Remove category security-breach
article thumbnail

France: The CNIL publishes a practical guide on Data Protection Officers

DLA Piper Privacy Matters

The guide is in line with the Article 29 Working Party Guidelines on Data Protection Officers (WP 243 rev 01) , but provides additional insights and practical guidance to organizations that designate a DPO in respect of GDPR and French data protection act requirements. Be the point of contact on GDPR issues.

GDPR 116
article thumbnail

The Privacy Officers’ New Year’s Resolutions

Data Protection Report

Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs. Data retention is a rising trend in GDPR enforcement. Address the ghost of Christmas past!

Privacy 85
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

NEW TECH: This free tool can help gauge, manage third-party cyber risk; it’s called ‘VRMMM’

The Last Watchdog

Related: Atrium Health breach highlights third-party risks. And this continues to include enterprises that have poured a king’s ransom into hardening their first-party security posture. There is impetus for change – beyond the fear of sustaining a major data breach. Advancing best practices.

Risk 147
article thumbnail

How data breaches are affecting the retail industry

IT Governance

Data breaches. What steps will the ICO (Information Commissioner’s Office) take to ensure organisations comply with the recently enforced GDPR (General Data Protection Regulation)? How will customers, suppliers and partners react to organisations that suffer a breach? What is the cost of a data breach?

Retail 66
article thumbnail

The Privacy Officers’ New Year’s Resolutions

Data Protection Report

Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs. Data retention is a rising trend in GDPR enforcement. Address the ghost of Christmas past!

Privacy 52
article thumbnail

Schrems II: AG deems SCCs valid but comes up with difficult new obligations and expresses “doubts” over privacy shield

Data Protection Report

They need to examine the national security laws of the country of the data importer to determine whether they can in fact comply with the terms of SCCs. An export to jurisdictions with extensive national security surveillance regimes would be a substantial risk. However, the AG suggested new obligations for those using SCCs.

Privacy 40
article thumbnail

Schrems II: AG deems SCCs valid but comes up with difficult new obligations and expresses “doubts” over privacy shield

Data Protection Report

They need to examine the national security laws of the country of the data importer to determine whether they can in fact comply with the terms of SCCs. An export to jurisdictions with extensive national security surveillance regimes would be a substantial risk. However, the AG suggested new obligations for those using SCCs.

Privacy 40