Data Protection Report

APRIL 18, 2019

On 12 April, the Information Commissioners Office ( ICO ) fined Bounty , a pregnancy and parent support club, £400,000 for illegally sharing personal data belonging to more than 14 million people. Further, the ‘offline’ registrants were not given access to Bounty’s Privacy Policy (the Policy ) at the point of registration.

Data breaches 40

Data breaches Personal data Data collection Marketing 40

Data Protection Report

AUGUST 16, 2017

On the 7 th August 2017, the UK’s Government Department for Digital, Culture, Media and Sport issued a Statement of Intent (the Statement ) outlining its planned reforms of the UK’s data protection laws which are to be implemented by the Data Protection Bill (the Bill ).

Government 40

Government GDPR Personal data Insurance 40

DLA Piper Privacy Matters

FEBRUARY 13, 2018

The long awaited new National Standards on Information Security Technology – Personal Information Security Specification GB/T 35273-2017 (“PI Specification”) has now been released, and will come into force on 1 May 2018. personal information” and “sensitive personal information”). Explicit consent (i.e.

Information Security 40

Information Security Compliance GDPR Big data 40

HL Chronicle of Data Protection

MAY 29, 2019

Following the one-year anniversary of the coming into effect of the GDPR, Hogan Lovells’ Privacy and Cybersecurity practice has prepared summaries of key GDPR-related developments of the past 12 months. This personal data was still being held by late May 2018 and had been subject to unauthorised use by a third party.

GDPR 40

GDPR Personal data Privacy Information architecture 40

CILIP

DECEMBER 11, 2023

He gives an example from his early days at the Department for the Environment: “I remember in April 1986, I was on the library enquiry desk. FOI is a good example, you get 20 days to do it, and anything from a public inquiry will come with a challenging deadline and little appreciation of how difficult it may be to find some material.”

Government 52

Government Libraries Computer and Electronics Information governance 52

Data Protection Report

JUNE 9, 2022

On 12 May 2022 EDPB adopted Guidelines on the calculation of administrative fines (the Guidelines ). The Guidelines supplement the Article 29 Working Party’s Guidelines on the application and setting of administrative fines ( WP253 ) adopted in October 2017 and recommends that the two are read together.

GDPR 52

GDPR Compliance Personal data IT 52

DLA Piper Privacy Matters

NOVEMBER 24, 2020

As this concept heavily focusses on the (group) turnover of the infringing controller or processor, it led to a significant increase of the amount of individual fines in Germany, see for example Berlin DPA v. Deutsche Wohnen SE. The case: 1&1 Telecom GmbH v. Media coverage caused reputational damage for 1&1 Telecom GmbH.

GDPR 75

GDPR Authentication Compliance Personal data 75

Hunton Privacy

MAY 16, 2017

On May 12, 2017, a massive ransomware attack began affecting tens of thousands of computer systems in over 100 countries. In a November 2016 blog entry , the FTC noted that “a business’ failure to secure its networks from ransomware can cause significant harm to the consumers (and employees) whose personal data is hacked.

Ransomware 61

Ransomware Insurance Access Information Security 61

DLA Piper Privacy Matters

DECEMBER 13, 2017

On 12 December 2017, the Article 29 Working Party (WP29) published draft Guidelines on Consent under the General Data Protection Regulation (GDPR). In the UK, they may be read alongside the separate draft GDPR consent guidance issued by the UK Information Commissioner’s Office (ICO) in March 2017. Recommendations.

GDPR 40

GDPR Personal data Retail Data collection 40

IT Governance

DECEMBER 27, 2019

A royal baby, a fire at Notre-Dame, the highest grossing film of all time and more than 12 billion breached data records: 2019 has been quite a year. Among other news: B&Q breached the personal data of 70,000 people who had been caught stealing products from its stores. Video-sharing app TikTok agreed to a record $5.7

Data breaches 59

Data breaches GDPR Passwords Personal data 59

DLA Piper Privacy Matters

NOVEMBER 6, 2018

The Court of Appeal delivered its decision in the case of WM Morrisons Supermarkets Plc v Various Claimants ([2018] EWCA Civ 2339) in October, dismissing Morrisons’ appeal against an earlier decision from 2017 finding the supermarket vicariously liable for the actions of a former employee, Andrew Skelton.

Insurance 45

Insurance Data breaches Personal data GDPR 45

Data Matters

SEPTEMBER 29, 2021

Relatively recent advances in technology — smartphones and social media, in particular — have allowed businesses to collect, store, and find ways to monetize far more personal data than ever before. 12 In other words, the 1983 amendment was seen as limiting the depth rather than the breadth of discovery.13.

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

Hunton Privacy

OCTOBER 5, 2016

The workshop was attended by almost 120 delegates from businesses, 12 data protection authorities (“DPAs”), four EU Member State governments, the EU Commission and the European Data Protection Supervisor, a non-DPA regulator, several academics and the IAPP. Forthcoming Working Party GDPR Guidance.

GDPR 49

GDPR Risk IT Compliance 49

DLA Piper Privacy Matters

JUNE 13, 2018

In June 2018 the European Court of Justice’s Grand Chamber decided [1] on a long awaited case [2] regarding the responsibility of the administrators of Facebook fan pages, relating to the personal data of visitors to fan pages. 131/12, Google Spain SL, Google Inc. 5] [link]. [6] 6] See case C? 5] [link]. [6] 6] See case C?131/12,

Personal data 60

Personal data GDPR Privacy Risk 60

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

In the aftermath of the Cambridge Analytica scandal, and in the footsteps of Europe’s General Data Protection Regulation (“GDPR”), California privacy advocates introduced a ballot initiative on October 12, 2017 called “The Consumer Right to Privacy Act of 2018” (No. Right to Opt-Out. New Business Obligations.

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

In the aftermath of the Cambridge Analytica scandal, and in the footsteps of Europe’s General Data Protection Regulation (“GDPR”), California privacy advocates introduced a ballot initiative on October 12, 2017 called “The Consumer Right to Privacy Act of 2018” (No. Right to Opt-Out. New Business Obligations. 16 CFR § 313.3(o)(1)(i)-(iii).

Privacy 58

Privacy Sales Education Compliance 58

Data Protector

OCTOBER 11, 2017

We want businesses to ensure that their customers and future customers have consented to having their personal data processed, but we also need to ensure that the enormous potential for new data rights and freedoms does not open us up to new threats. How then will we secure adequacy without adhering to the charter?

GDPR 120

GDPR Personal data Government IT 120

CGI

DECEMBER 5, 2018

Wed, 12/05/2018 - 05:27. We’ve seen examples of helpdesk staff blaming GDPR for their inability to respond adequately. We also heard of health professionals providing flu jabs in a school being refused personal data about the children because of fear of GDPR infringement. The importance of data management.

GDPR 40

GDPR Metadata Personal data Compliance 40

DLA Piper Privacy Matters

MAY 18, 2021

Pursuant to the Data Retention Act, telecom and internet companies are required to retain electronic and telephony data of its users for 12 months for criminal investigation and prosecution purposes. By interim judgment of 19 July 2018, the Constitutional Court referred a request for preliminary ruling to the CJEU.

Communications 119

Communications Privacy Personal data Security 119

Data Matters

JULY 16, 2018

*Originally Published July 12, 2018 by Chambers and Partners Data Protection & Cyber Security 2018. In December 2009, with the entry into force of the Lisbon Treaty, the EU’s Charter of Fundamental Rights guaranteed both privacy and data protection as two of the Charter’s 50 enumerated fundamental rights.

Privacy 74

Privacy Cloud Artificial Intelligence Data Privacy 74