Remove category
article thumbnail

Processing of riders’ personal data ? The Italian Data Protection Authority sanctions a food delivery company

Privacy and Cybersecurity Law

On July 5, 2021, the Italian supervisory authority (“ Garante ”) published an injunction against a company operating a food delivery app (“ Company ”) over the processing of riders’ personal data with respect to the use of algorithms for the management of the orders. Retention period. The need for a DPIA.

article thumbnail

New Cybersecurity Directives (NIS2 and CER) Enter into Force

Hunton Privacy

On January 16, 2023, the Directive on measures for a high common level of cybersecurity across the Union (the “NIS2 Directive”) and the Directive on the resilience of critical entities (“CER Directive”) entered into force. Reinforced obligations.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GDPR compliance checklist

IBM Big Data Hub

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Any company operating in the EU or handling EU residents’ data must adhere to GDPR requirements. Everything from email addresses to political opinions counts as personal data.

GDPR 81
article thumbnail

CHINA: Navigating China Episode 15: Comprehensive New E-Commerce Rules Introduced

DLA Piper Privacy Matters

The Measures provide detailed guidance supplementing the PRC E-Commerce Law, the PRC Consumer Protection Law and the PRC Cybersecurity Law. This is on top of general consent to processing of personal data obtained from the data subject.

article thumbnail

How to implement the General Data Protection Regulation (GDPR)

IBM Big Data Hub

The GDPR puts forth a litany of rules for how organizations in and outside of Europe handle the personal data of EU residents. The details of any organization’s plan to become fully GDPR compliant will vary based on the data the organization collects and what it does with that data.

GDPR 76
article thumbnail

China Releases Draft Regulations on Network Data Security Management

Hunton Privacy

On November 14, 2021, the Cyberspace Administration of China (“CAC”) released for public comment its draft Regulations on Network Data Security Management (the “Draft Regulations”). In addition, records or logs regarding sharing, trading or selling of “important data” must be maintained at least five years. Cybersecurity Review.

Security 116
article thumbnail

Dentons Privacy Community: Data transfers from Asia – key takeaways

Privacy and Cybersecurity Law

For example, Singapore Personal Data Protection Act ( PDPA ) recommends certain adjustments to the MCCs. Last year, three overlapping privacy-related laws were consolidated into the Revised Personal Information Protection Act. South Korea.

Privacy 98