DLA Piper Privacy Matters

MAY 19, 2020

The breaches included various instances of inappropriate system access, accidental and inappropriate disclosure of personal data by email and unauthorised disclosure of data. Tusla collects and processes highly sensitive, often special category data concerning children, vulnerable women and families across Ireland.

GDPR 122

GDPR Personal data Government Paper 122

DLA Piper Privacy Matters

MARCH 18, 2021

during a calendar year, control or process personal data of at least 100,000 consumers, or. control or process personal data of at least 25,000 consumers and derive over 50 percent of gross revenue from the sale of personal data. Enforcement. Key provisions.

Personal data 59

Personal data Sales GDPR Privacy 59

Data Protection Report

JUNE 22, 2022

An exemption to the requirement to provide further fair processing information where personal data was collected directly from data subjects initially and is repurposed for research purposes later has also been identified, where to do so would involve disproportionate effort.

GDPR 144

GDPR Government Personal data Risk 144

DLA Piper Privacy Matters

AUGUST 8, 2022

This generally include, the categories personal data being processed by key functions, data sharing with third parties, approach to exercise data subject rights, complaining channels, etc. Overseas transfer : specify the location where personal information is being used, stored and backed up.

Privacy 94

Privacy Personal data Data collection Access 94

Data Matters

NOVEMBER 9, 2020

Both are key legal mechanisms used to enable transfers of personal data outside the EU. The EDPS Guidance includes both short- and medium-term compliance and enforcement action for transfers carried out by EUIs or on their behalf, in a controller-to-processor and processor-to-subprocessor context. 12333 (the U.S. 12333 (the U.S.

Personal data 84

Personal data Compliance Privacy Communications 84

Hunton Privacy

NOVEMBER 1, 2022

On October 1, 2022, the Colorado Attorney General’s Office submitted an initial draft of the Colorado Privacy Act Rules (“CPA Rules”), which will implement and enforce the Colorado Privacy Act (“CPA”). Right to Request to Exercise Personal Data Rights (Rule 4.02 – Rule 4.07; 6.11).

Privacy 78

Privacy Personal data Data collection Compliance 78

ARMA International

APRIL 18, 2022

These records are typically organized by grouping them by function or department and then described as either an individual record or grouped together into a record category. Introduction to Data Protection Laws. Personal data protection requirements may be issued by federal, state (provincial), or local governments.

Personal data 100

Personal data GDPR Privacy Records Management 100

DLA Piper Privacy Matters

JULY 23, 2019

The European Data Protection Board ( “EDPB” ) has published guidelines on the processing of personal data through video devices (the “ Guidelines “) (currently subject to a public consultation process). technical and organisational measures required for such data processing.

Personal data 40

Personal data GDPR Access Marketing 40

IBM Big Data Hub

FEBRUARY 23, 2024

The GDPR puts forth a litany of rules for how organizations in and outside of Europe handle the personal data of EU residents. The details of any organization’s plan to become fully GDPR compliant will vary based on the data the organization collects and what it does with that data.

GDPR 79

GDPR Compliance Personal data Privacy 79

Hunton Privacy

MAY 18, 2020

The rules imposed by the Act would only apply during the course of the Public Health Emergency as declared by the Secretary of Health and Human Services (“HHS”) and would only apply to specific uses of certain personal data.

Privacy 101

Privacy Data collection Personal data Government 101

Data Protection Report

JUNE 7, 2021

On Friday 4 June, the European Commission published the finalised version of the new Standard Contractual Clauses for transferring personal data from the EU to third countries (the New SCCs). Companies now have 18 months to update their supplier contracts and other data export arrangements. Article 4 of Implementing Decision ).

Personal data 119

Personal data GDPR Data breaches Access 119

Data Protection Report

DECEMBER 17, 2020

The EC anticipates that providers of data sharing services, or data intermediaries, will play a key role in facilitating the aggregation and exchange of substantial amounts of relevant data (personal and non-personal data). What are the other excluded categories? Requirement to notify.

Government 92

Government Personal data GDPR Access 92

DLA Piper Privacy Matters

MAY 13, 2020

Consistent with its previous coronavirus guidance, the ICO is keen to stress that data protection law does not prevent employers from taking steps to keep staff and the public safe and supported during the current pandemic. This means that the usual data protection principles apply. Appropriate lawful basis.

GDPR 126

GDPR Personal data Risk Privacy 126

DLA Piper Privacy Matters

AUGUST 3, 2021

Before Schrems II, the “old” SCCs were routinely included in IT contracts without actually considering thoroughly the interplay between those old SCCs and the IT agreement as such, for example, in case of suspension or termination of the data transfers, as such suspension or termination did not happen in practice.

IT 119

IT Personal data Compliance Risk 119

Data Matters

MARCH 4, 2021

Rather, to be covered by the VCDPA, an entity must either “(i) during a calendar year, control or process personal data of at least 100,000 consumers or (ii) control or process personal data of at least 25,000 consumers and derive over 50 percent of gross revenue from the sale of personal data.”. Exemptions.

Personal data 74

Personal data GDPR Sales Privacy 74

Data Matters

NOVEMBER 4, 2020

Third, it creates a new category of businesses: those that voluntarily agree to be subject to the CCPA. Entities must annually buy sell, or share personal information of 100,000 consumers, not 50,000 as under the CCPA, to qualify as a business under the second prong of the test. New Rights for Sensitive Personal Information.

Privacy 122

Privacy B2B Sales Data breaches 122

Hunton Privacy

JULY 26, 2019

The European Data Protection Board (the “EDPB”) recently adopted its Guidelines 3/2019 on processing of personal data through video devices (the “Guidelines”). Although the Guidelines provide examples of data processing for video surveillance, these examples are not exhaustive.

GDPR 57

GDPR Personal data Privacy Compliance 57

Data Matters

DECEMBER 9, 2019

Recently, the Association of German Data Protection Authorities (“ Datenschutzkonferenz ” or “DSK”) issued guidelines setting a GDPR fining methodology (“Fining Methodology”). GDPR enforcement across the EU has picked up over the past year. Data protection authorities have now also started to formalize how they will be imposing fines.

GDPR 60

GDPR Personal data Privacy Manufacturing 60

Data Matters

DECEMBER 9, 2019

Recently, the Association of German Data Protection Authorities (“ Datenschutzkonferenz ” or “DSK”) issued guidelines setting a GDPR fining methodology (“Fining Methodology”). GDPR enforcement across the EU has picked up over the past year. Data protection authorities have now also started to formalize how they will be imposing fines.

GDPR 60

GDPR Personal data Privacy Manufacturing 60

Collibra

JULY 15, 2020

Data subject rights, also known as consumer rights and individual rights, r efers to a person’s control over how their personal data is used by businesses. After months of anticipation, the newly enforced California Consumer Privacy Act (CCPA) is officially here and adding complexity to data subject rights.

Data Privacy 72

Data Privacy GDPR Privacy Personal data 72

Data Protection Report

OCTOBER 7, 2020

On 1 October 2020, the UK Information Commissioner’s Office (ICO) published draft statutory guidance , providing clarity about how it will regulate and enforce data protection legislation in the UK. The considerations applied here are well known and replicate those of Article 83(2) of the GDPR. Assessment of economic impact .

GDPR 102

GDPR Personal data IT 102

IT Governance

JULY 25, 2018

As of 25 May 2018, organisations that use CCTV to capture images of individuals are processing personal data as defined by the GDPR (General Data Protection Regulation) and must comply with the Regulation’s requirements. To comply with the data controller’s legal obligations. To protect the data subject’s vital interests.

GDPR 102

GDPR Personal data Privacy Access 102

Hunton Privacy

MAY 22, 2018

The Bill implements Ireland’s national legislation in areas where the EU General Data Protection Regulation (“GDPR”) provides a margin of maneuver to Member States, and specifies the investigative and enforcement powers of the Irish Data Protection Commission.

GDPR 48

GDPR Personal data Marketing Insurance 48

DLA Piper Privacy Matters

FEBRUARY 11, 2020

The DPA lists three topics of high social significance and wishes to ensure compliance by data controllers and processors. Sensitive data (including biometric data), whereby the DPA intends to further clarify the applicable rules. INFORMATION BUT ALSO ENFORCEMENT. 3 SOCIETAL THEMES IN THE PICTURE.

IT 81

IT GDPR Compliance Personal data 81

DLA Piper Privacy Matters

MAY 5, 2020

Adjacent to these initiatives, the European Data Protection Board (“EDPB”) recently published draft guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications. Hence, personal data can be collected through vehicle sensors, telematics boxes or mobile applications.

Privacy 69

Privacy Personal data GDPR Insurance 69

Data Protection Report

DECEMBER 17, 2020

The DGR, proposed in the EC’s February 2020 Digital Strategy , is the first of a wave of regulatory and antitrust reforms targeting the digital sector, which will include additional legislative proposals in 2020 and early 2021, as well as significant changes to the EC’s enforcement of European Union ( EU ) competition rules.

Government 102

Government Personal data Marketing Artificial Intelligence 102

DLA Piper Privacy Matters

DECEMBER 14, 2018

The Dutch Data Protection Authority ( Autoriteit Persoonsgegevens , “ Dutch DPA “) previously stated that it shall focus its enforcement actions on the public and health sector, and seems to act upon its words.

GDPR 40

GDPR Personal data Insurance Privacy 40

Collibra

JULY 15, 2020

Data subject rights, also known as consumer rights and individual rights, r efers to a person’s control over how their personal data is used by businesses. After months of anticipation, the newly enforced California Consumer Privacy Act (CCPA) is officially here and adding complexity to data subject rights.

Data Privacy 52

Data Privacy GDPR Privacy Personal data 52

Hunton Privacy

JUNE 29, 2018

Personal information is defined broadly as “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” Covered Businesses will be required to make this disclosure in their online privacy notice.

Privacy 55

Privacy Sales Personal data Communications 55

Thales Cloud Protection & Licensing

JANUARY 16, 2020

Objectives of the Personal Data Protection Bill. Many privacy professionals consider the European Union’s General Data Protection Regulation (GDPR), which took effect in May 2018, as the cornerstone of privacy regulation. GDPR is harmonizing data protection and privacy requirements across the EU.

Personal data 24

Personal data Compliance Data breaches GDPR 24

Thales Cloud Protection & Licensing

JANUARY 27, 2021

Under this legislation, businesses, data brokers and other in-scope entities must provide consumers with notices that explain their privacy practices. Second, it creates the California Privacy Protection Agency (CalPPA), an agency charged with enforcing CPRA by imposing fines and penalties on those who violate the law.

Data Privacy 102

Data Privacy Privacy GDPR Encryption 102

HL Chronicle of Data Protection

OCTOBER 3, 2018

The GDPR applies to entities that are established in the EU, as well as entities not established in the EU that process the personal data of persons located in the EU in the context of either (i) offering goods or services to persons in the EU, or (ii) monitoring the behavior of persons in the EU.

GDPR 55

GDPR Privacy Personal data Sales 55

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. Specific categories defined as personal information include.

GDPR 79

GDPR Privacy Sales Data breaches 79

Hunton Privacy

JUNE 24, 2020

In its report, the Commission concludes that generally the GDPR has successfully met its objectives, namely those of strengthening personal data protection and guaranteeing the free flow of personal data within the EU. Enforcement. Data Subject Rights. Extra-Territorial Reach.

GDPR 75

GDPR Artificial Intelligence Blockchain Personal data 75

Data Protection Report

JUNE 9, 2022

1) Category of infringement under Article 83(4) – (6) GDPR. Categories of personal data affected (e.g. Where a subsidiary is directly or indirectly wholly or almost wholly owned by the parent company, the rebuttable presumption is that the parent exercises decisive influence. diagram provided in the Guidelines.

GDPR 52

GDPR Compliance Personal data IT 52

DLA Piper Privacy Matters

OCTOBER 16, 2019

Multinationals increasingly turning to BCRs as providing more legal certainty for personal data transfers from the EU. The EU General Data Protection Regulation (“GDPR”) brought about stricter data protection rules, and increased penalties for breaching these rules. What are BCRs?

GDPR 40

GDPR Personal data Marketing Healthcare 40

Data Protection Report

SEPTEMBER 28, 2021

Suggested activities include monitoring, detecting or correcting bias in AI systems; using personal data for internal R&D or “business innovation purposes aimed at improving services to customers”; and using audience measurement cookies to improve webpages. Complaints and DSARs.

Government 120

Government FOIA GDPR Compliance 120