DLA Piper Privacy Matters

SEPTEMBER 17, 2018

30 of 2018 on the Personal Data Protection Law (PDPL). It will provide individuals with rights in relation to how their personal data can be collected, processed and stored. The PDPL also imposes new obligations upon businesses to ensure that the personal data they collect is kept secure. REGULATION.

Personal data 49

Personal data GDPR Compliance Risk 49

Data Protection Report

JUNE 6, 2023

This MPN and its accompanying annexes set out details of TikTok’s non-compliance with data protection law and the reasons why the ICO considered that a fine was appropriate. The requirement to detail “recipient or categories of recipients of the personal data” (Art 13(1)(e)): Vague, broad lists of categories of recipients are not sufficient.

Privacy 97

Privacy GDPR Personal data Compliance 97

Schneier on Security

MARCH 2, 2020

Privacy International has the details : Key facts: Despite Facebook claim, "Download Your Information" doesn't provide users with a list of all advertisers who uploaded a list with their personal data. As a user this means you can't exercise your rights under GDPR because you don't know which companies have uploaded data to Facebook.

Personal data 123

Personal data GDPR Data collection Privacy 123

HL Chronicle of Data Protection

JULY 7, 2020

The Dutch Data Protection Authority (DPA) issued a EUR 830,000 (approximately USD 937,000) fine against the Dutch Credit Registration Bureau (BKR) for violating data subject rights. The fine stems from BKR’s practice of charging fees and discouraging individuals who wanted to access their personal data.

GDPR 112

GDPR Personal data Data collection Access 112

Hunton Privacy

APRIL 28, 2023

Beginning January 1, 2025, controllers must allow a consumer to opt out of targeted advertising and the sale of their personal data through an opt-out preference signal. Consumer” means an individual who is a Montana resident and does not include an individual acting in a commercial or employment context.

Privacy 58

Privacy Personal data Sales Data Privacy 58

IT Governance

NOVEMBER 12, 2018

Not only does it affect the way organisations process personal data, but also extends data subjects rights in terms of how their data is processed. What is a data subject access request (DSAR)? Speak to an expert >> The post Subject Access Requests in Scotland: Do you know what data is held about you?

Access 91

Access GDPR Personal data Retail 91

Hunton Privacy

NOVEMBER 1, 2022

The CPA Rules, which are currently about 38 pages, address many recent issues in state data privacy regulation, including data profiling, data protection, automated data processing, biometric data, universal opt-out mechanisms and individual data rights.

Privacy 78

Privacy Personal data Data collection Compliance 78

Collibra

JANUARY 14, 2020

Data privacy isn’t about compliance — it’s about customers. Although much of the ink spilled around data privacy focuses on obeying regulations such as the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), it’s a mistake to think about data privacy as a compliance exercise.

Digital transformation 52

Digital transformation Data Privacy Privacy IoT 52

Data Protector

AUGUST 17, 2020

Some UK organisations will inevitably have to follow all the EU’s data protection rules because they will continue to process the personal data of individuals in the EU. Organisations have also spent many hours working out what legal basis each business process should rely on when personal data is processed.

Privacy 156

Privacy GDPR Personal data Computer and Electronics 156

IT Governance

OCTOBER 7, 2019

HR plays a crucial role in an organisation’s GDPR (General Data Protection Regulation) compliance. The department is full of personal data, whether it’s of employees, their next of kin or candidates responding to job adverts. Let’s take a look at five issues that HR must address when handling personal data.

GDPR 68

GDPR Personal data Compliance Communications 68

Hunton Privacy

SEPTEMBER 21, 2023

362 (“Act”), a bill that would impose new requirements on data brokers and grant residents new rights designed to facilitate control over their personal data. The Act would grant California consumers the right to request that data brokers (1) delete and (2) limit the further sale and sharing of consumers’ personal data.

Insurance 69

Insurance Personal data Sales Compliance 69

Data Protection Report

JUNE 17, 2020

This judgement concerns the legality of the European Commission approved Standard Contractual Clauses ( SCCs ) which many organisations rely on to transfer personal data outside of the UK and the European Economic Area ( EEA ), particularly in relation to outsourcing services.

Personal data 119

Personal data Communications Access GDPR 119

Hunton Privacy

MAY 17, 2023

Unlike the other comprehensive state privacy laws that have been enacted, the FDBR applies to a much narrower subset of entities.

Privacy 83

Privacy Personal data Sales Government 83

Hunton Privacy

JULY 12, 2023

Consumer” means a natural person who resides in Oregon and acts in any capacity other than in a commercial or employment context. Thus, like most other comprehensive state privacy laws, employee data and business-to-business data are excluded from the scope of the OCPA.

Privacy 52

Privacy Personal data Insurance Sales 52

Security Affairs

APRIL 28, 2023

In early April, the Italian Data Protection Authority, c, temporarily banned ChatGPT due to the illegal collection of personal data and the absence of systems for verifying the age of minors. The Authority pointed out that OpenAI does not alert users that it is collecting their data.

Personal data 90

Personal data Privacy Access Education 90

DLA Piper Privacy Matters

AUGUST 3, 2020

The amended APPI could have a significant impact on companies that handle personal information. Below are some key points to know about the amendment. Strengthening the Rights of Data Subjects. The amended APPI removes the 6 months threshold, and all personal data is nowsubject to the Rights of Data Subjects.

Personal data 122

Personal data Data breaches Compliance Analytics 122

Hunton Privacy

JULY 20, 2023

On June 30, 2023, the Delaware House of Representatives passed the Delaware Personal Data Privacy Act ( H.B. The DPDPA’s protections would apply to Delaware residents who act for a personal or household purpose, with express exemption for individuals acting in a commercial or employment context.

Privacy 52

Privacy Personal data Sales Risk 52

Hunton Privacy

DECEMBER 1, 2020

Between June 8, 2018 and April 6, 2019, the CNIL received 15 complaints from individuals relating to the exercise of their data protection rights with affiliates of the Carrefour Group. Loyalty program members’ data had been retained for a period of four years from their last activity.

GDPR 91

GDPR Personal data Data collection Marketing 91

Data Protector

AUGUST 17, 2020

Then, they can wait nervously for the European Commission to tweak the texts of the SCCs, and embark on another repapering exercise. It can be challenging to reach agreement with the other party on the role they play when they use “my organisation’s” personal data. one that would require SCCs). one that would require SCCs).

Privacy 156

Privacy Personal data Risk Compliance 156

Hunton Privacy

OCTOBER 24, 2022

In order to allow the search of a specific person, Clearview AI creates a biometric template which consists of a digital representation of a person’s physical characteristics. Under the EU General Data Protection (the “GDPR”), biometric data qualifies as sensitive personal data and the processing thereof requires additional protection.

Data collection 72

Data collection Personal data GDPR Marketing 72

DLA Piper Privacy Matters

JULY 23, 2019

The European Data Protection Board ( “EDPB” ) has published guidelines on the processing of personal data through video devices (the “ Guidelines “) (currently subject to a public consultation process). technical and organisational measures required for such data processing.

Personal data 40

Personal data GDPR Access Marketing 40

IBM Big Data Hub

JANUARY 22, 2024

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Any company operating in the EU or handling EU residents’ data must adhere to GDPR requirements. Everything from email addresses to political opinions counts as personal data.

GDPR 81

GDPR Compliance Personal data Privacy 81

DLA Piper Privacy Matters

MAY 13, 2020

The Information Commissioner’s Office (“ ICO ”) has published guidance for employers on complying with data protection law when taking steps to manage Covid-19 health and safety risk in the workplace (“ Guidance ”). This means that the usual data protection principles apply. Retaining and using information about infected employees.

GDPR 126

GDPR Personal data Risk Privacy 126

Hunton Privacy

FEBRUARY 25, 2020

On February 10, 2020, the Belgian Data Protection Authority (the “Belgian DPA”) published its Recommendation 1/2020 on data processing activities for direct marketing purposes (the “Recommendation”). Purchase , Rental and Enrichment of Personal Data. Data Minimization and Storage Limitation. Processing Purposes.

Marketing 109

Marketing Personal data GDPR Communications 109

Hunton Privacy

FEBRUARY 23, 2023

On February 20, 2023, in the case of Experian Limited v The Information Commissioner , the First-Tier Tribunal in the UK (the “ Tribunal ”) ruled on the ICO’s action to require Experian to make changes to how it processes personal data for direct marketing purposes.

Marketing 64

Marketing Personal data GDPR Privacy 64

Security Affairs

MAY 22, 2023

“This decision is flawed, unjustified and sets a dangerous precedent for the countless other companies transferring data between the EU and U.S.,”. Clearly, in order to stop shipping user data to the US, Meta might have to make huge investments such as re-distribute its data to European plants. .

GDPR 83

GDPR Personal data Privacy Data Privacy 83

IT Governance

NOVEMBER 15, 2018

The EU GDPR (General Data Protection Regulation) gives individuals eight rights relating to their personal data. Organisations must let individuals know how they can exercise these rights, and meet requests promptly. But first, what is a data subject? What is a data subject? The right to data portability.

GDPR 64

GDPR Personal data Access Communications 64

DLA Piper Privacy Matters

SEPTEMBER 6, 2021

While obligations to “users” (those with WhatsApp accounts) are contained in Article 13, there are also obligations to “non-users” under Article 14 due to how WhatsApp processes personal data such as contact details of individuals who do not have accounts. Non-User Data.

GDPR 105

GDPR Personal data e-Delivery Communications 105

HL Chronicle of Data Protection

DECEMBER 30, 2019

That is, certain processing of personal data by a controller might fall within the scope of the GDPR, while others might not. This is a very broad concept as it just implies “ the effective and real exercise of activity through stable arrangements ”. A) The Establishment Criterion (Art. The meaning of “ establishment ”.

GDPR 64

GDPR Personal data Analytics IT 64

IT Governance

JUNE 15, 2018

That’s certainly not the end of the world , but organisations will run into serious problems if they aren’t equipped to deal with data subject rights. The GDPR gives individuals eight rights relating to their personal data. Organisations must let individuals know how they can exercise these rights, and meet requests promptly.

GDPR 64

GDPR Personal data Compliance Access 64

HL Chronicle of Data Protection

APRIL 21, 2020

The new guidelines are applicable to public and private companies for the processing of their employees’ personal data. The CNIL concludes that consent can be used as a legal basis for processing employee/applicant personal data only in cases where there are no consequences for them. Categories of personal data.

Personal data 133

Personal data GDPR Big data Compliance 133

Hunton Privacy

NOVEMBER 5, 2020

During the investigation, the ICO conducted audits of the direct marketing data broking businesses of the UK’s three largest credit reference agencies (“CRAs”) – Experian, Equifax and TransUnion – and found “significant data protection failures at each” that were “deeply embedded” within the businesses.

Marketing 102

Marketing Compliance Personal data GDPR 102

Data Matters

NOVEMBER 16, 2020

On November 2, 2020, Singapore’s legislature finally approved amendments to the Personal Data Protection Act (PDPA). NEW mandatory data breach notification requirement. Consent to the processing of personal data will now be deemed to have been obtained based on. Expanded scope of “deemed consent”.

Data Privacy 68

Data Privacy Privacy Data breaches Personal data 68

Security Affairs

MARCH 12, 2023

The use of ChatGPT is becoming a serious problem in the workspace, it can potentially cause the leak of sensitive and confidential data. For this reason, companies like JP Morgan and Verizon are blocking access to the chatbot over concerns about confidential data.

Risk 97

Risk Artificial Intelligence Privacy Personal data 97

HL Chronicle of Data Protection

DECEMBER 30, 2019

That is, certain processing of personal data by a controller might fall within the scope of the GDPR, while others might not. This is a very broad concept as it just implies “ the effective and real exercise of activity through stable arrangements ”. A) The Establishment Criterion (Art. The meaning of “ establishment ”.

GDPR 52

GDPR Personal data Analytics IT 52

DLA Piper Privacy Matters

MARCH 18, 2021

during a calendar year, control or process personal data of at least 100,000 consumers, or. control or process personal data of at least 25,000 consumers and derive over 50 percent of gross revenue from the sale of personal data. Key provisions. business-to-business) or employment context.

Personal data 59

Personal data Sales GDPR Privacy 59

IBM Big Data Hub

FEBRUARY 23, 2024

The GDPR puts forth a litany of rules for how organizations in and outside of Europe handle the personal data of EU residents. The details of any organization’s plan to become fully GDPR compliant will vary based on the data the organization collects and what it does with that data.

GDPR 76

GDPR Compliance Personal data Privacy 76