DLA Piper Privacy Matters

JANUARY 21, 2019

On 12 December 2018, the French Government issued an ordinance [1] finalizing, at the legislative level [2] , the alignment of the French Data Protection Law (“FDPL”) with the General Data Protection Regulation [3] (“GDPR”) and the Directive 2016/680 [4]. Article 32 of the French Law No.

GDPR 49

GDPR Personal data Communications Government 49

HL Chronicle of Data Protection

FEBRUARY 28, 2018

Of the industries represented by the data operators, the majority of data subject complaints emanated from or related to consumers’ relationships with banks, housing services providers, and debt collection agencies. The Roskomnadzor also continued to review websites’ abilities to respect data subjects’ rights. Personal Data.

Personal data 40

Personal data Data Privacy Privacy Risk 40

HL Chronicle of Data Protection

SEPTEMBER 18, 2018

But whatever its flavour, upon Brexit the UK will cease to be an EU Member State and become a so-called ‘third country’ As a result, UK-based organisations, which in the context of transfers of personal data to countries outside the EU have always been exporters, will become importers of data originating from the EU.

GDPR 40

GDPR Personal data Privacy Government 40

Data Protection Report

MARCH 5, 2018

On February 12, 2018, the Article 29 Working Party (WP29) published guidance regarding Article 49 of the General Data Protection Regulation (GDPR) for public comment. The deadline for submitting comments on the draft is March 26, 2018, and responses should be emailed to JUST-ARTICLE29WP-SEC@ec.europa.eu. the U.S.); the U.S.);

GDPR 40

GDPR Personal data e-Discovery Risk 40

DLA Piper Privacy Matters

MAY 16, 2018

Despite a lack of agreement between the Senate and the National Assembly, France has finally passed its new data protection law , 11 days prior to the entry into application of the EU General Data Protection Regulation (GDPR) on May 25. Limitations to data subjects’ rights in certain circumstances. Children’s consent.

GDPR 40

GDPR Personal data Compliance Data Privacy 40

Privacy and Cybersecurity Law

JUNE 23, 2021

On June 11, 2021, the Regulation on notifications of incidents affecting networks, information systems and IT services (“ Regulation ”) – adopted by means of the Decree of the President of the Council of Ministers (DPCM) of 14 April 2021, no. The newly adopted Regulation on notification of security incidents. 4] Pursuant to Article 1, para.

Cybersecurity 52

Cybersecurity Communications Data breaches Security 52

Hunton Privacy

APRIL 30, 2019

The French Data Protection Authority (the “CNIL”) recently published its Annual Activity Report for 2018 (the “Report”) and released its annual inspection program for 2019. The Report provides an overview of the CNIL’s enforcement activities in 2018. The CNIL received 1,170 data breach notifications in 2018.

GDPR 48

GDPR Personal data Data breaches Marketing 48

HL Chronicle of Data Protection

MAY 13, 2019

Additionally in 2017, Connecticut passed legislation requiring that health insurers, third-party administrators, and related entities implement and maintain a comprehensive information security program with specific minimum requirements to protect insureds’ personal data. Ohio Senate Bill 273 (ORC §§3965.01-11)

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Data Matters

SEPTEMBER 29, 2021

Relatively recent advances in technology — smartphones and social media, in particular — have allowed businesses to collect, store, and find ways to monetize far more personal data than ever before. social security and credit card numbers, employee and patient health data, and customer financial records).”43

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

Hunton Privacy

APRIL 15, 2019

On April 11, 2019, the French Data Protection Authority (the “CNIL”) launched an online public consultation regarding two new CNIL draft standards (“Referentials”) concerning the processing of personal data for (1) core HR management purposes and (2) the operation of a whistleblowing hotline. Background.

Personal data 54

Personal data GDPR Big data Risk 54

Data Protector

OCTOBER 11, 2017

We want businesses to ensure that their customers and future customers have consented to having their personal data processed, but we also need to ensure that the enormous potential for new data rights and freedoms does not open us up to new threats. This is “Hamlet” without the prince.

GDPR 120

GDPR Personal data Government IT 120

Hunton Privacy

AUGUST 12, 2020

On August 11, 2020, the Court of Appeal of England and Wales overturned the High Court’s dismissal of a challenge to South Wales Police’s use of Automated Facial Recognition technology (“AFR”), finding that its use was unlawful and violated human rights. It is not a question of simple multiplication.

Personal data 111

Personal data Risk IT Privacy 111

IT Governance

MARCH 13, 2020

First published June 2018. Under the EU GDPR (General Data Protection Regulation) , you need to identify a lawful basis before processing personal data. Do you always need individuals’ consent to process their data? For the purposes of legitimate interests pursued by the data controller.

GDPR 92

GDPR Personal data Compliance Marketing 92

IT Governance

JUNE 15, 2018

Like the Data Protection Act 1998 (DPA 1998) that it superseded, the General Data Protection Regulation (GDPR) sets out six lawful bases for processing personal data. To comply with the data controller’s legal obligations. To protect the data subject’s vital interests.

GDPR 70

GDPR Personal data Compliance Privacy 70