IT Governance

MAY 29, 2018

Remember when I said last month that “with the GDPR less than a month away I imagine future lists will be even longer thanks to the introduction of mandatory data breach notifications”? Well, May’s list of incidents is very long, and the GDPR only came into effect at the end of the month. Data breach. I’m not, though.

Data breaches 89

Data breaches GDPR Ransomware Passwords 89

Data Matters

JUNE 9, 2021

Although the GP data collection was set to take place as of July 1, 2021, on June 8, 2021 it was announced that the launch will be postponed to September 1, 2021. Although, data shared with e.g., a pharmaceutical company for research purposes would be made in reliance on NHS Digital’s legitimate interests.

Healthcare 79

Healthcare Data collection Personal data GDPR 79

DLA Piper Privacy Matters

JANUARY 21, 2019

On 12 December 2018, the French Government issued an ordinance [1] finalizing, at the legislative level [2] , the alignment of the French Data Protection Law (“FDPL”) with the General Data Protection Regulation [3] (“GDPR”) and the Directive 2016/680 [4].

GDPR 49

GDPR Personal data Communications Government 49

IT Governance

DECEMBER 23, 2020

The credit reference agency sold personal data to political parties and organisations that used it to identify who could afford products and services. You can see more incidents from October in our list of data breaches and cyber attacks. This included guests’ full names, email addresses, phone numbers and credit card details.

Data breaches 97

Data breaches Ransomware Government GDPR 97

Collibra

AUGUST 4, 2020

Organizations are challenged every day to keep the personal data they hold safe across their entire ecosystem. They must also ensure that their partners, suppliers, and other third parties are also keeping the organization’s data safe. Target – $300 million, ~40 million customers, 2013. Regulatory fines.

Digital transformation 59

Digital transformation Data Privacy Privacy Metadata 59

Hunton Privacy

DECEMBER 14, 2020

While the provisions of Article 82 of the French Data Protection Act have remained unchanged, the CNIL revised its soft law instruments to take into account the strengthened consent requirements of the EU General Data Protection Regulation (“GDPR”). Inapplicability of the One-Stop-Shop Mechanism of the GDPR.

GDPR 102

GDPR Personal data Access IT 102

Data Protector

OCTOBER 11, 2017

What follows below is an edited version of the debate in the House of Lords of the Second Reading of the Data Protection Bill, held on 10 October. We welcome the Government’s proposal for an offence of knowingly or recklessly re-identifying de-identified personal data without the data controller’s consent.

GDPR 120

GDPR Personal data Government IT 120