed to protect a user’s privacy and security.

Privacy 112

Privacy Access IT Security 112

AIIM

SEPTEMBER 3, 2020

And relying on legacy technology creates business risk because these older systems are much harder to fix when things go wrong and more vulnerable to security threats. A smarter alternative is decommissioning those legacy applications and extracting important historical data to a searchable repository, accessible for business use.

ECM 166

ECM Digital transformation Compliance Access 166

Data Matters

NOVEMBER 16, 2020

On November 2, 2020, Singapore’s legislature finally approved amendments to the Personal Data Protection Act (PDPA). NEW mandatory data breach notification requirement. Consent to the processing of personal data will now be deemed to have been obtained based on. Expanded scope of “deemed consent”.

Data Privacy 68

Data Privacy Privacy Data breaches Personal data 68

DLA Piper Privacy Matters

OCTOBER 7, 2021

The Middle East’s data protection regulatory landscape is complex, and continues to develop with Saudi Arabia’s ( KSA ) newly published Personal Data Protection Law ( PDPL ). While the PDPL contains the main features of a modern data protection law, it cannot be considered a direct analogue of the GDPR.

Personal data 96

Personal data Compliance Computer and Electronics IoT 96

IT Governance

JUNE 13, 2019

If your organisation is subject to the GDPR (General Data Protection Regulation) , you’re probably aware of your requirement to “implement appropriate technical and organisational measures” to protect the personal data you hold. An essential principle of this is data protection by design and by default.

GDPR 90

GDPR Personal data Compliance Privacy 90

Data Protection Report

NOVEMBER 2, 2023

In 2017, Equifax Inc, suffered a cybersecurity breach, with hackers able to access the personal data of around 13.8 Firms should seek to avoid barriers for customers hindering access to any incident pages set up – for example, cookies should not obscure key links or information.

GDPR 77

GDPR Risk Cybersecurity Compliance 77

Data Protector

AUGUST 17, 2020

I see the IPA as an outstanding example that Governments of all countries should adopt to ensure that public authorities act transparently and put effective mechanisms in place to ensure that human rights are appropriately respected. Where opinion formers had concerns, these issues should be addressed.

Communications 156

Communications Government Personal data Compliance 156

IT Governance

APRIL 20, 2020

With the coronavirus pandemic keeping us stuck inside and struggling to find ways to remain productive, now might be the perfect time to take an online cyber security training course. Let’s take a look at five of the best online courses for cyber security. Certified Cyber Security Foundation Training Course.

Security 80

Security GDPR Phishing Data breaches 80

IT Governance

FEBRUARY 28, 2018

This method also enables you to assess the risks in your data processing activities and identify where controls are required, for example, assessing privacy and data security risks. Data flow mapping may seem daunting, but you can simplify the process with the Data Flow Mapping Tool.

Privacy 68

Privacy GDPR Personal data Compliance 68

Hunton Privacy

FEBRUARY 24, 2020

The Guidance contains advice on how to understand data protection law in relation to artificial intelligence (“AI”) and recommendations for organizational and technical measures to mitigate the risks AI poses to individuals. It also provides a methodology to audit AI applications and ensure they process personal data fairly.

Personal data 57

Personal data Artificial Intelligence Risk Privacy 57

AIIM

JANUARY 10, 2019

One of the most notable blockchain skeptics – David Gerard –argues that if “you were silly enough to put personal data into an append-only ledger which is a proof-of-work blockchain — that’d be flat-out insane.”. Both blockchain and GDPR are designed to “democratize” data by giving more control over its use to individuals.

Blockchain 115

Blockchain GDPR Privacy Personal data 115

Data Protection Report

MAY 3, 2022

The “dark patterns” highlighted in the Guidelines aim to influence users’ behaviour through content or visual presentation so that users make unintended and potentially harmful decisions regarding their personal data, for example, deciding to disclose more data than they otherwise planned or agreeing to limited protections of their data.

Privacy 67

Privacy IT GDPR Data collection 67

Data Protection Report

NOVEMBER 29, 2023

In general, the proposed rules would require businesses using automated decision-making technology to provide consumers with a “pre-use notice” about the purpose of the technology’s use and consumers’ rights to opt-out of and access additional information about such use, including instructions for how to exercise these rights.

Access 62

Access Privacy Personal data Authentication 62

DLA Piper Privacy Matters

NOVEMBER 29, 2021

The CNIL provides practical advice to the management and the operational staff who process personal data, in order to ensure that such processing is carried out in compliance with the applicable data protections laws. The DPO is the key contact for the CNIL and data subjects. Provide information and advice.

GDPR 116

GDPR Compliance Personal data Communications 116

IT Governance

NOVEMBER 8, 2018

The EU’s GDPR (General Data Protection Regulation) gives data subjects the right to access their personal data from data controllers that are processing it and “to exercise that right easily and at reasonable intervals, in order to be aware of, and verify, the lawfulness of the processing”.

GDPR 72

GDPR Access Personal data Compliance 72

Data Matters

MARCH 4, 2021

Rather, to be covered by the VCDPA, an entity must either “(i) during a calendar year, control or process personal data of at least 100,000 consumers or (ii) control or process personal data of at least 25,000 consumers and derive over 50 percent of gross revenue from the sale of personal data.”. Exemptions.

Personal data 74

Personal data GDPR Sales Privacy 74

IT Governance

OCTOBER 3, 2019

You must tell people when you’re collecting their personal information to give them the opportunity to exercise their data subject rights. These rights enable individuals to access the personal data organisations store on them and to challenge the way their information is used.

GDPR 110

GDPR Privacy Retail Personal data 110

DLA Piper Privacy Matters

FEBRUARY 23, 2022

In the proposal, “data” is broadly defined and contains both personal and non-personal data. This means that the Data Act would further regulate personal data in addition to the GDPR. The Data Act would apply to all types of enterprises, in principle, including small and micro businesses.

GDPR 97

GDPR Personal data IoT Access 97

IT Governance

DECEMBER 6, 2023

As privacy professionals, we see consumers exercising their rights to withdraw consent to their data being processed via ‘opt out’ or ‘unsubscribe’ buttons, for example. Having one or more of the following can significantly help with this: An ISO 27001 ISMS (information security management system).

Data Privacy 59

Data Privacy Privacy GDPR IT 59

Data Protection Report

DECEMBER 17, 2020

The EC anticipates that providers of data sharing services, or data intermediaries, will play a key role in facilitating the aggregation and exchange of substantial amounts of relevant data (personal and non-personal data). Intermediation services between data subjects: personal data.

Government 90

Government Personal data GDPR Access 90

IT Governance

OCTOBER 7, 2019

HR plays a crucial role in an organisation’s GDPR (General Data Protection Regulation) compliance. The department is full of personal data, whether it’s of employees, their next of kin or candidates responding to job adverts. Let’s take a look at five issues that HR must address when handling personal data.

GDPR 68

GDPR Personal data Compliance Communications 68