IT Governance

NOVEMBER 28, 2018

The data breach notification requirements of the EU GDPR (General Data Protection Regulation) are complicated, so it’s no surprise that many organisations aren’t sure what they’re supposed to be doing. A data breach is any event in which the confidentiality, integrity and availability of information is compromised.

Data breaches 85

Data breaches GDPR Personal data Compliance 85

IT Governance

OCTOBER 15, 2019

Any organisation that’s required to comply with the GDPR (General Data Protection Regulation) must conduct regular risk assessments. However, the GDPR is clear that data is also vulnerable to accidental or unlawful destruction, loss or disclosure. The GDPR risk assessment methodology. Get started with vsRisk.

GDPR 71

GDPR Risk Compliance Personal data 71

Hunton Privacy

JUNE 4, 2021

On June 4, 2021, the European Commission published the final version of the implementing decision on standard contractual clauses for transfers of personal data to third countries under the EU General Data Protection Regulation (“GDPR”), as well as the final version of the new standard contractual clauses (the “SCCs”).

Personal data 105

Personal data GDPR Government Access 105

IT Governance

JUNE 25, 2018

We all know by now that, on 25 May 2018, the General Data Protection Regulation (GDPR) came into effect. The GDPR is not an IT issue. Despite the benefits of good data management, it was widely acknowledged that many organisations would not be GDPR-compliant on 25 May. GDPR c ompliance is not a choice .

Retail 71

Retail GDPR IT Compliance 71

Hunton Privacy

MARCH 17, 2017

On March 15, 2017, the French data protection authority (the “CNIL”) published a six step methodology and tools for businesses to prepare for the EU General Data Protection Regulation (“GDPR”) that will become applicable on May 25, 2018. This will allow them to be one step ahead and better organized to comply with the upcoming GDPR.

GDPR 75

GDPR Personal data Compliance Privacy 75

DLA Piper Privacy Matters

SEPTEMBER 10, 2018

Italian privacy law integrating the GDPR is finally in place, but a number of provisions remain unclear, but need immediate action. The Italian Privacy Code changes after the GDPR. The result is a very confusing text which inevitably cannot be 100% aligned to the GDPR and might contain mistakes.

GDPR 49

GDPR Privacy Compliance Marketing 49

Hunton Privacy

NOVEMBER 13, 2020

On November 12, 2020, the European Commission published a draft implementing decision on standard contractual clauses for the transfer of personal data to third countries pursuant to the EU General Data Protection Regulation (“GDPR”), along with its draft set of new standard contractual clauses (the “SCCs”). Key Takeaways.

Personal data 105

Personal data GDPR Data collection Access 105

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. Specific categories defined as personal information include.

GDPR 79

GDPR Privacy Sales Data breaches 79

The Last Watchdog

OCTOBER 19, 2020

They are responding to a trend of companies moving to meet rising compliance requirements, such as PCI-DSS and GDPR. Until CyberXchange, there was no easy way for IT buyers to shop for a security product or service mapped to thousands of categories and compliance requirements. The vendors are well-intentioned.

Cybersecurity 235

Cybersecurity B2B Sales Compliance 235

Hunton Privacy

DECEMBER 20, 2017

The Guidelines aim to provide practical guidance and clarification on the transparency obligations introduced by the EU General Data Protection Regulation (“GDPR”). This means controllers that attempt to hide processing information in the middle of wider terms and conditions will be in breach of the GDPR.

GDPR 62

GDPR Personal data Privacy Communications 62

CILIP

FEBRUARY 1, 2024

Specifically, the ICO states that General Data Protection Regulations (GDPR) create specific requirements around the provision of information about and the explanation of AI-assisted decisions. As a result, many organisations are operating with a significant degree of risk in the impact of AI on their compliance with GDPR.

Artificial Intelligence 52

Artificial Intelligence Libraries GDPR Risk 52

DLA Piper Privacy Matters

NOVEMBER 29, 2021

The guide is in line with the Article 29 Working Party Guidelines on Data Protection Officers (WP 243 rev 01) , but provides additional insights and practical guidance to organizations that designate a DPO in respect of GDPR and French data protection act requirements. Be the point of contact on GDPR issues.

GDPR 116

GDPR Compliance Personal data Communications 116

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. Specific categories defined as personal information include.

GDPR 60

GDPR Privacy Sales Data breaches 60

Data Matters

JUNE 5, 2021

The New SCCs take into account the Court of Justice of the European Union’s ( CJEU ) decision in Schrems II , requirements under the EU General Data Protection Regulation ( GDPR ), and according to the EC “address the realities faced by modern business”. However, their formulation (i.e.,

GDPR 117

GDPR Personal data IT Data breaches 117

Hunton Privacy

MARCH 26, 2019

The Dutch DPA divided qualifying infringements into three or four categories. It assigned each category a specific penalty bandwidth ( i.e. , a range between a minimum fine and a maximum fine), as well as a basic fine. The Policy provides insight into how the Dutch DPA will use its fining powers.

GDPR 55

GDPR Personal data Authentication Compliance 55

DLA Piper Privacy Matters

FEBRUARY 7, 2019

Given the potential financial exposure under GDPR, it is no surprise that a great deal of time is being spent working out how to allocate the risk and liability when negotiating commercial contracts. Before we look at limiting liability, we need to first consider how liability can arise in the first place in the context of GDPR.

GDPR 49

GDPR Risk Data breaches Personal data 49

eSecurity Planet

SEPTEMBER 23, 2022

Therefore, we should examine each category and consider what the rules fundamentally request. These incidents will typically be measured in financial terms; however, Europe’s GDPR and the U.S. In the event of a breach, the last thing the tech team will want to do is figure out how to make a report.

Cybersecurity 130

Cybersecurity Compliance Risk Communications 130

ARMA International

APRIL 18, 2022

These records are typically organized by grouping them by function or department and then described as either an individual record or grouped together into a record category. Countries and organizations within the European Union (EU), must comply with the requirements of the General Data Protection Regulation (GDPR) 1. 2 DLA Piper.

Personal data 100

Personal data GDPR Privacy Records Management 100

DLA Piper Privacy Matters

APRIL 9, 2018

Italian companies can now rely on guidelines on how to comply with the European privacy regulation (GDPR) which unvail some interesting positions. . health related data that are now incorporated in the broader “ special ” category of data) and to the processing based on automated decision making, including profiling.

GDPR 40

GDPR Personal data Privacy Data breaches 40

IT Governance

NOVEMBER 17, 2020

Under the GDPR (General Data Protection Regulation) , all personal data breaches must be recorded by the organisation and there should be a clear and defined process for doing so. The ICO defines a personal data breach as any event that results in. What constitutes a personal data breach. When must breaches be reported?

Personal data 105

Personal data Data breaches Data collection GDPR 105

Data Matters

JANUARY 17, 2019

Under Article 64(1) of the GDPR, where a Member State data protection authority (DPA) intends to adopt a list of processing operations which require a DPIA, the DPA must submit the draft list to the EDPB. The EDPB also requested refinement of references to DPIAs in the event of employee monitoring.

GDPR 90

GDPR Personal data Risk Privacy 90

Data Protection Report

JUNE 7, 2021

In particular, the New SCCs now helpfully provide for processor-to-processor transfers; (b) give the clauses a GDPR ‘face lift’, including to update cross references to legislation and to ensure alignment with the requirements of the GDPR; and. (c) Instead, they can provide details of the “recipients or categories of recipients”.

Personal data 119

Personal data GDPR Data breaches Access 119

IT Governance

NOVEMBER 23, 2018

They are a useful accountability tool: the results of a DPIA will help you demonstrate that you have taken the appropriate technical and organisational measures required by the GDPR (General Data Protection Regulation). Data controllers are responsible for conducting DPIAs as required by Article 35 of the GDPR.

GDPR 67

GDPR Personal data Risk Marketing 67

ARMA International

JUNE 19, 2023

For example, if the time for a record starts when a record is created, received, or when an easy-to-define event occurs, then IT can automatically start a clock for electronic record disposition. Examples of this include “final disposition,” “resolution,” or “obsolete” event codes. This would include data.

Records Management 97

Records Management Compliance Privacy IT 97

Data Matters

NOVEMBER 4, 2020

Third, it creates a new category of businesses: those that voluntarily agree to be subject to the CCPA. Businesses familiar with GDPR will recognize the reference to automated decision-making, as Article 22 gives data subjects similar opt-out rights. The CPRA creates a new category of information called “sensitive personal information.”

Privacy 122

Privacy B2B Sales Data breaches 122

IT Governance

OCTOBER 6, 2020

It’s a specific type of data breach, falling into the ‘availability’ category of data security (the other two categories being ‘confidentiality’ and ‘integrity’). There are several types of data loss, which can be separated into four categories. Data loss refers to the destruction of sensitive information. What causes data loss?

IT 98

IT Computer and Electronics Data breaches Risk 98

Hunton Privacy

JANUARY 26, 2022

The definition of “data handler” under the Draft Regulations is similar to that of “data controller” in other privacy laws, such as the EU General Data Protection Regulation (“GDPR”). Data Breach.

Security 116

Security Data breaches Personal data Cybersecurity 116

DLA Piper Privacy Matters

JUNE 27, 2022

224 of June 9, 2022 , the Italian data protection authority found that transfers of personal data to the United States by an Italian website through the use of Google Analytics violates the GDPR. the absence of special categories of personal data and the negligent conduct undertaken. In Order No. The disputed facts.

Personal data 98

Personal data Analytics GDPR Privacy 98

DLA Piper Privacy Matters

DECEMBER 3, 2021

Reassuringly, the PDPL does not contain any major divergences from other well-known data protection regimes, including the GDPR. Notably, there is no broad “legitimate interests” style lawful basis for processing, as is found in the GDPR. issue guidance and instructions in relation to the PDPL.

Personal data 105

Personal data Data breaches GDPR Compliance 105

DLA Piper Privacy Matters

AUGUST 27, 2020

According to the CJEU, the SCC in principle are still valid but must safeguard a level of protection to individuals whose personal data is transferred essentially equivalent to that guaranteed by the EU General Data Protection Regulation (“GDPR”). encryption, agreement that data will be hosted in a country where GDPR applies).

Personal data 105

Personal data GDPR Encryption Privacy 105

Data Matters

AUGUST 9, 2019

It will therefore be important for organisations to take the guidance contained in this Draft Code, once finalized, into account, as a method of helping to demonstrate compliance with the GDPR. whistleblowing). These considerations will also apply in an M&A context (e.g.,

GDPR 79

GDPR Personal data Compliance Privacy 79

HL Chronicle of Data Protection

APRIL 21, 2020

When the GDPR became effective, the CNIL’s previous set of HR Data guidelines became out of date as they did not incorporate the new law’s requirements ( e.g. obligations relating to records of processing activities and Data Protection Impact Assessments). Categories of personal data.

Personal data 133

Personal data GDPR Big data Compliance 133

DLA Piper Privacy Matters

SEPTEMBER 4, 2020

However, the Guidelines do not include the retention period applicable to each category of data processed. Organization of data retention to comply with GDPR requirements is known as one of the most burdensome and complex task to achieve. Scope of application. The CNIL’s Guidelines and Data Retention Standards are thus very welcome.

Personal data 95

Personal data Archiving GDPR Government 95

Data Matters

NOVEMBER 13, 2020

In relation to special categories of personal data (e.g., The draft SCCs are intended to also satisfy the requirements of Article 28(3) of the GDPR (i.e., a Master Services Agreement), but provide that in the event of a conflict, the SCCs shall prevail.

Personal data 68

Personal data GDPR Privacy Compliance 68

DLA Piper Privacy Matters

JULY 23, 2019

1. Application of the GDPR. Note however that if relying on consent, this must meet the GDPR standard. Entering a marked monitored area is unlikely constitute a statement or a clear affirmative action needed for consent, unless it meets the criteria of Articles 4 and 7 of the GDPR.

Personal data 40

Personal data GDPR Access Marketing 40

DLA Piper Privacy Matters

OCTOBER 10, 2022

For example, the ML system could be used to determine likely trends of categories of persons to default on loan agreements through the processing of financial default information. The General Data Protection Regulation (“ GDPR ”) requires that processing of personal data be proportionate to its purpose.

Personal data 98

Personal data GDPR Privacy Marketing 98

DLA Piper Privacy Matters

NOVEMBER 19, 2018

the processing is listed in the CNIL’s list of categories of processing operations for which no DPIA is required in accordance with Article 35 (5) of the GDPR and after the opinion of the European Data Protection Board (the EDPB) has been received (in that respect, such list has not been established by the CNIL yet.

Data Privacy 40

Data Privacy IT GDPR Privacy 40