DLA Piper Privacy Matters

AUGUST 19, 2021

On 17 December 2019, the ICO issued the first administrative fine under the GDPR (known as a monetary penalty notice in the UK), alongside an Enforcement Notice, against Doorstep Disparensee Limited (“ DDL ”).

GDPR 105

GDPR Personal data Compliance Risk 105

Data Matters

JUNE 1, 2022

There is a lot to digest, so below is our breakdown of the top 10 key points you should know about the EU’s new rules. Gatekeepers will only be able to rely on (GDPR-grade) user consent with respect to processing data for advertising purposes. Key dates and next steps. determine the ranking of its own and third parties’ offerings.

Marketing 88

Marketing Computer and Electronics Communications GDPR 88

Thales Cloud Protection & Licensing

FEBRUARY 11, 2020

2020 ends a decade, and the new year prompted me to think “Wow it’s been two decades since we started Vormetric.” So, in 2020 we’re looking at frontiers like the cloud and cloud native technologies (including microservices). In 2000, there was no PCI DSS, no HIPAA-HITECH, no NIST 800-53, no GDPR, or anything like them.

Cloud 114

Cloud Government Financial Services Access 114

Hunton Privacy

SEPTEMBER 14, 2020

On September 9, 2020, the UK Information Commissioner’s Office (“ICO”) published an Accountability Framework , designed to assist organizations in complying with their accountability obligations under the EU General Data Protection Regulation (“GDPR”). Feedback may be submitted on the Framework before November 2, 2020.

IT 114

IT Compliance Records Management GDPR 114

eSecurity Planet

JANUARY 21, 2021

Data privacy regulations like the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) can be hard to navigate for businesses of any size, but GRC tools can simplify and streamline compliance with all of the requirements. Additionally, Forrester named it a Contender in its Q1 2020 GRC Wave.

Compliance 56

Compliance Risk Government Retail 56

Hunton Privacy

FEBRUARY 10, 2022

On February 10, 2022, the French Data Protection Authority (the “CNIL”) ruled the transfer of EU personal data from the EU to the U.S. In its decision, the CNIL held that an organization using Google Analytics was in violation of the GDPR’s data transfer requirements. through the use of the Google Analytics cookie to be unlawful.

Analytics 111

Analytics Personal data GDPR Compliance 111

Hunton Privacy

DECEMBER 15, 2020

Article 28 of the GDPR sets out specific provisions that must be executed between data controllers and processors when personal data is shared. Once finalized, the SCCs will remain optional but demonstrate the level of detail that the Commission expects to see in data processing agreements.

GDPR 80

GDPR Personal data IT 80

Hunton Privacy

NOVEMBER 16, 2020

On November 12, 2020, somewhat in the shadow of the new standard contractual clauses for data transfers to recipients outside the European Economic Area (“EEA”), the European Commission also adopted draft standard contractual clauses to be used between controllers and processors in the EEA (“EEA Controller-Processor SCCs”).

GDPR 88

GDPR Personal data Data breaches Information Security 88

Privacy and Cybersecurity Law

JULY 9, 2020

On June 12, 2020, the Québec government proposed a significant overhaul of its current privacy laws through the introduction of the highly anticipated Bill 64, An Act to Modernize Legislative Provisions Respecting the Protection of Personal Information (“Bill”).

GDPR 52

GDPR Privacy Personal data Government 52

Hunton Privacy

AUGUST 11, 2020

On August 5, 2020, the French Data Protection Authority (the “CNIL”) announced that it has levied a fine of €250,000 on French online shoe retailer, Spartoo, for various infringements of the EU General Data Protection Regulation (“GDPR”). As part of its activities, the company operates a website that is accessible in 13 EU countries.

Retail 114

Retail GDPR IT Personal data 114

Data Protection Report

JANUARY 13, 2020

access, deletion, or opt-out) and a few companies seem to use the same tool, third party, and/or infrastructure for GDPR requests. On October 10, 2019, the California Attorney General (AG) issued for public comment the Proposed Text of Regulations to clarify components of the CCPA. email, phone, mail). Ballot Initiative.

Privacy 49

Privacy B2B Sales Compliance 49

DLA Piper Privacy Matters

APRIL 20, 2021

The CJEU’s long-awaited Schrems II decision of 16 July 2020, raised important questions on the validity of data processing activities involving the transfer of personal data outside the EEA. GDPR), the CJEU stated that due to their inherently contractual nature, they cannot bind the public authorities of third countries.

Personal data 105

Personal data GDPR Compliance Privacy 105

ARMA International

DECEMBER 26, 2019

For 2019, 34% of RIM professionals reported they had restructured their programs, with an additional 31% planning to do so into 2020. A further 32% expect to use a cloud records management platform into 2020, up substantially from 18% in 2017. Intelligent Content Services and Automation: Must-Haves for 2020 Roadmaps.

Content services 76

Content services Cloud Records Management Privacy 76

Hunton Privacy

MARCH 29, 2022

Supporting the European Parliament’s position to restrict gatekeepers from combining data across platform services, unless consent has been obtained in an explicit and clear manner in line with the EU General Data Protection Regulation (“GDPR”). The DMA imposes a set of obligations on “gatekeeper” platforms.

Marketing 108

Marketing GDPR Compliance Paper 108

Data Matters

JULY 17, 2020

July 21 & 22, 2020. Tuesday, July 21, 2020 – Register. Wednesday, July 22, 2020 – Register. Panelists will discuss: How PSD2, GDPR, GLBA, CCPA, NY SHIELD Act, and NYDFS cybersecurity regulations and the PCI framework are affecting payments and fintech. PT | 11:00 a.m. ET | 4:00 p.m. BST | 11:00 a.m.

Cybersecurity 68

Cybersecurity Financial Services GDPR Privacy 68

eSecurity Planet

FEBRUARY 14, 2023

When Markowitz departed Portfolium after selling the company to Instructure, he teamed up with Daniel Marashalin and Troy Markowitz to launch Drata in the summer of 2020. The vision was to automate security and compliance across 14 frameworks, including SOC 2, ISO 27001, HIPAA and GDPR. Growth has definitely been robust.

Compliance 118

Compliance Security Cybersecurity Marketing 118

IT Governance

DECEMBER 21, 2023

Also note that this blog only accounts for the data from 2020–2022, because these are the only years the ICO has released its full data set on. According to the ICO’s data from 2020–2022, the answer is 34% – or 33.6%, to be more exact. At the time of writing, the data set starts in Q2 2019 and goes up to Q2 2023.

Data breaches 52

Data breaches Personal data Government GDPR 52

Security Affairs

FEBRUARY 13, 2020

[link] Una piccolissima parte del leak: [link] pic.twitter.com/DvrWkBxW9Z — LulzSecITA (@LulzSec_ITA) February 7, 2020. The hacktivists claim that once hacked the universities did not disclose the data breach and attempted to hide the incident, violating the European Privacy Law GDPR.

Data breaches 128

Data breaches GDPR Education Passwords 128

Data Protection Report

SEPTEMBER 23, 2021

The CNIL’s inspection included the insurer’s compliance with Section 5-1(e) of GDPR , which reads: Personal data shall be. (e) In 2020, the insurer’s turnover amounted to €9.3 that the failure to comply with the retention periods concerned a very large number of persons, in particular the company’s customers.

Personal data 111

Personal data Insurance GDPR Record destruction 111

Data Matters

JANUARY 22, 2020

Moreover, the California Attorney General will finalize regulations during 2020 that are likely to expand compliance obligations and narrow flexibility. What should companies be doing to prepare for CCPA enforcement beginning on July 1, 2020? EST / 10:00-11:30 a.m. How are companies handling these uncertainties? 1:00-2:30 p.m.

Privacy 79

Privacy Data breaches GDPR Cybersecurity 79

Security Affairs

OCTOBER 27, 2020

The Italian cyber security firm TG soft publicly shared the news of the attack in a tweet: 2020-10-27 #Enel colpita di nuovo da #ransomware. Questa volta è #NetWalker a colpire @EnelGroupIT a rubare 5 TB di dati. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 128

Ransomware Data breaches GDPR Compliance 128

Data Protection Report

NOVEMBER 13, 2020

A feedback period on the draft documents will run until 10 December. The new SCCs aim to modernise the clauses in line with the GDPR and to cover a multitude of different types of transfers to cater for “ the complexity of modern processing chains ”. a “warrant canary”); and.

Personal data 98

Personal data GDPR Encryption Government 98

eDiscovery Daily

FEBRUARY 4, 2020

I’ve opened them all up, so you don’t have to. : o ) Sessions in the main conference tracks include: 9:00am – 10:00am: Plenary Session – Blockchain and Emerging Technology Researcher Bettina Warburg. Key takeaways: Briefing update on GDPR & CCPA. How do these data privacy laws impact social media & the IoT.

e-Discovery 59

e-Discovery Data Privacy Blockchain Privacy 59

Thales Cloud Protection & Licensing

APRIL 25, 2022

Today it is estimated that there are 10 to 15 million medical devices at U.S. hospitals with an impressive average of 10 to 15 connected medical devices per patient bed. It is estimated the cost of US healthcare ransomware attacks alone at $21 billion in 2020. A pandemic of cyber attacks. But the threat is a lot more insidious.

Healthcare 71

Healthcare Big data Cloud Compliance 71

Thales Cloud Protection & Licensing

DECEMBER 22, 2020

Tue, 12/22/2020 - 10:08. The 2020 analysis found that customer data was by far the most-commonly compromised type of record with 80% of breached organizations saying that customer PII was affected. The problem is not limited to the requirements of GDPR. Multinationals are uniquely impacted by these compliance regulations.

Data Privacy 118

Data Privacy Privacy Security Encryption 118

Data Protection Report

JANUARY 13, 2020

access, deletion, or opt-out) and a few companies seem to use the same tool, third party, and/or infrastructure for GDPR requests. On October 10, 2019, the California Attorney General (AG) issued for public comment the Proposed Text of Regulations to clarify components of the CCPA. email, phone, mail). Ballot Initiative.

Privacy 40

Privacy B2B Sales Compliance 40

Data Matters

MARCH 10, 2021

On February 10, 2021, the Council of the European Union (which includes representatives of the European Union (EU) member states, hereinafter Council) reached an agreement on the ePrivacy Regulation proposal that governs the protection of privacy and confidentiality of electronic communications services (ePrivacy Regulation).

GDPR 68

GDPR Metadata Communications Privacy 68

ARMA International

APRIL 18, 2022

Countries and organizations within the European Union (EU), must comply with the requirements of the General Data Protection Regulation (GDPR) 1. Many countries outside of the EU have created and implemented their own data protection laws that are similar to the GDPR 2. 10 California Privacy Rights Act (CPRA). Bill C-11, Sec.

Personal data 100

Personal data GDPR Privacy Records Management 100

eDiscovery Daily

FEBRUARY 5, 2020

: o ) Sessions in the main conference tracks include: 9:00am – 10:00am: Cite Early! The 2019-2020 Cases That Every Practitioner Should Know. Join us for ALM’s open-to-all legendary Judicial Keynote Session as the panel discusses the cases that made (or missed) the ALM headlines in 2019-2020. Cite Often!

Information governance 46

Information governance Privacy Cloud Government 46

IT Governance

JULY 28, 2020

This looks like a clear violation of the GDPR (General Data Protection Regulation) , which states that organisations must report significant breaches within 72 hours of discovery. Helping schools with the GDPR. million) or 2% of the organisation’s annual global turnover. million) or 2% of the organisation’s annual global turnover.

GDPR 124

GDPR Education Ransomware Data breaches 124

eDiscovery Daily

JULY 7, 2019

We’re less than six months away from the scheduled start of the California Consumer Privacy Act (CCPA) on January 1, 2020. In Truth on the Market ( 10 Reasons Why the California Consumer Privacy Act (CCPA) Is Going to Be a Dumpster Fire , written by Alec Stapp), real estate developer Alastair Mactaggart spent nearly $3.5

Data Privacy 44

Data Privacy Privacy GDPR IT 44

DLA Piper Privacy Matters

MAY 23, 2023

For Meta, the decision has resulted in a record administrative fine of €1.2bn, an order to suspend further transfers of EEA personal data to the US within five months, and an order to cease all unlawful processing of EEA personal data transferred to the US in violation of GDPR, within six months.

Personal data 59

Personal data GDPR Risk Privacy 59

Hunton Privacy

NOVEMBER 13, 2020

On November 12, 2020, the European Commission published a draft implementing decision on standard contractual clauses for the transfer of personal data to third countries pursuant to the EU General Data Protection Regulation (“GDPR”), along with its draft set of new standard contractual clauses (the “SCCs”). Key Takeaways.

Personal data 105

Personal data GDPR Data collection Access 105

Data Matters

MARCH 17, 2021

The revDPA will implement many of the requirements of the EU General Data Protection Regulation (GDPR) into Swiss law, although sometimes with a Swiss flourish. It sets itself apart from the GDPR not only in its brevity, but also in the sometimes different terminology it uses.”.

GDPR 79

GDPR Personal data Paper Privacy 79

eDiscovery Daily

FEBRUARY 3, 2020

In just 10 years the case law around eDiscovery AI & Analytics has exploded. GDPR & CCPA are Fueling High Demand for On-Point RegTech Solutions Presented by Thomson Reuters. Key takeaways: Key updates on GDPR & CCPA. The post Welcome to Legaltech New York 2020!:

Education 53

Education Data Privacy GDPR Compliance 53

Hunton Privacy

MARCH 25, 2020

The Report first notes that the EU General Data Protection Regulation (“GDPR”) contains necessary safeguards and rules with respect to personal data processing in a general health emergency. Accordingly, data protection considerations should not be used to hinder or limit measures authorities adopt in their fight against the pandemic.

Personal data 75

Personal data GDPR Risk Insurance 75

Hunton Privacy

APRIL 20, 2020

On April 15, 2020, the French Data Protection Authority (the “CNIL”) published the final version of its standard (“Referential”) concerning the processing of personal data for core Human Resources (“HR”) management purposes. That Referential was adopted following a public consultation launched by the CNIL on April 11, 2019.

Personal data 71

Personal data GDPR Compliance Archiving 71