Information Governance Perspectives

JUNE 26, 2019

ARMA-GLA Summer Spotlight Workshop LEVERAGING A GDPR COMPLIANCE INVESTMENT FOR CCPA / PRIVACY BY DESIGN WORKSHOP Special Guest Speakers: Brussels Privacy Experts Will Address Leveraging GDPR Compliance Investments with the CCPA July 31, 2019. 11:30am-2pm, San Antonio Winery New Conference Center Vintage Room!

GDPR 40

GDPR Privacy Compliance Information governance 40

Information Governance Perspectives

JUNE 26, 2019

ARMA-GLA Summer Spotlight Workshop LEVERAGING A GDPR COMPLIANCE INVESTMENT FOR CCPA / PRIVACY BY DESIGN WORKSHOP Special Guest Speakers: Brussels Privacy Experts Will Address Leveraging GDPR Compliance Investments with the CCPA July 31, 2019. 11:30am-2pm, San Antonio Winery New Conference Center Vintage Room!

GDPR 40

GDPR Privacy Compliance Information governance 40

Hunton Privacy

DECEMBER 17, 2020

The fine is the largest issued by the Irish DPC under the EU General Data Protection Regulation (“GDPR”) to date and is also its first against a U.S.-based Twitter estimated that 88,726 Twitter users in Europe were affected between September 5, 2017 and January 11, 2019. Investigation and GDPR Dispute Resolution Procedure.

GDPR 72

GDPR Data breaches Personal data Compliance 72

IT Governance

DECEMBER 27, 2019

A royal baby, a fire at Notre-Dame, the highest grossing film of all time and more than 12 billion breached data records: 2019 has been quite a year. IT Governance is closing out the year by rounding up 2019’s biggest information security stories. Part one covers January to June, and will be followed by part in the coming days.

Data breaches 69

Data breaches GDPR Passwords Personal data 69

Information Matters

FEBRUARY 18, 2019

Data is not the new oil – Venture Beat, 10 February 2019 “Data may have been tantamount to petroleum when the internet was virgin wilderness. The data bubble is surely waiting to burst – Campaign, 4 February 2019 “Given that marketers are so obsessed with data, that’s no surprise. ” [link].

IoT 40

IoT Retail GDPR Marketing 40

Hunton Privacy

JANUARY 11, 2023

On January 11, 2023, the Belgian Data Protection Authority (“Belgian DPA”) announced that it has approved the Interactive Advertising Bureau Europe’s (“IAB Europe”) action plan with respect to its Transparency and Consent Framework (“TCF”). Background.

GDPR 58

GDPR Personal data Marketing IT 58

IT Governance

JUNE 27, 2019

June 2019’s total of 39,713,046 breached records is the lowest since May last year – the month that the GDPR (General Data Protection Regulation) came into effect. Is this the start of the long-awaited ‘GDPR bounce’? Theta360 exposes user-uploaded photos (11 million).

Data breaches 111

Data breaches Personal data Ransomware GDPR 111

Data Protection Report

FEBRUARY 27, 2019

On January 21, 2019, in one of the largest privacy fines announced globally, the French National Data Protection Commission (CNIL) imposed a €50 million penalty against a tech giant for violation of the General Data Protection Regulation (GDPR). The Social Media Privacy Protection and Consumer Rights Act of 2019 (S.

Data Privacy 40

Data Privacy GDPR Privacy Risk 40

HL Chronicle of Data Protection

MAY 29, 2019

Following the one-year anniversary of the coming into effect of the GDPR, Hogan Lovells’ Privacy and Cybersecurity practice has prepared summaries of key GDPR-related developments of the past 12 months. The summaries cover regulatory guidance, enforcement actions, court proceedings, and various reports and materials.

GDPR 40

GDPR Personal data Privacy Information architecture 40

HL Chronicle of Data Protection

SEPTEMBER 23, 2019

2019 conference in Las Vegas. Bret Cohen will explore what legislators and regulators think compatibility means during the session, “ Searching for Compatible Uses in a Post-GDPR, Post-CCPA World, ”. Time: 11:45 a.m. – Join members from our award-winning Privacy and Cybersecurity (PaC) practice at this week’s IAPP Privacy.

Privacy 40

Privacy Risk Security GDPR 40

DLA Piper Privacy Matters

JUNE 23, 2020

The CNIL assessment that Google did not collect a valid consent for ads personalization and does not comply with the transparency and information requirements set forth in Article 12 and 13 of the GDPR are not legally grounded (2). of the GDPR. This decision is one of the highest sanctions in Europe to date.

GDPR 86

GDPR Personal data Access IT 86

IT Governance

MAY 27, 2021

Indeed, a separate Freedom of Information request from 2019 found that 237 UK police employees were disciplined for doing that, and 11 people were sacked. Meanwhile, Cheshire Police, which listed its figures in financial years, reported that it suffered 289 data breaches in 2019–2020. Who are the worst offenders?

Data breaches 128

Data breaches Data Privacy Marketing Privacy 128

eDiscovery Daily

NOVEMBER 21, 2019

2019 was another busy year from an eDiscovery, cybersecurity and data privacy standpoint. What do you need to know about those important 2019 events? Here’s a webcast that will discuss what you need to know about important 2019 events and how they impact your eDiscovery efforts. Biometric Security and Data Privacy Litigation.

e-Discovery 53

e-Discovery Data Privacy Privacy Cybersecurity 53

Hunton Privacy

OCTOBER 21, 2019

On October 4, 2019, the Presidency of the European Council published its revised text (the “Revised Draft”) of the Proposal for a Regulation Concerning the Respect for Private Life and the Protection of Personal Data in Electronic Communications (the “Draft ePrivacy Regulation”).

GDPR 58

GDPR Personal data Data collection Sales 58

eDiscovery Daily

AUGUST 21, 2019

As noted yesterday , Tuesday and Monday , the International Legal Technology Association (ILTA) annual educational conference of 2019 (otherwise known as ILTACON) is happening this week and eDiscovery Daily is once again covering the show and, this year, CloudNine is exhibiting at the show and participating in a major way.

e-Discovery 38

e-Discovery GDPR Analytics Information governance 38

Hunton Privacy

APRIL 20, 2020

That Referential was adopted following a public consultation launched by the CNIL on April 11, 2019. Following the 2018 update to the French Data Protection Act, in light of the EU General Data Protection Regulation (the “GDPR”), the CNIL was granted the power to issue Referentials. Background.

Personal data 71

Personal data GDPR Compliance Archiving 71

eDiscovery Daily

OCTOBER 21, 2019

As we noted yesterday , the 2019 Relativity Fest conference is going on this week, CloudNine is once again here as a Sponsor and Exhibitor and I will be covering the show for eDiscovery Daily. The 2019 International Panel. 11:10 AM – 12:10 PM: Data Subject Access Requests in the Americas and Beyond.

e-Discovery 45

e-Discovery e-Delivery GDPR Education 45

Hunton Privacy

DECEMBER 3, 2018

Following the 2018 update to the French Data Protection Act for purposes of implementing the EU General Data Protection Regulation (“GDPR”), the CNIL may issue guidelines, recommendations or standards called “Referentials.” The public consultation on the two draft Referentials will be open until January 11, 2019.

GDPR 81

GDPR Personal data Insurance Education 81

Hunton Privacy

JULY 13, 2020

Following the complaint, the Irish DPA brought proceedings against Facebook in the Irish High Court, challenging the validity of the SCCs, and referring 11 questions to the CJEU for a preliminary ruling. View our previous blog posts on the progression of the case in May 2016 , October 2017 , August 2018 , July 2019 and May 2020.

Personal data 88

Personal data Privacy GDPR Risk 88

Data Protection Report

OCTOBER 14, 2019

On Friday, October 11, 2019, the California Governor signed all five of the California Consumer Privacy Act amendments that were awaiting his signature (AB 25, 874, 1146, 1355, and 1564) as well as an amendment to California’s data breach law (AB 1130). We describe the draft regulations here. Article 2: CCPA covered entities.

Privacy 40

Privacy Data Privacy Data breaches GDPR 40

eDiscovery Daily

JANUARY 29, 2019

Sessions in the main conference tracks include: 10:30am – 11:30am: The International Legal Cloud 2019: Discovery, Security, and Business Considerations. In 2019, the cloud is fait accompli, a ubiquitous part of life for just about everyone. There are plenty of interesting sessions today.

e-Discovery 41

e-Discovery Education Marketing Cloud 41

Hunton Privacy

DECEMBER 13, 2019

On December 11, 2019, the European Data Protection Board (“EDPB”) published its draft guidelines 5/2019 (the “Guidelines”) on the criteria of the right to be forgotten in search engine cases under the EU General Data Protection Regulation (“GDPR”).

Personal data 61

Personal data GDPR Privacy IT 61

DLA Piper Privacy Matters

JANUARY 21, 2019

On 12 December 2018, the French Government issued an ordinance [1] finalizing, at the legislative level [2] , the alignment of the French Data Protection Law (“FDPL”) with the General Data Protection Regulation [3] (“GDPR”) and the Directive 2016/680 [4]. Following-up the adoption of the GDPR, the French Law No.

GDPR 49

GDPR Personal data Communications Government 49

HL Chronicle of Data Protection

JUNE 14, 2019

Date: Wednesday, June 19, 2019. We hope you can join us for a discussion with Mark Brennan and Bret Cohen. Time: 2:00 p.m. EST. 1:00 p.m. To register for the webinar, click here.

Privacy 40

Privacy GDPR Compliance Financial Services 40

Hunton Privacy

MARCH 26, 2019

On March 14, 2019, the Dutch Data Protection Authority ( Autoriteit Persoonsgegevens , the “Dutch DPA”) published a press release announcing its policy (in Dutch ) for calculating administrative fines (the “Policy”). The Policy provides insight into how the Dutch DPA will use its fining powers.

GDPR 55

GDPR Personal data Authentication Compliance 55

Data Protection Report

JULY 9, 2018

states have recently introduced and passed legislation to expand data breach notification rules and to mirror some of the protections provided by Europe’s newly enacted General Data Protection Regulation (“GDPR”). See our previous blog posts on GDPR here and here. Passed in May 2018, Vermont’s law goes into effect on January 1, 2019.

GDPR 40

GDPR Data breaches Personal data Insurance 40

eDiscovery Daily

OCTOBER 20, 2019

The 2019 Relativity Fest conference is here! Here are some of the eDiscovery-related sessions for today: 11:00 AM – 12:00 PM: The Business of Law 2020: The FTI-Relativity General Counsel Survey. Little Data: The Results of the 2019 Relativity-CTRL Study on Data Minimization. Data Privacy and Data Protection 2019.

e-Discovery 40

e-Discovery Data Privacy Education Privacy 40

Security Affairs

JULY 30, 2019

The first issue, tracked as CVE-2019-13026, is an SQL injection vulnerability that could be exploited by an unauthenticated attacker to create a new administrator account. Below the timeline for the flaws: Date Event 11/Dec/2017 Reported a SQL Injection in OXID 4.10.6 Marriott, GDPR). Pierluigi Paganini. SecurityAffairs –.

GDPR 64

GDPR Encryption Passwords Access 64

IT Governance

MAY 2, 2019

A third of businesses and a fifth of charities were hit by a cyber attack or data breach in the past year, the UK government’s Cyber Security Breaches Survey 2019 has found. These improvements have coincided with the introduction of the GDPR (General Data Protection Regulation) , indicating that its compliance requirements are working.

Data breaches 69

Data breaches GDPR IT Compliance 69

Thales Cloud Protection & Licensing

NOVEMBER 22, 2021

Tue, 11/23/2021 - 06:13. trillion in 2019 to $5.2 How can banks succeed in the digital banking era? The growth of the digital economy has completely changed consumer habits. Consumers have come to expect a hyper-personalized experience that is fast, convenient and secure. trillion in 2020.”.

Digital transformation 71

Digital transformation Financial Services Customer Experience Risk 71

Hunton Privacy

JULY 11, 2019

His comments follow an ICO report on adtech released in June 2019, that warned of increased focus on this sector by the regulator, particularly with regards to the real-time bidding component of digital advertising. McDougall stated: “The need for explicit consent for processing special category data in real-time bidding is unambiguous.

GDPR 55

GDPR Marketing Personal data Compliance 55

Hunton Privacy

NOVEMBER 22, 2019

On November 13, 2019, the European Data Protection Board (“EDPB”) published its draft guidelines 4/2019 (the “Guidelines”) on the obligation of Data Protection by Design and by Default (“DPbDD”) set out under Article 25 of the EU General Data Protection Regulation (“GDPR”). Background and Scope. on how to handle personal data.

Personal data 50

Personal data GDPR Compliance Risk 50

Hunton Privacy

OCTOBER 18, 2018

On October 11, 2018, the French data protection authority (the “CNIL”) announced that it adopted two referentials ( i.e. , guidelines) on the certification of the data protection officer (“DPO”). It is a purely voluntary process to assist in demonstrating compliance with the GDPR requirements. View the announcement (in French).

GDPR 73

GDPR Compliance Privacy IT 73

IT Governance

DECEMBER 21, 2023

At the time of writing, the data set starts in Q2 2019 and goes up to Q2 2023. As a reminder, the GDPR (General Data Protection Regulation) requires notifiable incidents to be reported to the relevant supervisory authority within 72 hours. When more data is released, we’ll publish a new analysis.

Data breaches 52

Data breaches Personal data Government GDPR 52

DLA Piper Privacy Matters

JULY 24, 2019

The French Data Protection Supervisory Authority (CNIL) has finally decided to replace its recommendations of 2013 which were no more compliant with the GDPR, by new guidelines. The adoption of the new guidelines is part of the action plan that the CNIL has implemented for 2019-2020 to provide clearer guidance to the marketing community.

GDPR 40

GDPR Computer and Electronics Marketing Communications 40

Hunton Privacy

APRIL 26, 2019

On April 15, 2019, the UK Information Commissioner’s Office (the “ICO”) issued for public consultation a draft code of practice , “Age Appropriate Design,” that will regulate the provision of online services likely to be accessed by children in the UK. The deadline for responding to the public consultation is May 31, 2019.

Personal data 60

Personal data Privacy GDPR Access 60

CGI

AUGUST 7, 2018

Tue, 08/07/2018 - 11:16. While for some GDPR was BAU, others a huge effort, and a bit of a panic for a minority, one of the most significant outcomes is the perception that cyber security is no longer just ‘an IT thing’. Those who have embraced GDPR have probably established privacy by design as an inherent part of their business.

Privacy 40

Privacy GDPR Unstructured data Marketing 40