DLA Piper Privacy Matters

NOVEMBER 24, 2020

Background: How to calculate GDPR fines? How to properly calculate administrative fines for non-compliance with the EU General Data Protection Regulation (‘ GDPR ’) is one of the most important questions when applying the GDPR on practical level, e.g. : What is actually meant by the reference to “undertaking” in Article 83 (4) to (6) GDPR?

GDPR 75

GDPR Authentication Compliance Personal data 75

Security Affairs

NOVEMBER 28, 2022

On April 3rd, 2021, a user leaked the phone numbers and personal data of 533 million Facebook users in a hacking forum for free online. The availability of the data was first reported by Alon Gal, CTO of cyber intelligence firm Hudson Rock. ” reported the WSJ. ” continues the press release.

GDPR 90

GDPR Personal data Compliance Privacy 90

Hunton Privacy

DECEMBER 17, 2020

On December 15, 2020, the Irish Data Protection Commission (“DPC”) announced its fine of €450,000 against Twitter International Company (“Twitter”), following its investigation into a breach resulting from a bug in Twitter’s design. Investigation and GDPR Dispute Resolution Procedure. based organization.

GDPR 72

GDPR Data breaches Personal data Compliance 72

Hunton Privacy

APRIL 30, 2019

The French Data Protection Authority (the “CNIL”) recently published its Annual Activity Report for 2018 (the “Report”) and released its annual inspection program for 2019. Of the 11,077 complaints received by the CNIL in 2018, approximately 20 percent are the subject of cooperation between EU data protection authorities.

GDPR 48

GDPR Personal data Data breaches Marketing 48

IT Governance

DECEMBER 27, 2019

A royal baby, a fire at Notre-Dame, the highest grossing film of all time and more than 12 billion breached data records: 2019 has been quite a year. IT Governance is closing out the year by rounding up 2019’s biggest information security stories. Mumsnet disclosed a data breach affecting 4,000 people. million (£4.2

Data breaches 69

Data breaches GDPR Passwords Personal data 69

HL Chronicle of Data Protection

MAY 29, 2019

Following the one-year anniversary of the coming into effect of the GDPR, Hogan Lovells’ Privacy and Cybersecurity practice has prepared summaries of key GDPR-related developments of the past 12 months. The summaries cover regulatory guidance, enforcement actions, court proceedings, and various reports and materials.

GDPR 40

GDPR Personal data Privacy Information architecture 40

DLA Piper Privacy Matters

JUNE 23, 2020

The CNIL assessment that Google did not collect a valid consent for ads personalization and does not comply with the transparency and information requirements set forth in Article 12 and 13 of the GDPR are not legally grounded (2). of the GDPR. This decision is one of the highest sanctions in Europe to date.

GDPR 86

GDPR Personal data Access IT 86

Hunton Privacy

APRIL 20, 2020

On April 15, 2020, the French Data Protection Authority (the “CNIL”) published the final version of its standard (“Referential”) concerning the processing of personal data for core Human Resources (“HR”) management purposes. That Referential was adopted following a public consultation launched by the CNIL on April 11, 2019.

Personal data 71

Personal data GDPR Compliance Archiving 71

Data Protection Report

FEBRUARY 27, 2019

EU and US regulators continue to increase the stakes for data privacy enforcement. On January 21, 2019, in one of the largest privacy fines announced globally, the French National Data Protection Commission (CNIL) imposed a €50 million penalty against a tech giant for violation of the General Data Protection Regulation (GDPR).

Data Privacy 40

Data Privacy GDPR Privacy Risk 40

Hunton Privacy

JULY 13, 2020

The AG also raised concerns regarding the Privacy Shield, an alternative mechanism for transferring personal data from the EU to the U.S. The AG also raised concerns regarding the Privacy Shield, an alternative mechanism for transferring personal data from the EU to the U.S. and to numerous other jurisdictions.

Personal data 88

Personal data Privacy GDPR Risk 88

Hunton Privacy

OCTOBER 21, 2019

On October 4, 2019, the Presidency of the European Council published its revised text (the “Revised Draft”) of the Proposal for a Regulation Concerning the Respect for Private Life and the Protection of Personal Data in Electronic Communications (the “Draft ePrivacy Regulation”).

GDPR 58

GDPR Personal data Data collection Sales 58

Hunton Privacy

APRIL 15, 2019

On April 11, 2019, the French Data Protection Authority (the “CNIL”) launched an online public consultation regarding two new CNIL draft standards (“Referentials”) concerning the processing of personal data for (1) core HR management purposes and (2) the operation of a whistleblowing hotline. Background.

Personal data 54

Personal data GDPR Big data Risk 54

Hunton Privacy

DECEMBER 13, 2019

On December 11, 2019, the European Data Protection Board (“EDPB”) published its draft guidelines 5/2019 (the “Guidelines”) on the criteria of the right to be forgotten in search engine cases under the EU General Data Protection Regulation (“GDPR”).

Personal data 61

Personal data GDPR Privacy IT 61

Hunton Privacy

DECEMBER 3, 2018

On November 29, 2018, the French Data Protection Authority (the “CNIL”) launched an online public consultation regarding two new CNIL draft standards (“Referentials”) concerning the processing of personal data to manage (1) business activities and (2) unpaid invoices. . Background.

GDPR 81

GDPR Personal data Insurance Education 81

Hunton Privacy

NOVEMBER 22, 2019

On November 13, 2019, the European Data Protection Board (“EDPB”) published its draft guidelines 4/2019 (the “Guidelines”) on the obligation of Data Protection by Design and by Default (“DPbDD”) set out under Article 25 of the EU General Data Protection Regulation (“GDPR”). on how to handle personal data.

Personal data 50

Personal data GDPR Compliance Risk 50

Hunton Privacy

JULY 16, 2020

In its judgment, the CJEU concluded that the Standard Contractual Clauses (the “SCCs”) issued by the European Commission for the transfer of personal data to data processors established outside of the EU are valid. A key concern was that EU personal data might be at risk of being accessed and processed by the U.S.

Privacy 108

Privacy Personal data GDPR Access 108

DLA Piper Privacy Matters

JANUARY 21, 2019

On 12 December 2018, the French Government issued an ordinance [1] finalizing, at the legislative level [2] , the alignment of the French Data Protection Law (“FDPL”) with the General Data Protection Regulation [3] (“GDPR”) and the Directive 2016/680 [4].

GDPR 49

GDPR Personal data Communications Government 49

Hunton Privacy

DECEMBER 16, 2019

On December 10, 2019, the French Data Protection Authority (the “CNIL”) published the final version of its standard (“Referential”) concerning the processing of personal data in the context of whistleblowing hotlines. Main Changes in the Referential on Whistleblowing Hotlines.

Personal data 49

Personal data GDPR Compliance Privacy 49

IT Governance

JANUARY 10, 2019

This week, we discuss a high-profile German data breach, the top worst passwords of 2018, the resignation of NHS Digital’s CISO, and Microsoft’s latest patches. Hello and welcome to the first IT Governance podcast of 2019 – for Friday, 11 January. So, without further ado, let’s crack on with what’s happened so far in 2019.

Data breaches 77

Data breaches Passwords GDPR Personal data 77

DLA Piper Privacy Matters

MARCH 4, 2021

In its second full year overseeing and regulating the GDPR in Ireland, the Data Protection Commission ( DPC ) has published its 2020 Annual Report , highlighting key observations, emerging guidance, and large scale inquiries and decisions of 2020. Around 60% of the data breaches notified occurred in the private sector.

GDPR 105

GDPR Compliance Data breaches Marketing 105

DLA Piper Privacy Matters

APRIL 12, 2019

On 11 April 2019, the French Data Protection Supervisory Authority (CNIL) published two draft standards intending to provide practical guidance in relation to the processing of personal data for HR management and whistleblowing systems. By Denise Lebeau-Marianna and Caroline Chancé.

Personal data 45

Personal data Compliance GDPR IT 45

Hunton Privacy

APRIL 26, 2019

On April 15, 2019, the UK Information Commissioner’s Office (the “ICO”) issued for public consultation a draft code of practice , “Age Appropriate Design,” that will regulate the provision of online services likely to be accessed by children in the UK. The deadline for responding to the public consultation is May 31, 2019.

Personal data 60

Personal data Privacy GDPR Access 60

HL Chronicle of Data Protection

JUNE 14, 2019

As the first broad-based state law on consumers’ personal data in the U.S., Date: Wednesday, June 19, 2019. The California Consumer Privacy Act of 2018 (CCPA) has been described as groundbreaking, watershed, and unprecedented since its passage on June 28, 2018. Time: 2:00 p.m. EST. 1:00 p.m.

Privacy 40

Privacy GDPR Compliance Financial Services 40

IT Governance

DECEMBER 21, 2023

Note that this data set only accounts for personal data breaches reported to the ICO, so it only reflects breaches affecting UK residents that were not just discovered, but also reported. At the time of writing, the data set starts in Q2 2019 and goes up to Q2 2023. This isn’t too surprising.

Data breaches 52

Data breaches Personal data Government GDPR 52

Data Protection Report

JULY 9, 2018

states have recently introduced and passed legislation to expand data breach notification rules and to mirror some of the protections provided by Europe’s newly enacted General Data Protection Regulation (“GDPR”). See our previous blog posts on GDPR here and here. Under the law, “covered entities,” defined as “a person [.]

GDPR 40

GDPR Data breaches Personal data Insurance 40

Hunton Privacy

MARCH 26, 2019

On March 14, 2019, the Dutch Data Protection Authority ( Autoriteit Persoonsgegevens , the “Dutch DPA”) published a press release announcing its policy (in Dutch ) for calculating administrative fines (the “Policy”). The Policy provides insight into how the Dutch DPA will use its fining powers.

GDPR 55

GDPR Personal data Authentication Compliance 55

Hunton Privacy

JULY 11, 2019

His comments follow an ICO report on adtech released in June 2019, that warned of increased focus on this sector by the regulator, particularly with regards to the real-time bidding component of digital advertising. McDougall stated: “The need for explicit consent for processing special category data in real-time bidding is unambiguous.

GDPR 55

GDPR Marketing Personal data Compliance 55

HL Chronicle of Data Protection

JUNE 13, 2019

A week later, on 9 July, the CJEU will hear arguments in Schrems II , in which the Irish High Court has referred 11 questions relating to whether the European Commission’s Standard Contractual Clauses (SCCs) provide an adequate level of protection for personal data which is transferred to the US.

Privacy 40

Privacy Personal data GDPR Government 40

DLA Piper Privacy Matters

APRIL 24, 2020

On 11 March 2020, the ICO brought its first successful conviction under the Freedom of Information Act 2000 (“ FOIA ”). A similar offence did not exist under the old regime (the 1998 version of the DPA) and was part of a general drive to bolster data subject rights as also established under the terms of the GDPR.

FOIA 66

FOIA Personal data GDPR Access 66

DLA Piper Privacy Matters

JULY 24, 2019

The French Data Protection Supervisory Authority (CNIL) has finally decided to replace its recommendations of 2013 which were no more compliant with the GDPR, by new guidelines. The guidelines clarify the fact that Article 82 of the Data Protection Act apply regardless of the fact that the data involved are personal data or not.

GDPR 40

GDPR Computer and Electronics Marketing Communications 40

Thales Cloud Protection & Licensing

FEBRUARY 24, 2020

Today, half (50%) of all corporate data is stored in the cloud and nearly half (48%) of that data is considered sensitive (everything from intellectual property to employee, financial or personal data). Whatever the nature of the data stored in the cloud, it needs to be secured.

Digital transformation 79

Digital transformation Cloud Encryption Security 79

CGI

AUGUST 7, 2018

Tue, 08/07/2018 - 11:16. While for some GDPR was BAU, others a huge effort, and a bit of a panic for a minority, one of the most significant outcomes is the perception that cyber security is no longer just ‘an IT thing’. Those who have embraced GDPR have probably established privacy by design as an inherent part of their business.

Privacy 40

Privacy GDPR Unstructured data Marketing 40

HL Chronicle of Data Protection

JUNE 13, 2019

On May 28, 2019, the Cyberspace Administration of China (“ CAC “) released the draft Measures on the Administration of Data Security (“ Data Security Measures ” see our in-house English translation here ) for public consultation. Requirements for personal data collection statements.

Personal data 40

Personal data IT Data collection Compliance 40

HL Chronicle of Data Protection

SEPTEMBER 18, 2018

Unless there is a political earthquake (some would say a miracle) Brexit will happen on 29 March 2019. This is a serious concern because transfers of personal data from the EU to third countries are severely restricted. Many fear a hard Brexit. Some are hoping for a hard Brexit. A majority appear to want a soft Brexit.

GDPR 40

GDPR Personal data Privacy Government 40

Data Protector

OCTOBER 11, 2017

We want businesses to ensure that their customers and future customers have consented to having their personal data processed, but we also need to ensure that the enormous potential for new data rights and freedoms does not open us up to new threats. This is “Hamlet” without the prince.

GDPR 120

GDPR Personal data Government IT 120

IT Governance

JANUARY 30, 2024

Data breached: 2 PB. Mobile network database breach exposes 750 million Indians’ personal data The Indian security company CloudSEK claims to have found the personal data of 750 million Indians for sale on an “underground forum”. Data breached: 750 million victims’ personal data.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

Privacy and Cybersecurity Law

JUNE 23, 2021

On June 11, 2021, the Regulation on notifications of incidents affecting networks, information systems and IT services (“ Regulation ”) – adopted by means of the Decree of the President of the Council of Ministers (DPCM) of 14 April 2021, no. The newly adopted Regulation on notification of security incidents. 105 (establishing the NCSP).

Cybersecurity 52

Cybersecurity Communications Data breaches Security 52