The Last Watchdog

AUGUST 29, 2019

Europe came down hard this summer on British Airways and Marriott for failing to safeguard their customers’ personal data. What’s more, organizations that run afoul of the GDPR’s new data loss reporting requirements could face additional fines up to 2 percent of annual global revenue. million, on average.

GDPR 153

GDPR Privacy Big data Personal data 153

IT Governance

MARCH 28, 2019

How was it possible for someone to be so misguided about such a well-publicised regulation, the requirements of which have huge ramifications for the way organisations handle personal data? Granted, 2018 was very much ‘the year of the GDPR’ in some circles. Sending false invoices, for example, is easy money.”.

GDPR 92

GDPR Compliance Data breaches Personal data 92

Data Protection Report

OCTOBER 7, 2020

The guidance, which sits alongside the ICO’s Regulatory Action Policy , covers the ICO’s range of enforcement powers, but of most interest is the section on how the ICO will calculate fines under the Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR).

GDPR 102

GDPR Personal data IT 102

IT Governance

OCTOBER 9, 2018

The ICO (Information Commissioner’s Office) has fined Heathrow Airport £120,000 for failing to secure sensitive personal data after a member of public found an unencrypted USB stick containing data about the airport’s staff. How did the data breach occur? However, the ICO hasn’t confirmed this. Maximum penalty.

Data breaches 65

Data breaches Personal data Libraries Information Security 65

DLA Piper Privacy Matters

SEPTEMBER 10, 2021

where processing is for research purposes, disapplying the current requirement for controllers who collected personal data directly from the data subject to provide further information to the data subject prior to any further processing, where it would require a disproportionate effort to do so. to up to £17.5

Government 104

Government Paper Personal data GDPR 104

Hunton Privacy

DECEMBER 20, 2017

On December 12, 2017, the Article 29 Working Party (“Working Party”) published its guidelines on transparency under Regulation 2016/679 (the “Guidelines”). The Guidelines aim to provide practical guidance and clarification on the transparency obligations introduced by the EU General Data Protection Regulation (“GDPR”).

GDPR 62

GDPR Personal data Privacy Communications 62

Data Protection Report

APRIL 12, 2019

UFC asked the judges to declare Google’s policies unlawful and abusive, on the grounds that they did not respect consumers’ privacy and personal data. Accordingly, the judges ruled that such personal data constituted goods from which Google derived an economic benefit in return for the service provided to users.

Privacy 40

Privacy Personal data IT Data Privacy 40

Data Matters

JULY 22, 2020

13.709/2018 (the Brazilian Data Protection Law, or “ LGPD ”) in 2018 was followed by great enthusiasm from the general public in Brazil. Indeed, the comprehensive law has been viewed as a necessary measure for the country to join a select but growing group of nations in the systematic protection of individuals’ personal data.

Marketing 68

Marketing Compliance Personal data GDPR 68

Data Protection Report

JULY 16, 2019

On Friday, July 12, 2019, the Wall Street Journal reported that Federal Trade Commission and Facebook reached a settlement to resolve Facebook’s privacy issues surrounding the Cambridge Analytica disclosure discovered last year. For example, Senator Mark Warner, D-Va., At this time, the fine is the only penalty or measure reported.

Privacy 40

Privacy Personal data GDPR Government 40

Data Protection Report

APRIL 18, 2019

On 12 April, the Information Commissioners Office ( ICO ) fined Bounty , a pregnancy and parent support club, £400,000 for illegally sharing personal data belonging to more than 14 million people. Further, the ‘offline’ registrants were not given access to Bounty’s Privacy Policy (the Policy ) at the point of registration.

Data breaches 40

Data breaches Personal data Data collection Marketing 40

Hunton Privacy

JUNE 1, 2018

On May 30, 2018, the European Data Protection Board (“EDPB”), replacing the Article 29 Working Party , published the final version of Guidelines 2/2018 on derogations in the context of international data transfers and draft Guidelines 1/2018 on certification under the EU General Data Protection Regulation (“GDPR”). .

GDPR 58

GDPR Personal data Compliance Risk 58

HL Chronicle of Data Protection

MARCH 25, 2019

On 12 March 2019 at its Eighth Plenary Session , the European Data Protection Board (“EDPB”) adopted its Opinion 5/2019 on the interplay between the ePrivacy Directive (“ePD”) and the General Data Protection Regulation (“GDPR”).

GDPR 40

GDPR Personal data Communications Access 40

Hunton Privacy

DECEMBER 20, 2018

On December 19, 2018, the European Commission (the “Commission”) issued a press release regarding the publication of the Commission’s second annual review of the functioning of the EU-U.S. On July 12, 2016, the Commission adopted an adequacy decision on the basis that the EU-U.S. Privacy Shield (the “ Report ”). Background.

Privacy 52

Privacy Compliance Personal data GDPR 52

HL Chronicle of Data Protection

MAY 29, 2019

Following the one-year anniversary of the coming into effect of the GDPR, Hogan Lovells’ Privacy and Cybersecurity practice has prepared summaries of key GDPR-related developments of the past 12 months. This personal data was still being held by late May 2018 and had been subject to unauthorised use by a third party.

GDPR 40

GDPR Personal data Privacy Information architecture 40

HL Chronicle of Data Protection

NOVEMBER 15, 2018

On June 12, 2018, the Vietnamese National Assembly passed the Law on Cybersecurity (the “ Cybersecurity Law “), which will take effect on January 1, 2019. Localized storage and retention of personal data. Data created by a user (e.g. Data retention periods depend on the type of data being stored.

Cybersecurity 40

Cybersecurity Personal data Compliance Government 40

Data Protection Report

MARCH 5, 2018

On February 12, 2018, the Article 29 Working Party (WP29) published guidance regarding Article 49 of the General Data Protection Regulation (GDPR) for public comment. The deadline for submitting comments on the draft is March 26, 2018, and responses should be emailed to JUST-ARTICLE29WP-SEC@ec.europa.eu. the U.S.);

GDPR 40

GDPR Personal data e-Discovery Risk 40

Data Matters

APRIL 20, 2020

Case: WM Morrison Supermarkets plc v Various Claimants [2020] UKSC 12. In the former examples, it can clearly be argued that these acts occur with the employee acting in the ordinary course of their employment for which the employer may be vicariously liable. 1 [2016] UKSC 11. 2 [2002] UKHL 48.

Data breaches 68

Data breaches GDPR Privacy IT 68

Hunton Privacy

APRIL 16, 2019

On April 12, 2019, Senator Edward J. This definition is substantially similar to the definition of “personal information” contained in the California Consumer Privacy Act of 2018.

Privacy 57

Privacy Sales Compliance Access 57

DLA Piper Privacy Matters

FEBRUARY 13, 2018

The long awaited new National Standards on Information Security Technology – Personal Information Security Specification GB/T 35273-2017 (“PI Specification”) has now been released, and will come into force on 1 May 2018. personal information” and “sensitive personal information”). Explicit consent (i.e.

Information Security 40

Information Security Compliance GDPR Big data 40

CILIP

DECEMBER 11, 2023

He gives an example from his early days at the Department for the Environment: “I remember in April 1986, I was on the library enquiry desk. FOI is a good example, you get 20 days to do it, and anything from a public inquiry will come with a challenging deadline and little appreciation of how difficult it may be to find some material.”

Government 52

Government Libraries Computer and Electronics Information governance 52

CGI

DECEMBER 18, 2018

Tue, 12/18/2018 - 22:19. For example, how quickly can we launch a new type of account in response to a market change? How can we treat customers based on their demographics by, for example, providing different services to younger and older people? Digitalizing the bank: Challenges, opportunities and strategies.

Customer Experience 51

Customer Experience Artificial Intelligence Marketing Personal data 51

Hunton Privacy

JUNE 29, 2018

On June 28, 2018, the Governor of California signed AB 375 , the California Consumer Privacy Act of 2018 (the “Act”). The Act introduces key privacy requirements for businesses, and was passed quickly by California lawmakers in an effort to remove a ballot initiative of the same name from the November 6, 2018, statewide ballot.

Privacy 55

Privacy Sales Personal data Communications 55

CGI

DECEMBER 18, 2018

Tue, 12/18/2018 - 22:29. For example, how quickly can we launch a new type of account in response to a market change? How can we treat customers based on their demographics by, for example, providing different services to younger and older people? Digitalizing the bank: Challenges, opportunities and strategies.

Customer Experience 40

Customer Experience Artificial Intelligence Marketing Personal data 40

Managing Your Information

MAY 25, 2017

Identify the personal data that you hold. You should also identify information falling within the Special Categories (Article 9) or data relating to criminal convictions and offences (Article 10). Identify each of your specific purposes for processing personal data. Ensuring Your People Are Ready.

GDPR 31

GDPR Personal data Compliance Data breaches 31

Managing Your Information

MAY 25, 2017

Identify the personal data that you hold. You should also identify information falling within the Special Categories (Article 9) or data relating to criminal convictions and offences (Article 10). Identify each of your specific purposes for processing personal data. Ensuring Your People Are Ready.

GDPR 28

GDPR Personal data Compliance Data breaches 28

Data Matters

JUNE 29, 2018

On June 28, 2018, California Gov. Jerry Brown signed into law the California Consumer Privacy Act of 2018 (AB 375). The terms “infer” and “inference” are defined as the derivation of information, data, assumptions or conclusions from facts, evidence or another source of information or data. Right to Know.

GDPR 79

GDPR Privacy Sales Data breaches 79

HL Chronicle of Data Protection

OCTOBER 26, 2018

The application of the California Consumer Protection Act of 2018 (“CCPA”) to employee data has been the subject of much debate since the first version of the bill was introduced on June 21, 2018 (just days prior to its enactment on June 28). Under a plain language reading of the CCPA, the law likely applies to employee data.

Privacy 40

Privacy Sales Compliance Personal data 40

DLA Piper Privacy Matters

NOVEMBER 6, 2018

The Court of Appeal delivered its decision in the case of WM Morrisons Supermarkets Plc v Various Claimants ([2018] EWCA Civ 2339) in October, dismissing Morrisons’ appeal against an earlier decision from 2017 finding the supermarket vicariously liable for the actions of a former employee, Andrew Skelton. million.

Insurance 45

Insurance Data breaches Personal data GDPR 45

Data Protection Report

JUNE 29, 2018

On June 28, 2018, California lawmakers enacted the California Consumer Privacy Act of 2018 (the “CCPA”) a sweeping, GDPR-like privacy law which is intended to give California consumers more control over how businesses collect and use their data. Consumer access and data portability rights.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

JUNE 29, 2018

On June 28, 2018, California lawmakers enacted the California Consumer Privacy Act of 2018 (the “CCPA”) a sweeping, GDPR-like privacy law which is intended to give California consumers more control over how businesses collect and use their data. Consumer Access and Data Portability Rights.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Matters

JUNE 29, 2018

On June 28, 2018, California Gov. Jerry Brown signed into law the California Consumer Privacy Act of 2018 (AB 375). The terms “infer” and “inference” are defined as the derivation of information, data, assumptions or conclusions from facts, evidence or another source of information or data. Right to Know.

GDPR 60

GDPR Privacy Sales Data breaches 60

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

In the aftermath of the Cambridge Analytica scandal, and in the footsteps of Europe’s General Data Protection Regulation (“GDPR”), California privacy advocates introduced a ballot initiative on October 12, 2017 called “The Consumer Right to Privacy Act of 2018” (No. It was recently signed into law by the governor.

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

In the aftermath of the Cambridge Analytica scandal, and in the footsteps of Europe’s General Data Protection Regulation (“GDPR”), California privacy advocates introduced a ballot initiative on October 12, 2017 called “The Consumer Right to Privacy Act of 2018” (No. It was recently signed into law by the governor.

Privacy 58

Privacy Sales Education Compliance 58

Data Protection Report

MAY 16, 2019

In keeping with the ICO’s earlier guidance on processing personal data of children, the primary factor for consideration here is whether the proposed activity is in the “best interests” of the child. 10-12: transition years. 0 – 5: pre-literate and early literacy. 6 – 9: core primary school years. 13-15: early teens.

Personal data 40

Personal data Privacy GDPR Access 40

Data Matters

SEPTEMBER 29, 2021

Relatively recent advances in technology — smartphones and social media, in particular — have allowed businesses to collect, store, and find ways to monetize far more personal data than ever before. 12 In other words, the 1983 amendment was seen as limiting the depth rather than the breadth of discovery.13.

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

Hunton Privacy

OCTOBER 5, 2016

The workshop was attended by almost 120 delegates from businesses, 12 data protection authorities (“DPAs”), four EU Member State governments, the EU Commission and the European Data Protection Supervisor, a non-DPA regulator, several academics and the IAPP.

GDPR 49

GDPR Risk IT Compliance 49

Managing Your Information

OCTOBER 21, 2016

After a time of uncertainty, the way forward for the implementation of the General Data Protection Regulation (GDPR) seems to be emerging. The new EU Regulation on data protection was adopted earlier this year, becoming effective in all EU member states in May 2018.

GDPR 28

GDPR Compliance Risk Personal data 28