DLA Piper Privacy Matters

JUNE 4, 2021

Today, the European Commission published the final Implementing Decision on standard contractual clauses (“ New SCCs ”) for the transfer of personal data to third countries. The new SCCs will not apply for transfers of personal data from the UK to a third country.

GDPR 87

GDPR Personal data Privacy Government 87

Hunton Privacy

OCTOBER 14, 2015

With respect to alternative data transfer mechanisms, the Position Paper concludes the following: Consent : The Position Paper notes that individuals must provide effective informed consent. According to the Position Paper, this entails providing individuals with comprehensive information on the lack of personal data protection in the U.S.,

Paper 45

Paper Personal data Government IT 45

eSecurity Planet

NOVEMBER 18, 2021

Enterprises are constantly scaling to meet growing customer needs—with an explosion of endpoints and data, it is becoming increasingly difficult to secure endpoints, and remote work has only added to the challenge. If our personal data or confidential enterprise data falls into the wrong hands, bad actors could create havoc.

Security 121

Security Analytics Passwords Risk 121

Hunton Privacy

DECEMBER 1, 2014

The EDPS is an independent regulatory body whose main goal is to ensure that the EU institutions and bodies abide by the principles of EU data protection law when they process personal data and develop new policies.

Personal data 40

Personal data Privacy Government IT 40

Hunton Privacy

JUNE 13, 2019

Key takeaways from this survey include: 77% of the participating companies rely on SCCs to legitimize data transfers outside of the European Economic Area, 14% of the participants transfer personal data based on the European Commission’s adequacy decisions (including the decision recognizing the EU-U.S.

Privacy 53

Privacy Personal data IT Information Security 53

Hunton Privacy

JANUARY 12, 2016

While an agreement has been reached on the data protection reform “package,” entailing the EU General Data Protection Regulation (the “GDPR”) and the Directive for data protection in the police and justice sectors, the EDPS will continue to support European institutions in their process to create a coherent data protection framework in Europe.

Personal data 40

Personal data GDPR Privacy Communications 40

Hunton Privacy

MARCH 11, 2013

In 2001, a bankruptcy order was made against the claimant, but this order was later rescinded. The claimant alleged that he failed to obtain credit for his business venture as a result of the inaccurate data on his Equifax record. Requirements of the UK Data Protection Act. Obligation to Ensure Accuracy of Personal Data.

Personal data 40

Personal data Access IT Security 40

Hunton Privacy

JUNE 25, 2014

On June 23, 2014, the Article 29 Working Party (the “Working Party”) published its Opinion 7/2014 on the protection of personal data in Québec (the “Opinion”).

Privacy 40

Privacy Personal data Government Security 40

Hunton Privacy

JUNE 25, 2013

Since its establishment in 2001, the Centre has helped businesses, data protection authorities and consumer organizations rethink how to manage and protect personal data in today’s information age. ”

Data Privacy 40

Data Privacy Privacy Compliance Big data 40

John Battelle's Searchblog

MAY 25, 2018

While we’ve collectively wrung our hands about this for years (I started thinking about “ the Database of Intentions ” back in 2001, and I offered a “ Data Bill of Rights ” back in 2007), it was Europe, with its particular history and sensitivities, which finally took significant and definitive action.

GDPR 90

GDPR Government Personal data Mining 90

Hunton Privacy

FEBRUARY 5, 2010

On February 5, 2010, the European Commission adopted a new set of standard contractual clauses (“SCCs”) for transfers of personal data from data controllers in the EU to data processors outside the EU. View the European Commission press release.

Personal data 40

Personal data Security Information Security 40

Hunton Privacy

SEPTEMBER 20, 2010

The Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (generally referred to as “Convention 108”), enacted in 1981, is the only legally-binding international treaty dealing with privacy and data protection.

Personal data 40

Personal data Privacy Government IT 40

eDiscovery Daily

APRIL 10, 2019

“When Spain incorporated the directive into their law, one noticeable change [from other EU countries] was the lack of legitimate interest for a basis for processing personal data,” Tobón said. Unlike GDPR, POPIA asserts companies also have “personal data” that requires protection.

Data Privacy 50

Data Privacy Privacy Compliance GDPR 50

IT Governance

DECEMBER 13, 2018

Also in January, the ICO (Information Commissioner’s Office) fined Carphone Warehouse £400,000 – one of the largest fines it issued under the DPA (Data Protection Act) 1998 – for multiple security inadequacies that led to a 2015 data breach in which three million customers’ personal data was compromised. I’m sorry, Dave.

Data breaches 63

Data breaches Personal data Access GDPR 63

Hunton Privacy

FEBRUARY 1, 2013

She also oversaw the introduction of the Freedom of Information Act 2000 in January 2001, for which the Commissioner’s office became responsible. The name of the office was changed to its current name (the ICO) in 2001. France oversaw significant changes in the law as the 1998 Act was significantly more stringent than the 1984 Act.

Data Privacy 40

Data Privacy Privacy Computer and Electronics Education 40

Hunton Privacy

JUNE 4, 2013

Although the possibility of recasting the Proposed Regulation as a directive remains, the Presidency’s amendments emphasize that differing levels of data protection within the European Union must not impede the free flow of personal data within the Union (Recital 11). Scope of the Proposed Regulation.

Personal data 40

Personal data Risk Data breaches Marketing 40

HL Chronicle of Data Protection

APRIL 25, 2019

One of the most disconcerting areas of divergence between EU Member States is the different national positions on whether patient consent is a valid legal ground for processing personal data in clinical trials. This means that requirements in the GDPR relating to consent do NOT apply to health and care research.”

GDPR 40

GDPR Personal data Risk Healthcare 40

John Battelle's Searchblog

MAY 25, 2018

While we’ve collectively wrung our hands about this for years (I started thinking about “ the Database of Intentions ” back in 2001, and I offered a “ Data Bill of Rights ” back in 2007), it was Europe, with its particular history and sensitivities, which finally took significant and definitive action.

GDPR 58

GDPR Government Personal data Mining 58

Data Matters

APRIL 20, 2020

These measures should include a combination of data security controls, audits, data breach response planning, developing appropriate data protection policies and procedures and training of employees, particularly those who come into contact with personal data in their day-to-day roles. 1 [2016] UKSC 11.

Data breaches 67

Data breaches GDPR Privacy IT 67

John Battelle's Searchblog

MAY 25, 2018

While we’ve collectively wrung our hands about this for years (I started thinking about “ the Database of Intentions ” back in 2001, and I offered a “ Data Bill of Rights ” back in 2007), it was Europe, with its particular history and sensitivities, which finally took significant and definitive action.

GDPR 40

GDPR Government Personal data Mining 40