IBM Big Data Hub

MAY 1, 2023

That ground-shaking event divided the world with excitement and trepidation about a future with thinking machines. Continued advancement in AI development has resulted today in a definition of AI which has several categories and characteristics. The early versions of AI were capable of predictive modelling (e.g.,

Artificial Intelligence 76

Artificial Intelligence Insurance Risk Personal data 76

ARMA International

APRIL 18, 2022

These records are typically organized by grouping them by function or department and then described as either an individual record or grouped together into a record category. Introduction to Data Protection Laws. Personal data protection requirements may be issued by federal, state (provincial), or local governments.

Personal data 100

Personal data GDPR Privacy Records Management 100

DLA Piper Privacy Matters

OCTOBER 10, 2022

For example, the ML system could be used to determine likely trends of categories of persons to default on loan agreements through the processing of financial default information. During the development and training of their algorithms, ML systems begin to adapt and recognise patterns within its data.

Personal data 98

Personal data GDPR Privacy Marketing 98

IT Governance

JULY 31, 2019

Personal Data Protection Policy (Article 24). A data protection policy is a statement that sets out how your organisation protects personal data. If you are unsure what your data protection policy should include, this template , created by our expert GDPR practitioners, can help you create one in minutes.

GDPR 74

GDPR Data breaches Personal data Compliance 74

Hunton Privacy

JANUARY 26, 2022

The definition of “data handler” under the Draft Regulations is similar to that of “data controller” in other privacy laws, such as the EU General Data Protection Regulation (“GDPR”). Data Breach. Records Retention When Transferring Data to Third Parties. Cybersecurity Review.

Security 116

Security Data breaches Personal data Cybersecurity 116

Data Matters

JUNE 5, 2021

Scope of the New SCCs : the New SCCs can only be used to legitimize transfers of personal data to a data importer (i.e., ex-EEA) whose processing of the personal data is not subject to the requirements of the GDPR. in line with Article 28 of the GDPR).

GDPR 117

GDPR Personal data IT Data breaches 117

Data Protection Report

JUNE 7, 2021

On Friday 4 June, the European Commission published the finalised version of the new Standard Contractual Clauses for transferring personal data from the EU to third countries (the New SCCs). Companies now have 18 months to update their supplier contracts and other data export arrangements. Module 1, clause 8.5(e)

Personal data 119

Personal data GDPR Data breaches Access 119

DLA Piper Privacy Matters

NOVEMBER 29, 2021

The CNIL provides practical advice to the management and the operational staff who process personal data, in order to ensure that such processing is carried out in compliance with the applicable data protections laws. The DPO is the key contact for the CNIL and data subjects. Provide information and advice.

GDPR 116

GDPR Compliance Personal data Communications 116

Data Matters

NOVEMBER 13, 2020

The publication of the EC’s Draft comes just one day after the European Data Protection Board (EDPB) published its draft recommendations describing how controllers and processors transferring personal data outside the European Economic Area (EEA) may comply with the Schrems II ruling.

Personal data 68

Personal data GDPR Privacy Compliance 68

DLA Piper Privacy Matters

AUGUST 27, 2020

The Commissioner for Data Protection and Freedom of Information for the German State of Baden-Württemberg ( Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg – “LfDI BW”) recently published guidance for international transfers of personal data in the post- Schrems II era. Background.

Personal data 105

Personal data GDPR Encryption Privacy 105

Data Protection Report

JANUARY 16, 2020

CB(2) 512/19-20(03 ) (the Paper ) seeking views on changes to Personal Data (Privacy) Ordinance (Cap.486) An example of, “as soon as practicable and, under all circumstances, in not more than five business days” is included in the Paper; and. Amendment to the definition of personal data. 486) (the PDPO ).

Paper 56

Paper Personal data Data breaches Privacy 56

DLA Piper Privacy Matters

MAY 23, 2022

The EDPB emphasises that it is important to consider this on a case-by-case basis and gives an example of “ the same or linked processing operations ” potentially constituting one and the same conduct. For example, the Guidelines state that for undertakings with an annual turnover of ? €2m, of the identified starting amount.

GDPR 98

GDPR Personal data Risk IT 98

AIIM

JULY 24, 2018

For example, under GDPR data subjects and/or regulators may now pursue direct remedies against data processors in the event of infringement of obligations, whereas such remedies did not exist under the prior data privacy regulation.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

Hunton Privacy

DECEMBER 20, 2017

The transparency obligations require controllers to provide certain information to data subjects regarding the processing of their personal data. Oral information may be provided on a person-by-person basis or by automated means. In addition, it stresses the importance of accountability for controllers.

GDPR 62

GDPR Personal data Privacy Communications 62

Data Protection Report

JANUARY 16, 2020

CB(2) 512/19-20(03 ) (the Paper ) seeking views on changes to Personal Data (Privacy) Ordinance (Cap.486) An example of, “as soon as practicable and, under all circumstances, in not more than five business days” is included in the Paper; and. Amendment to the definition of personal data. 486) (the PDPO ).

Paper 40

Paper Personal data Data breaches Privacy 40

Data Matters

AUGUST 9, 2019

First, it should be noted that the ICO can take into account compliance with such statutory codes when assessing whether an organisation has complied with its data sharing obligations including when considering principles of fairness, lawfulness, transparency and accountability. whistleblowing).

GDPR 79

GDPR Personal data Compliance Privacy 79

Data Protection Report

JUNE 9, 2022

For example, a data controller collects data without proper legal basis and when it is later hacked, it fails to notify the supervisory authority. In any event if it determines this is one sanctionable conduct the total amount of the fine may not exceed the legal maximum for the gravest infringement.

GDPR 52

GDPR Compliance Personal data IT 52

Adam Levin

JUNE 30, 2020

No industry, category, size, or group is safe from this cyber scourge. In the same survey, 35 percent thought CEOs should be fined for a cyber failure, and 30 percent wanted to see a CEO lose his or her right to run any company following a serious cyber event. 1-99-employee companies are a target. We hear about the big ones.

Ransomware 74

Ransomware Insurance Cybersecurity Manufacturing 74

IT Governance

OCTOBER 15, 2019

GDPR: What’s the difference between personal data and sensitive data? There are also times when you must also complete a specific type of risk assessment, called a DPIA (data protection impact assessment) , to review the way you process personal data. See also: List of free GDPR resources and templates.

GDPR 67

GDPR Risk Compliance Personal data 67

Hunton Privacy

MARCH 17, 2017

know where the data is being transferred and to whom, where it is hosted and for how long it’s retained. This prioritization must be carried out, taking into consideration the risks to the rights and freedoms of the data subjects. verifying the data security measures implemented. Step 5: Organizing Internal Processes.

GDPR 75

GDPR Personal data Compliance Privacy 75

KnowBe4

SEPTEMBER 16, 2019

It’s imperative to be prepared: the law will regulate the use and disclosure of personal information of nearly 40 million consumers, and is expected to affect more than 500,000 companies across the U.S. Under the CCPA, personal information is pretty broadly defined. The CCPA emphasizes transparency about data collection and usage.

Privacy 49

Privacy Personal data Compliance Data collection 49

DLA Piper Privacy Matters

NOVEMBER 19, 2018

In the continuity of this accompaniment, the CNIL published on November 6th 2018 its DPIA guidelines supplementing the G29 Working Party’s opinion on DPIA along with its DPIA list which gives concrete examples of data processing operations likely to result in a high risk. connected cars, smart grid etc.);

Data Privacy 40

Data Privacy IT GDPR Privacy 40

Data Matters

JUNE 1, 2022

1 To ensure the progressive nature of the obligations, a category of “emerging gatekeeper” is also provided for to enable the Commission to impose certain obligations on companies whose competitive position is “proven but not yet sustainable.” process and use personal data. Designation Process.

Marketing 88

Marketing Computer and Electronics Communications GDPR 88

eSecurity Planet

APRIL 22, 2022

As the number and severity of data breaches continues to rise, organizations are recognizing that those costs are not theoretical. If your company has not already experienced a significant cybersecurity event, it is probably only a matter of time before it does. For example, security breaches pose a huge threat to companies nowadays.

Insurance 119

Insurance Ransomware Cybersecurity Marketing 119

Data Protection Report

DECEMBER 6, 2017

On October 28, 2017, the Turkish Data Protection Authority (the “ Authority ”) published an important regulation supplementing the Law on Protection of Personal Data (the “ Data Protection Law ”), namely the Regulation on the Deletion, Destruction and Anonymization of Personal Data (the “ Regulation ”).

Personal data 40

Personal data Paper Encryption Cloud 40

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. Specific categories defined as personal information include.

GDPR 79

GDPR Privacy Sales Data breaches 79

Data Protection Report

DECEMBER 20, 2019

Yesterday, the Advocate General (“ AG ”) concluded that, in his opinion, the EU Standard Contractual Clauses (“ SCCs ”) are a valid mechanism to transfer personal data outside of the European Economic Area (“ EEA ”). Therefore, storing data locally may become an appealing option. What has happened?

Privacy 40

Privacy Personal data Risk Access 40

Data Protection Report

DECEMBER 20, 2019

Yesterday, the Advocate General (“ AG ”) concluded that, in his opinion, the EU Standard Contractual Clauses (“ SCCs ”) are a valid mechanism to transfer personal data outside of the European Economic Area (“ EEA ”). Therefore, storing data locally may become an appealing option. What has happened?

Privacy 40

Privacy Personal data Risk Access 40

DLA Piper Privacy Matters

SEPTEMBER 10, 2018

In order to celebrate such event, but to also discuss the impact of such new provisions on companies operating in Italy, we arranged an Innovation MeetUp on the 13th of September 2018 at our Milan office whose details are available HERE. The regime for special categories of personal data still needs to be completed.

GDPR 49

GDPR Privacy Compliance Marketing 49

IT Governance

JULY 26, 2018

It’s imperative that you’re equipped to handle a data breach correctly, swiftly and decisively. Data breach example. Timehop kick-started the digital nostalgia category across social media and continues to reinvent reminiscent behaviour online. So, let’s explore what that could mean for you in the media sector.

Data breaches 45

Data breaches GDPR Personal data Government 45

Hunton Privacy

JANUARY 20, 2015

Indiana Attorney General Greg Zoeller has prepared a new bill that, although styled a “security breach” bill, would impose substantial new privacy obligations on companies holding the personal data of Indiana residents. The cap likely will be challenged as being too low during hearings on the bill.

Privacy 40

Privacy Security Personal data Compliance 40

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. Specific categories defined as personal information include.

GDPR 60

GDPR Privacy Sales Data breaches 60

Data Protection Report

AUGUST 16, 2017

A data subject will continue to have recourse to this right – consistent with the GDPR – in the event of unfavourable decisions based solely on automated means. tougher sanctions, including fines which mirroring those imposed by the GDPR, i.e., up to 20 million Euros or 4% global turnover.

Government 40

Government GDPR Personal data Insurance 40

Data Matters

OCTOBER 30, 2017

They can, however, engage in probing internal due diligence of their companies’ cyber governance and compliance posture before it is too late — that is, before a cyber event occurs. These breaches may be of a company’s own systems, those with whom they have data sharing arrangements, or their vendors.

Compliance 60

Compliance Cybersecurity Risk Government 60

Managing Your Information

JULY 22, 2019

They are a public authority except for courts acting in their judicial capacity; The core activities of the organisation require regular and systematic monitoring of data subjects on a large scale. Again, make sure you do your due diligence to make sure any events you decide to attend is going to provide what you need it to.

GDPR 28

GDPR Personal data Compliance Information governance 28

Managing Your Information

JULY 22, 2019

They are a public authority except for courts acting in their judicial capacity; The core activities of the organisation require regular and systematic monitoring of data subjects on a large scale. Again, make sure you do your due diligence to make sure any events you decide to attend is going to provide what you need it to.

GDPR 28

GDPR Personal data Compliance Information governance 28

Data Protection Report

MAY 16, 2019

In keeping with the ICO’s earlier guidance on processing personal data of children, the primary factor for consideration here is whether the proposed activity is in the “best interests” of the child. However, this blanket application is mitigated by the different standards to be applied to five defined “Age Categories.”.

Personal data 40

Personal data Privacy GDPR Access 40