IT Governance

JUNE 15, 2018

What is a lawful basis for processing under the GDPR? Do you always need individuals’ consent to process their data? Like the Data Protection Act 1998 (DPA 1998) that it superseded, the General Data Protection Regulation (GDPR) sets out six lawful bases for processing personal data.

GDPR 70

GDPR Personal data Compliance Privacy 70

ARMA International

APRIL 18, 2022

Introduction to Data Protection Laws. Data protection laws, regulations, and rules control the collection, use, transfer, and storage of personal and sensitive information. Personal data protection requirements may be issued by federal, state (provincial), or local governments.

Personal data 100

Personal data GDPR Privacy Records Management 100

Hunton Privacy

APRIL 30, 2019

The French Data Protection Authority (the “CNIL”) recently published its Annual Activity Report for 2018 (the “Report”) and released its annual inspection program for 2019. The Report provides an overview of the CNIL’s enforcement activities in 2018. The CNIL received 1,170 data breach notifications in 2018.

GDPR 48

GDPR Personal data Data breaches Marketing 48

Hunton Privacy

DECEMBER 17, 2020

On December 15, 2020, the Irish Data Protection Commission (“DPC”) announced its fine of €450,000 against Twitter International Company (“Twitter”), following its investigation into a breach resulting from a bug in Twitter’s design. The bug was discovered on December 26, 2018. Investigation and GDPR Dispute Resolution Procedure.

GDPR 72

GDPR Data breaches Personal data Compliance 72

HL Chronicle of Data Protection

MAY 29, 2019

Following the one-year anniversary of the coming into effect of the GDPR, Hogan Lovells’ Privacy and Cybersecurity practice has prepared summaries of key GDPR-related developments of the past 12 months. The summaries cover regulatory guidance, enforcement actions, court proceedings, and various reports and materials.

GDPR 40

GDPR Personal data Privacy Information architecture 40

Data Matters

DECEMBER 14, 2017

On 28 November 2017, the Article 29 Working Party (the “ WP29 ”) published detailed draft guidelines on consent under the EU General Data Protection Regulation (the “ GDPR ”), which is to come into effect on 25 May 2018. The Notion of Consent under the GDPR. The Requirements for Valid Consent.

GDPR 60

GDPR Personal data Compliance Marketing 60

Hunton Privacy

APRIL 20, 2020

On April 15, 2020, the French Data Protection Authority (the “CNIL”) published the final version of its standard (“Referential”) concerning the processing of personal data for core Human Resources (“HR”) management purposes. That Referential was adopted following a public consultation launched by the CNIL on April 11, 2019.

Personal data 71

Personal data GDPR Compliance Archiving 71

IT Governance

JUNE 29, 2018

This week, we discuss the apparent leak of 340 million data records, a vulnerability that exposed sensitive BetVictor data, a data breach affecting up to 40,000 Ticketmaster customers, and the number of GDPR complaints since 25 May. Hello and welcome to the IT Governance podcast for Friday, 29 June 2018.

GDPR 76

GDPR Passwords Data breaches Access 76

Preservica

MAY 1, 2018

Suite of new GDPR enhancements simplify classification, search and reporting for long-term personal data. Reporting : Dashboard or on-demand reports show the types of pre-classified personal data held within Preservica, further addressing records of processing requirements (Article 30).

GDPR 40

GDPR Digital preservation Metadata Personal data 40

Data Matters

JANUARY 2, 2018

This past year was marked by ever more significant data breaches, growing cybersecurity regulatory requirements at the state and federal levels and continued challenges in harmonizing international privacy and cybersecurity regulations. We expect each of these trends to continue in 2018. Data breach litigation risks.

Cybersecurity 68

Cybersecurity Privacy Data breaches GDPR 68

Hunton Privacy

OCTOBER 18, 2022

The Draft Guidance is primarily targeted at employers, and aims to help employers comply with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 (“DPA 18”), when monitoring their workforces.

GDPR 58

GDPR Personal data Compliance Access 58

Thales Cloud Protection & Licensing

AUGUST 2, 2019

The first piece of legislation, the General Data Protection Regulation (GDPR) 1 , regulates data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). Governing the transfer of data. On February 6, the UK government published “Using personal data after Brexit” 9.

Cybersecurity 117

Cybersecurity Personal data Data breaches GDPR 117

Hunton Privacy

JULY 13, 2020

The AG also raised concerns regarding the Privacy Shield, an alternative mechanism for transferring personal data from the EU to the U.S. The AG also raised concerns regarding the Privacy Shield, an alternative mechanism for transferring personal data from the EU to the U.S. and to numerous other jurisdictions.

Personal data 88

Personal data Privacy GDPR Risk 88

Hunton Privacy

DECEMBER 3, 2018

On November 29, 2018, the French Data Protection Authority (the “CNIL”) launched an online public consultation regarding two new CNIL draft standards (“Referentials”) concerning the processing of personal data to manage (1) business activities and (2) unpaid invoices. . Background.

GDPR 81

GDPR Personal data Insurance Education 81

IT Governance

DECEMBER 13, 2018

Hello and welcome to the final IT Governance podcast of 2018. And then there was the Cambridge Analytica scandal , which broke when the former employee and whistle-blower Christopher Wylie revealed to the Guardian that the political consulting firm had harvested 50 million Facebook users’ personal data and used it for political purposes.

Data breaches 71

Data breaches Personal data Access GDPR 71

DLA Piper Privacy Matters

JUNE 23, 2020

The CNIL assessment that Google did not collect a valid consent for ads personalization and does not comply with the transparency and information requirements set forth in Article 12 and 13 of the GDPR are not legally grounded (2). of the GDPR. This decision is one of the highest sanctions in Europe to date.

GDPR 86

GDPR Personal data Access IT 86

DLA Piper Privacy Matters

APRIL 24, 2020

On 11 March 2020, the ICO brought its first successful conviction under the Freedom of Information Act 2000 (“ FOIA ”). Parallels with the Data Protection Act 2018. It is not clear why this is the case or should be the case in this context but not for the personal data equivalent. Facts of the matter.

FOIA 66

FOIA Personal data GDPR Access 66

Hunton Privacy

APRIL 15, 2019

On April 11, 2019, the French Data Protection Authority (the “CNIL”) launched an online public consultation regarding two new CNIL draft standards (“Referentials”) concerning the processing of personal data for (1) core HR management purposes and (2) the operation of a whistleblowing hotline. Background.

Personal data 54

Personal data GDPR Big data Risk 54

DLA Piper Privacy Matters

MAY 14, 2018

When the General Data Protection Regulation (GDPR) takes effect across the EU on 25 May 2018, large amounts of WHOIS data will no longer be publicly available. However, ICANN has estimated this might not be operational until December 2018. By John Wilks , Ruth Hoy , Claire Sng, and Kelsey Rose.

GDPR 53

GDPR Access Government Archiving 53

DLA Piper Privacy Matters

JANUARY 21, 2019

On 12 December 2018, the French Government issued an ordinance [1] finalizing, at the legislative level [2] , the alignment of the French Data Protection Law (“FDPL”) with the General Data Protection Regulation [3] (“GDPR”) and the Directive 2016/680 [4]. Article 32 of the French Law No.

GDPR 49

GDPR Personal data Communications Government 49

Data Protection Report

JULY 9, 2018

states have recently introduced and passed legislation to expand data breach notification rules and to mirror some of the protections provided by Europe’s newly enacted General Data Protection Regulation (“GDPR”). See our previous blog posts on GDPR here and here. On the security front, as of March 2018, all 50 U.S.

GDPR 40

GDPR Data breaches Personal data Insurance 40

IT Governance

JUNE 27, 2019

After a rampant start to the year for data breaches and cyber attacks, it’s about time we went one month without at least one massive security incident. June 2019’s total of 39,713,046 breached records is the lowest since May last year – the month that the GDPR (General Data Protection Regulation) came into effect. Ransomware.

Data breaches 111

Data breaches Personal data Ransomware GDPR 111

Data Protection Report

MARCH 5, 2018

On February 12, 2018, the Article 29 Working Party (WP29) published guidance regarding Article 49 of the General Data Protection Regulation (GDPR) for public comment. The deadline for submitting comments on the draft is March 26, 2018, and responses should be emailed to JUST-ARTICLE29WP-SEC@ec.europa.eu. the U.S.);

GDPR 40

GDPR Personal data e-Discovery Risk 40

HL Chronicle of Data Protection

JUNE 14, 2019

The California Consumer Privacy Act of 2018 (CCPA) has been described as groundbreaking, watershed, and unprecedented since its passage on June 28, 2018. As the first broad-based state law on consumers’ personal data in the U.S., We hope you can join us for a discussion with Mark Brennan and Bret Cohen. Time: 2:00 p.m.

Privacy 40

Privacy GDPR Compliance Financial Services 40

IT Governance

DECEMBER 30, 2019

The second half of the year began with major data privacy news: the UK’s data protection authority, the ICO (Information Commissioner’s Office), announced its intention to fine British Airways and Marriott International a combined £282.6 million for breaching the GDPR (General Data Protection Regulation). million (£4.2

Data breaches 78

Data breaches Personal data GDPR Ransomware 78

Hunton Privacy

MAY 1, 2018

On April 11, 2018, the Article 29 Working Party (the “Working Party”) adopted two Recommendations on the Standard Application for Approval of Data Controller or Processor Binding Corporate Rules for the Transfer of Personal Data (the “Recommendations”).

GDPR 49

GDPR Personal data 49

Hunton Privacy

APRIL 26, 2019

Given the extraterritorial reach of the UK Data Protection Act 2018, organizations based outside of the UK may be subject to the code, which is expected to take effect by the end of 2019. Generalized data sharing for the purposes of commercial reuse is unlikely to meet this standard.

Personal data 60

Personal data Privacy GDPR Access 60

DLA Piper Privacy Matters

APRIL 1, 2020

In 2018, the Court of Appeal upheld the High Court’s finding that Morrisons had not breached its primary duties owed to its staff as a data controller under the DPA, but that it was vicariously liable for the criminal actions of Mr Skelton. Implications for employers.

Data breaches 59

Data breaches GDPR Personal data Information governance 59

Thales Cloud Protection & Licensing

NOVEMBER 26, 2018

Six months on from the legal implementation of the General Data Protection Regulation (GDPR), a third of consumers have admitted they still aren’t confident that the companies they interact with comply with the regulation. A quarter (25%) of people in both regions revealed that they could not explain the GDPR in any way.

GDPR 82

GDPR Data breaches Retail Manufacturing 82

Hunton Privacy

DECEMBER 16, 2019

On December 10, 2019, the French Data Protection Authority (the “CNIL”) published the final version of its standard (“Referential”) concerning the processing of personal data in the context of whistleblowing hotlines. The Referential sets a single set of data protection rules that cover all these whistleblowing systems.

Personal data 49

Personal data GDPR Compliance Privacy 49

Data Protection Report

FEBRUARY 27, 2019

On January 21, 2019, in one of the largest privacy fines announced globally, the French National Data Protection Commission (CNIL) imposed a €50 million penalty against a tech giant for violation of the General Data Protection Regulation (GDPR). For example, the American Data Dissemination Act (S.

Data Privacy 40

Data Privacy GDPR Privacy Risk 40

eDiscovery Daily

JANUARY 30, 2018

The Legaltech Judges Panel returns for 2018 to examine critical issues in ESI: Rule 34(b) Implications: why are courts still struggling with lawyers who don’t know the rules have changed and why lawyers are still struggling with “reasonable time specified to respond”. 2018 Global Discovery: International Compliance in the Cloud.

e-Discovery 34

e-Discovery Artificial Intelligence GDPR Education 34

HL Chronicle of Data Protection

JANUARY 22, 2018

A discussion paper from the Bulgarian Presidency of the Council dated 11 January 2018 (the Paper ) shows that the Council is still considering multiple options in relation to several critical issues. In situations where the processing would be permitted under the GDPR. Is the GDPR Inadequate?

IoT 40

IoT Privacy GDPR Communications 40

Data Matters

APRIL 20, 2020

While it was unnecessary for the Supreme Court to decide the point given its finding on vicarious liability, the Court also concluded that the provisions of the DPA, which impose statutory liability on a data controller, do not exclude the imposition of common law vicarious liability. 1 [2016] UKSC 11. 2 [2002] UKHL 48.

Data breaches 68

Data breaches GDPR Privacy IT 68

Privacy and Cybersecurity Law

AUGUST 1, 2018

The Information Commissioner’s Office have released their Annual Report for 2018. The ICO has taken decisive action on nuisance calls and misuse of personal data. The ICO began investigation of over 30 organisations in relation to use of personal data and analytics for political campaigns. Key Guides.

GDPR 40

GDPR Data breaches Personal data Privacy 40

IT Governance

JANUARY 10, 2019

This week, we discuss a high-profile German data breach, the top worst passwords of 2018, the resignation of NHS Digital’s CISO, and Microsoft’s latest patches. Hello and welcome to the first IT Governance podcast of 2019 – for Friday, 11 January. The top ten worst passwords of 2018 were, counting down from ten to one: 10.

Data breaches 77

Data breaches Passwords GDPR Personal data 77

IT Governance

AUGUST 21, 2018

What steps will the ICO (Information Commissioner’s Office) take to ensure organisations comply with the recently enforced GDPR (General Data Protection Regulation)? This short video breaks down the numbers relating to the UK-specific cyber attacks and data breaches of 2017. What is the cost of a data breach? The PCI DSS.

Retail 66

Retail Data breaches GDPR Compliance 66