DLA Piper Privacy Matters

MAY 23, 2022

A draft set of EDPB guidelines on the calculation of administrative fines under the GDPR is likely to lead to some further consistency among supervisory authorities on how fines are calculated – however, if adopted, the guidance leaves clear room for the current divergent approaches to continue.

GDPR 98

GDPR Personal data Risk IT 98

Data Matters

DECEMBER 9, 2019

Recently, the Association of German Data Protection Authorities (“ Datenschutzkonferenz ” or “DSK”) issued guidelines setting a GDPR fining methodology (“Fining Methodology”). GDPR enforcement across the EU has picked up over the past year. 5-Step Process.

GDPR 60

GDPR Personal data Privacy Manufacturing 60

Data Matters

DECEMBER 9, 2019

Recently, the Association of German Data Protection Authorities (“ Datenschutzkonferenz ” or “DSK”) issued guidelines setting a GDPR fining methodology (“Fining Methodology”). GDPR enforcement across the EU has picked up over the past year. 5-Step Process.

GDPR 60

GDPR Personal data Privacy Manufacturing 60

Data Protection Report

JUNE 9, 2022

Whereas the previous guidance set out general principles for when to impose fines under Article 83 GDPR, the new Guidelines provide a detailed five-step methodology for calculating a starting point for a fine and clarify how to determine the turnover of an undertaking in order to harmonise the approach across Member States.

GDPR 52

GDPR Compliance Personal data IT 52

Hunton Privacy

MARCH 4, 2020

Article 97 of the GDPR requires the European Commission to submit, by May 25, 2020, and every four years thereafter, a report on the evaluation and review of the GDPR to the European Parliament and to the Council of the EU. In order to prepare its report, the European Commission may request information from DPAs.

GDPR 101

GDPR Personal data Data breaches Communications 101

IT Governance

JULY 29, 2019

Now that the EU GDPR (General Data Protection Regulation) has been in effect for over a year, you’ve likely become acquainted with the term ‘personal data’ But what exactly does personal data mean? And did you know that the GDPR includes a sub-category of sensitive personal data that comes with its own requirements?

Personal data 75

Personal data GDPR Encryption Compliance 75

IT Governance

JULY 25, 2018

As of 25 May 2018, organisations that use CCTV to capture images of individuals are processing personal data as defined by the GDPR (General Data Protection Regulation) and must comply with the Regulation’s requirements. You can find more information about GDPR compliance on our website >> Data processing principles (Article 5).

GDPR 102

GDPR Personal data Privacy Access 102

DLA Piper Privacy Matters

NOVEMBER 24, 2020

Background: How to calculate GDPR fines? How to properly calculate administrative fines for non-compliance with the EU General Data Protection Regulation (‘ GDPR ’) is one of the most important questions when applying the GDPR on practical level, e.g. : What is actually meant by the reference to “undertaking” in Article 83 (4) to (6) GDPR?

GDPR 75

GDPR Authentication Compliance Personal data 75

AIIM

JULY 24, 2018

You might also be interested in: The Re-Permissioning Dilemma Under GDPR. Data Privacy and Open Data: Secondary Uses under GDPR. Three Critical Steps for GDPR Compliance. GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law. What Do the GDPR and new Privacy Laws Mean for U.S.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

DLA Piper Privacy Matters

SEPTEMBER 15, 2021

By the end of the 2018, the Spanish Parliament belatedly completed the framework provided by EU’s GDPR approving a new Data Protection Act. Nevertheless, it decided to go a bit farther and to analyze whether the GDPR, the Spanish law developing it and data protection rights in general could be affected.

GDPR 130

GDPR Privacy Government Personal data 130

eSecurity Planet

AUGUST 9, 2022

And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR, the EU’s flagship data privacy and “right to be forgotten” regulation, has made the stakes of a data breach higher than ever. GDPR-style data privacy laws came to the U.S.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

IT Governance

JULY 18, 2018

Now that the EU GDPR (General Data Protection Regulation) has been in effect for a couple of months, you’ve hopefully become acquainted with its definition of personal data: “any information relating to an identified or identifiable natural person”. GDPR training. Certified EU GDPR Practitioner Training Course. Getting consent.

Personal data 74

Personal data GDPR Encryption Compliance 74

HL Chronicle of Data Protection

MAY 29, 2019

Following the one-year anniversary of the coming into effect of the GDPR, Hogan Lovells’ Privacy and Cybersecurity practice has prepared summaries of key GDPR-related developments of the past 12 months. The summaries cover regulatory guidance, enforcement actions, court proceedings, and various reports and materials.

GDPR 40

GDPR Personal data Privacy Information architecture 40

IT Governance

MAY 9, 2019

HMRC (HM Revenue and Customs) has been told to delete more than five million people’s voice records after it was discovered that the way the information was collected breached the GDPR (General Data Protection Regulation). The organisation changed the way it obtained consent in October 2018, which the ICO says now complies with the GDPR.

GDPR 53

GDPR Personal data Education Passwords 53

IT Governance

JUNE 25, 2018

We all know by now that, on 25 May 2018, the General Data Protection Regulation (GDPR) came into effect. The GDPR is not an IT issue. Despite the benefits of good data management, it was widely acknowledged that many organisations would not be GDPR-compliant on 25 May. GDPR c ompliance is not a choice .

Retail 71

Retail GDPR IT Compliance 71

DLA Piper Privacy Matters

OCTOBER 24, 2019

On 16 October 2019 – after weeks of rumors and speculations – the German data protection authorities (‘DPAs’) published their guidelines (‘ Guidelines’ ) for calculating administrative fines under Article 83 General Data Protection Regulation (‘ GDPR’ ). This is used to assign the undertaking to a specific size-category. 18 GDPR (i.e.

GDPR 40

GDPR Compliance Personal data IT 40

IT Governance

MAY 30, 2018

The EU General Data Protection Regulation (GDPR) is designed to harmonise data protection laws across the EU, but certain industries will have to respond differently in order to achieve compliance. A report published by research and consultancy company Celent highlights the challenges that the GDPR presents to insurers.

Insurance 49

Insurance GDPR Compliance Data collection 49

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. Specific categories defined as personal information include.

GDPR 79

GDPR Privacy Sales Data breaches 79

Hunton Privacy

DECEMBER 17, 2021

Federal Trade Commission model for anonymized data into an updated UK data protection regime, rather than rely on Recital 26 of the UK GDPR ( e.g. , a practical rather than theoretical approach). supports DCMS’ proposal to incorporate a test based on the U.S. supports DCMS’ proposal to incorporate a test based on the U.S.

GDPR 98

GDPR B2B Risk Government 98

DLA Piper Privacy Matters

OCTOBER 25, 2022

for violations of the GDPR (the violations were pre-Brexit). The ICO found that Interserve had failed to put appropriate technical and organisational measures in place to secure personal data (in contravention of Articles 5(1)(f) and 32 GDPR) for a period of ~20 months. The Incident. Digest of points to note in the MPN.

Security 52

Security GDPR Personal data Insurance 52

Data Protection Report

JANUARY 21, 2019

It follows two complaints filed as soon as the GDPR came into force by two consumer rights associations, None of Your Business and La Quadrature du Net. Retention periods were not included for some categories of data. The legal bases for ad personalisation were confusing and unclear. Reason for the size of the fine.

GDPR 40

GDPR Personal data Privacy Access 40

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. Specific categories defined as personal information include.

GDPR 60

GDPR Privacy Sales Data breaches 60

DLA Piper Privacy Matters

MAY 25, 2020

Just as the second anniversary of the GDPR was looming close, the Data Protection Ombudsman’s collegial body, responsible for determining administrative fines in Finland, issued administrative fines against three Finnish companies for their infringements of data protection laws. THREE ADMINISTRATIVE FINES ISSUED IN FINLAND. Going forward.

GDPR 52

GDPR IT Personal data Privacy 52

ARMA International

APRIL 18, 2022

These records are typically organized by grouping them by function or department and then described as either an individual record or grouped together into a record category. Countries and organizations within the European Union (EU), must comply with the requirements of the General Data Protection Regulation (GDPR) 1. 2 DLA Piper.

Personal data 100

Personal data GDPR Privacy Records Management 100

HL Chronicle of Data Protection

OCTOBER 3, 2018

As the most comprehensive privacy law to be enacted in the United States thus far, the California Consumer Privacy Act (CCPA) has inevitably invited comparisons to the European Union’s General Data Protection Regulation (GDPR). The GDPR and CCPA take different approaches to defining the types of entities that must comply with the law.

GDPR 55

GDPR Privacy Personal data Sales 55

Data Protection Report

FEBRUARY 28, 2018

In contrast to the Directive , the General Data Protection Regulation (the “ GDPR “) incorporates BCRs into legislation and sets out at Article 47 various conditions that must be met when relying on BCRs. 28 of GDPR. The updates draw attention to the following elements: Controllers. Processors. Data Protection Principles.

GDPR 40

GDPR Personal data Compliance IT 40

HL Chronicle of Data Protection

SEPTEMBER 27, 2017

Ensuring that the GDPR, as implemented by the bill, will continue to apply to the U.K. Data Protection Act 1998, the bill replicates much of the content of the 1998 Act, particularly in relation to derogations and exemptions from the GDPR. First and foremost, the bill applies the GDPR to U.K. after Brexit. domestic law.

GDPR 40

GDPR Personal data Government Privacy 40

The Schedule

FEBRUARY 28, 2020

As part of an ongoing series on General Data Protection Regulation (GDPR) , the RMS Steering Committee virtually met up with Anne Gilliland of the University of North Carolina to ask her questions regarding GDPR and records management. What are the risks of not being in compliance with GDPR for EU researchers in the United States?

GDPR 40

GDPR Communications Privacy Compliance 40

Hunton Privacy

OCTOBER 5, 2016

In September, the Centre for Information Policy Leadership (“CIPL”) held its second GDPR Workshop in Paris as part of its two-year GDPR Implementation Project. There was a sense of shared responsibility for the successful and timely implementation of the GDPR between industry, DPAs, national governments and the EU Commission.

GDPR 49

GDPR Risk IT Compliance 49

Data Matters

JUNE 5, 2021

The New SCCs take into account the Court of Justice of the European Union’s ( CJEU ) decision in Schrems II , requirements under the EU General Data Protection Regulation ( GDPR ), and according to the EC “address the realities faced by modern business”. However, their formulation (i.e.,

GDPR 117

GDPR Personal data IT Data breaches 117

DLA Piper Privacy Matters

MARCH 18, 2021

The VCDPA takes effect January 1, 2023 and is a broad, multi-rights privacy law that, in some ways, resembles the CCPA, GDPR, and other recently proposed state privacy legislation. Unlike the CCPA and GDPR, the VCDPA does not provide any of these rights to individuals acting in a commercial (e.g., Enforcement.

Personal data 59

Personal data Sales GDPR Privacy 59

Data Matters

NOVEMBER 4, 2020

Third, it creates a new category of businesses: those that voluntarily agree to be subject to the CCPA. Businesses familiar with GDPR will recognize the reference to automated decision-making, as Article 22 gives data subjects similar opt-out rights. The CPRA creates a new category of information called “sensitive personal information.”

Privacy 122

Privacy B2B Sales Data breaches 122

DLA Piper Privacy Matters

NOVEMBER 7, 2017

Less than 6 months remain for individuals and companies to get ready for the breakthrough regulation in personal data protection envisaged by the Regulation 2016/679 of 27 April 2016 [1] (furthermore as “ GDPR “). That provides a fair overview on how should the potential fine be calculated.

GDPR 45

GDPR Personal data Privacy Government 45

DLA Piper Privacy Matters

FEBRUARY 16, 2021

The Draft sets forth several modifications regarding metadata processing and subjects this category of data to specific obligations. To align with the GDPR, metadata collected for one purpose can be further processed for a compatible purpose. 6 (1)(b) GDPR added as an additional legal basis for processing metadata.

Metadata 86

Metadata GDPR IT Communications 86

HL Chronicle of Data Protection

OCTOBER 3, 2018

As the most comprehensive privacy law to be enacted in the United States thus far, the California Consumer Privacy Act (CCPA) has inevitably invited comparisons to the European Union’s General Data Protection Regulation (GDPR). The GDPR and CCPA take different approaches to defining the types of entities that must comply with the law.

GDPR 40

GDPR Privacy Personal data Sales 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

As the most comprehensive privacy law to be enacted in the United States thus far, the California Consumer Privacy Act (CCPA) has inevitably invited comparisons to the European Union’s General Data Protection Regulation (GDPR). The GDPR and CCPA take different approaches to defining the types of entities that must comply with the law.

GDPR 40

GDPR Privacy Personal data Sales 40

DLA Piper Privacy Matters

JUNE 29, 2018

With the General Data Protection Regulation (GDPR) having taken effect across the EU on 25 May 2018, this has meant a big change to the availability of WHOIS data (ie data recording – among other things – the persons who own domain names). By Claire Sng (Senior Associate, London) and John Wilks (Partner, London).

GDPR 55

GDPR Personal data Access Compliance 55