Data Protector

OCTOBER 13, 2020

There’s also an ongoing debate on what role our national Data Protection supervisory authority should play in developing and enforcing privacy laws. But, I see no reason for declining to contribute to policy discussions just because I know that others will disagree with me. I disagree. I see the GDPR as a step too far.

GDPR 156

GDPR Privacy Compliance Access 156

Data Matters

AUGUST 9, 2022

On Friday, July 8th, the California Privacy Protection Agency (CalPPA) began the formal rulemaking process to adopt proposed regulations to implement California Privacy Rights Act (CPRA) amendments to the California Consumer Privacy Act (CCPA). Secondary use prohibitions: Beyond the privacy policy.

Privacy 88

Privacy Sales Analytics Compliance 88

Schneier on Security

JUNE 5, 2020

I just published a new paper with Karen Levy of Cornell: "Privacy Threats in Intimate Relationships.". Abstract: This article provides an overview of intimate threats: a class of privacy threats that can arise within our families, romantic partnerships, close friendships, and caregiving relationships.

Privacy 110

Privacy Paper Cybersecurity Risk 110

Data Protection Report

JUNE 6, 2023

For the most part the ICO’s position tracks that of the EU data protection authorities (as reflected in the DPC’s 2021 and 2022 Whatsapp, Facebook and Instagram decisions), demonstrating that the ICO also expects a greater level of detail and specificity than is seen in some privacy notices. Where a generic email address (e.g.

Privacy 97

Privacy GDPR Personal data Compliance 97

Privacy and Cybersecurity Law

DECEMBER 10, 2020

Chantal Bernier, National Practice Leader, Privacy and Cybersecurity, Dentons Canada LLP Former Interim Privacy Commissioner of Canada. It will apply to all businesses across Canada, except to provincial businesses in Alberta, British Columbia and Québec where provincial privacy laws apply to the private sector. .

Privacy 89

Privacy Compliance Artificial Intelligence Risk 89

Security Affairs

APRIL 28, 2023

OpenAI restored access to ChatGPT in Italy after the company met the demands of the Italian Data Protection Authority, Garante Privacy. At the time the privacy watchdog said that there is no legal basis underpinning the massive collection and processing of personal data to ‘train’ the algorithms on which the platform relies. .

Personal data 93

Personal data Privacy Access Education 93

Data Matters

SEPTEMBER 20, 2022

This Act dramatically expands business obligations and will force entities that provide an online service, product, or feature that is “likely to be accessed by children” (“Product”) to implement stringent privacy settings for users under 18. The Act also imposes other obligations and prohibitions regarding data privacy: Obligations.

Privacy 88

Privacy Access Risk Data Privacy 88

Hunton Privacy

MAY 13, 2021

On April 29, 2021, the New York City Council passed the Tenant Data Privacy Act (“TDPA”), which would regulate the collection, use, safeguarding and retention of tenant data by owners of “smart access” buildings. Privacy policy. The TDPA has been sent to the New York City Mayor’s desk for signature.

Data Privacy 106

Data Privacy Privacy Authentication Passwords 106

Hunton Privacy

OCTOBER 31, 2023

It marks the Biden Administration’s most comprehensive action on artificial intelligence policy, building upon the Administration’s Blueprint for an AI Bill of Rights (issued in October 2022) and its announcement (in July 2023) of securing voluntary commitments from 15 leading AI companies to manage AI risks. New standards.

Risk 69

Risk Artificial Intelligence Privacy Military 69

Data Protection Report

SEPTEMBER 23, 2021

The insurer’s record retention policy aligned with the CNIL’s recommendations for insurers: three years after the last contact by insurance “prospects,” and between 10-30 years for individuals who become customers, depending upon the nature of the insurance policy. The CNIL also considered the company’s size and turnover (revenues).

Personal data 110

Personal data Insurance GDPR Record destruction 110

Data Protection Report

OCTOBER 26, 2022

Major privacy law reform in Australia gathered pace this week, with newly tabled legislation proposing to significantly increase penalties for privacy breaches, among other reforms. Many data breaches are exacerbated by poor retention and disposal practices, despite most organisations having a retention policy.

Privacy 63

Privacy Data breaches Risk Compliance 63

Hunton Privacy

APRIL 28, 2023

On April 21, 2023, the Montana and Tennessee legislatures voted to enact comprehensive consumer privacy bills in their respective states. If signed by their governors, Montana’s Consumer Data Privacy Act ( S.B. states to enact comprehensive privacy legislation. 384 ) (“MCDPA”) and Tennessee’s Information Protection Act ( H.B.

Privacy 58

Privacy Personal data Sales Data Privacy 58

Hunton Privacy

SEPTEMBER 16, 2022

The Working Group will consist of experts in children’s data privacy, physical health, mental health and well-being, computer science, and children’s rights. Prohibited/Restricted Activities. Enforcement.

Privacy 67

Privacy Data Privacy Access Marketing 67

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Not only does this help track privacy and security efforts, but it can also demonstrate compliance if an audit or breach occurs. Privacy policies should use plain language that anyone can understand.

GDPR 82

GDPR Compliance Personal data Privacy 82

IT Governance

FEBRUARY 9, 2021

It does this by taking a holistic approach to information security in which processes, policies and technology are considered together. Data protection by design states that information security and privacy concerns must be considered at the outset of any new system, service, product or process rather than being bolted on afterwards.

Marketing 123

Marketing Security GDPR Privacy 123

Hunton Privacy

MARCH 13, 2021

These activities raise compliance issues under both the General Data Protection Regulation (“GDPR”) and the e-Privacy Directive. In addition, VVAs require a terminal device equipped with a microphone and transfer data to remote service.

Personal data 105

Personal data Compliance GDPR Privacy 105

Hunton Privacy

JUNE 8, 2020

On June 3, 2020, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth LLP published its report, What Good and Effective Data Privacy Accountability Looks Like: Mapping Organizations’ Practices to the CIPL Accountability Framework (“Report”). Canada, Europe, Asia-Pacific and Latin America.

Data Privacy 113

Data Privacy Privacy Compliance Risk 113

DLA Piper Privacy Matters

DECEMBER 3, 2021

International businesses with global privacy compliance programs should seek to expand those to cover the UAE and achieve some synergies. Under other data protection laws, the general transparency obligation is often tied to a clear obligation to provide a privacy notice to data subjects which meets prescriptive content requirements.

Personal data 105

Personal data Data breaches GDPR Compliance 105

John Battelle's Searchblog

APRIL 19, 2020

The company then updated its privacy policies , bowing to criticism that it might leverage user data in a manner similar to Google and Facebook (more on that below). For the past 18 months, that study has focused on the terms of service and privacy policies of the Big Four. You can find our initial findings here.

Privacy 115

Privacy Data collection Marketing Communications 115

Data Protector

JANUARY 29, 2017

Does it really mean that in 481 days, European privacy regulators will be heralding the first megafine for non-compliance with one of the GDPR’s more obscure requirements? And also, what standard of evidence is necessary to be generated, just in case privacy regulators exercise their Article 30(4) right to request it.

GDPR 136

GDPR Privacy Compliance Personal data 136

Hunton Privacy

APRIL 27, 2021

On April 23, 2021, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth submitted its response to the European Data Protection Board (“EDPB”) consultation on draft guidelines on virtual voice assistants (the “Guidelines”). The Guidelines were adopted on March 12, 2021 for public consultation.

GDPR 77

GDPR Artificial Intelligence Privacy Personal data 77

IBM Big Data Hub

JANUARY 22, 2024

The law outlines a set of data privacy rights for users and a series of principles for the processing of personal data. Subjects need not be EU citizens to have data privacy rights under the GDPR. The GDPR requires strict data retention and deletion policies. However, GDPR compliance is not necessarily a straightforward matter.

GDPR 88

GDPR Compliance Personal data Privacy 88

eSecurity Planet

SEPTEMBER 23, 2022

Also read: Security Compliance & Data Privacy Regulations. In an ideal world, a team should also have the time to perform drills or tabletop exercises to simulate an event and practice the reporting process. SEC cybersecurity policies preparation. SOX: A Template of Success. In fact, the U.S.

Cybersecurity 111

Cybersecurity Compliance Risk Communications 111

Data Matters

SEPTEMBER 30, 2020

Privacy Shield as a basis for transferring EU personal data to the United States because of the Court’s view that U.S. national security law did not provide equivalent privacy protections to those available in the EU. While not opining on EU law, the Paper seeks to “provide a detailed discussion” of “privacy protections in current U.S.

Paper 128

Paper Government Security Privacy 128

Data Matters

NOVEMBER 16, 2020

If you operate in Singapore, handle Singapore data, or maintain a server in Singapore, it is crucial that you have protocols in place to guide employees on what to do when a data breach occurs and consider doing a data breach tabletop exercise. (We Carry out data breach drills or tabletop exercises.

Data Privacy 68

Data Privacy Privacy Data breaches Personal data 68

Hunton Privacy

JANUARY 2, 2019

According to the CNIL guidance, the organization that first collects the data may either (1) publish an exhaustive and regularly updated list of partners directly on the data collection form, or (2) insert a link to that list on the form, together with a link to the partners’ privacy policies.

Personal data 109

Personal data Data collection Marketing Communications 109

Data Protection Report

AUGUST 5, 2021

The PIPL will be China’s primary privacy and data protection law, despite the common misconception that the DSL is China’s privacy law. Data subjects have various rights under the draft PIPL, and data processors must notify individuals of specific ways in which they may exercise those rights. Impact of the new laws.

Privacy 98

Privacy Compliance GDPR Personal data 98

Hunton Privacy

SEPTEMBER 1, 2020

Not disclosing, subject to specified exceptions, a consumer’s genetic data to certain entities ( e.g. , those responsible for making decisions regarding health insurance, life insurance or employment). Department of Health and Human Services pursuant to HIPAA and the HITECH Act.

Privacy 85

Privacy Insurance Marketing Information governance 85

Thales Cloud Protection & Licensing

AUGUST 15, 2019

375 the California Consumer Privacy Act (CCPA), making California the first U.S. state to pass its own data privacy law. Also, entities under the CCPA must post a “Do Not Sell My Personal Information” link on their websites allowing consumers to easily exercise their right of opting-out. (4) Currently, every U.S.

Privacy 92

Privacy GDPR Digital transformation Sales 92

ARMA International

APRIL 18, 2022

The purpose of this article is to remove the fear and intimidation of domestic and global data protection laws and show how these laws and requirements are consistent with the existing objectives of your records retention schedule and information governance policy. 4 Consumer Protection Privacy Act. 6 Colorado Privacy Act.

Personal data 100

Personal data GDPR Privacy Records Management 100

IT Governance

FEBRUARY 28, 2018

Privacy by design is a voluntary approach to projects that promotes privacy and data protection compliance, and helps you comply with the Data Protection Act 1998 (DPA). Privacy by design and the GDPR. Existing data is used for new purposes. The upcoming EU General Data Protection Regulation (GDPR) will supersede the DPA.

Privacy 68

Privacy GDPR Personal data Compliance 68

Hunton Privacy

MARCH 11, 2019

On March 5, 2019, the Global Privacy Enforcement Network (“GPEN”), a global network of more than 60 data protection authorities (“DPAs”) around the world, published the results of its 2018 intelligence gathering operation on organizations’ data privacy accountability practices (the “Sweep”).

Privacy 74

Privacy Data Privacy GDPR Personal data 74

Data Matters

OCTOBER 22, 2019

In the summer of 2018, the California Legislature drafted and passed the California Consumer Privacy Act (CCPA) in record time. Businesses, consumer advocates, and privacy watchers thus have been eagerly waiting for over a year for the Attorney General to propose the regulations the CCPA requires him to promulgate.

Privacy 60

Privacy Sales Paper Compliance 60

Hunton Privacy

SEPTEMBER 14, 2020

The ICO states that its Accountability Framework “supports the foundations of an effective privacy management programme.”. The structure of the Framework is broad and flexible so that organizations may exercise judgment as to which of the articulated expectations are most relevant to their business.

IT 114

IT Compliance Records Management GDPR 114

IT Governance

OCTOBER 3, 2019

You must tell people when you’re collecting their personal information to give them the opportunity to exercise their data subject rights. If you’re using CCTV to monitor employees, you should also explain in your privacy policy that they are being recorded. What’s the difference between a privacy policy and privacy notice?

GDPR 110

GDPR Privacy Retail Personal data 110

Collibra

MARCH 12, 2020

Collibra recently partnered with Kelle O’Neal, CEO of First San Francisco Partners (FSFP), to host a joint webinar “ Meeting the CCPA Challenge ” about the complexities of the California Consumer Protection Act (CCPA) for the International Association of Privacy Professionals (IAPP). Competition is fierce. Right to equal service.

Data Privacy 59

Data Privacy Privacy Government Compliance 59

Data Matters

FEBRUARY 6, 2019

represented in its privacy policy that the Company used encryption and authentication tools to protect information but failed to encrypt the data (at rest) on its computer systems. The complaint also states that the Company’s “information security policies were deficient and poorly documented.”

Data breaches 83

Data breaches Computer and Electronics Security Insurance 83