Hunton Privacy

JANUARY 14, 2021

the Belgian Data Protection Authority (“Belgian DPA”). The Belgian DPA initiated judicial proceedings against several members of the Facebook group before the Belgian Courts in September 2015. Facebook Belgium BVBA v. Background.

GDPR 81

GDPR Personal data IT Risk 81

Hunton Privacy

MARCH 29, 2017

This legislation strengthens the transparency requirements and increases the maximum level of fines from €150,000 to €3 million for data protection infringements. health and social sector issues such as difficulties accessing medical or social records, and the creation of pharmaceutical records without consent (3 percent of complaints).

Personal data 49

Personal data Healthcare GDPR Insurance 49

Hunton Privacy

OCTOBER 16, 2015

On October 16, 2015, the Article 29 Working Party (the “Working Party”) issued a statement on the consequences of the recent ruling of the Court of Justice of the European Union (the “CJEU”) invalidating the European Commission’s Safe Harbor Decision. Safe Harbor to transfer personal data from the EU to the U.S.

Personal data 53

Personal data Risk IT 53

IT Governance

NOVEMBER 16, 2018

This week, we discuss a Bank of England cyber resilience exercise, the latest cyber security news from the US Office of Personnel Management, the highlights of this month’s Patch Tuesday, and a surprising admission by a Japanese cyber security minister. The ones that affected the unencrypted personal data of 4.2

Risk 44

Risk Encryption Passwords Government 44

Hunton Privacy

DECEMBER 10, 2014

The Joint Statement is intended to remind all relevant stakeholders (private and public) of their joint responsibility in designing and applying such a framework to the collection and use of personal data. The principles and actions include the following: Data Protection as a Fundamental Right.

Personal data 40

Personal data Compliance Privacy Education 40

Hunton Privacy

OCTOBER 18, 2016

The white paper was the outcome of a June 2016 roundtable held by the two organizations in London, in which senior business leaders, Data Privacy Officers, lawyers and academics discussed the importance of user-centric transparency to the data driven economy. The importance of empowering individuals.

Paper 49

Paper Education Privacy Personal data 49

Hunton Privacy

NOVEMBER 6, 2015

On November 6, 2015, the European Commission published a communication and a Q&A document addressed to the European Parliament and European Council on the transfer of personal data from the EU to the U.S. Standard Contractual Clauses (“SCCs”), using the sets of model clauses provided by the European Commission.

Communications 40

Communications Personal data Compliance Government 40

IT Governance

NOVEMBER 16, 2017

The negative effects of security incidents can be seen to some extent in almost all breaches, but for an extreme example, see the aftermath of the 2015 TalkTalk breach. The telecoms company was fined £400,000 after it lost 157,000 customers’ personal data, but this pales in comparison to the subsequent damage.

Information Security 42

Information Security Sales Personal data Risk 42

Hunton Privacy

OCTOBER 14, 2015

On October 14, 2015, the data protection authority (“DPA”) in the German state of Schleswig-Holstein ( Unabhängiges Landeszentrum für Datenschutz ) issued a position paper (the “Position Paper”) on the Safe Harbor Decision of the Court of Justice of the European Union (the “CJEU”). Investigations by the DPA.

Paper 45

Paper Personal data Government IT 45

DLA Piper Privacy Matters

OCTOBER 3, 2019

The High Court ought to have exercised its discretion to allow this representative action to proceed. 2) allows the court, exercising its discretion, to direct that a person may not act as a representative. At first instance, Warby J exercised this discretion. 2 [2015] EWHC 1482 (Ch) (Mann J). Judicial discretion.

Privacy 40

Privacy GDPR Data breaches Personal data 40

Hunton Privacy

JULY 15, 2015

On July 6, 2015, the Standing Committee of the National People’s Congress of the People’s Republic of China published a draft of the country’s proposed Network Security Law (the “Draft Cybersecurity Law”). A public comment period on the Draft Cybersecurity Law is now open until August 5, 2015.

Cybersecurity 45

Cybersecurity Energy and Utilities Personal data Government 45

CGI

OCTOBER 25, 2015

Mon, 10/26/2015 - 01:33. All of this leads one to ask: In the midst of these heightened risks, increasing regulations and digital innovation, whose role is it to make sure that financial and personal data is kept safe? Security in the finance sector: Whose role is it anyway?

IT 40

IT Security Digital transformation Compliance 40

Hunton Privacy

APRIL 13, 2016

The Working Party also published a Working Document on the justification for interferences with the fundamental rights to privacy and data protection through surveillance measures when transferring personal data (European Essential Guarantees). Background. Purpose Limitation. even before the transfer to the U.S. authorities.

Privacy 49

Privacy Personal data Healthcare GDPR 49

IT Governance

DECEMBER 13, 2018

Also in January, the ICO (Information Commissioner’s Office) fined Carphone Warehouse £400,000 – one of the largest fines it issued under the DPA (Data Protection Act) 1998 – for multiple security inadequacies that led to a 2015 data breach in which three million customers’ personal data was compromised.

Data breaches 55

Data breaches Personal data Access GDPR 55

Hunton Privacy

DECEMBER 3, 2014

Together with Mikko Niva of Nokia Corporation and JoAnn Stonier of MasterCard, the panelists discussed the emergence of a new way of implementing effective privacy protections and calibrating privacy programs based on understanding the actual risks to individuals and benefits that are associated with processing personal data.

Risk 40

Risk Privacy Compliance Data Privacy 40

Data Protection Report

SEPTEMBER 25, 2017

In a bid to keep pace with advancements in the technological landscape, the Singapore Government has in recent months embarked on public consultations on its draft Cybersecurity Bill (the Cyber Bill) and its proposed amendments to Singapore’s Personal Data Protection Act (PDPA) to update the country’s data protection regime.

Cybersecurity 40

Cybersecurity Data breaches Personal data Compliance 40

Data Matters

SEPTEMBER 29, 2021

The 2015 amendments to Rule 26(b)(1), however, were meant to resolve any doubt, returning the proportionality factors to their original place as part of the very definition of what is discoverable. 15 These changes were intended to “enable the court[s] to keep a tighter rein on the extent of discovery.”16.

Privacy 94

Privacy e-Discovery Computer and Electronics e-Delivery 94

Hunton Privacy

JUNE 18, 2015

On June 18, 2015, the Article 29 Working Party (the “Working Party”) published letters regarding the proposed EU General Data Protection Regulation (the “Regulation”) addressed to representatives of the Council of the European Union , the European Parliament and the European Commission.

IT 63

IT Personal data Risk Privacy 63

HL Chronicle of Data Protection

MAY 13, 2019

Additionally in 2017, Connecticut passed legislation requiring that health insurers, third-party administrators, and related entities implement and maintain a comprehensive information security program with specific minimum requirements to protect insureds’ personal data.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Hunton Privacy

SEPTEMBER 3, 2015

On August 14 and August 26, 2015, the Conference of the Data Protection Commissioners of the Federal Government and the Federal States ( Länder ) issued a detailed position paper (“Position Paper”) and a press release on the main issues for the trilogue negotiations on the proposed EU General Data Protection Regulation (the “Regulation”).

Paper 61

Paper Personal data Risk Government 61

Troy Hunt

DECEMBER 3, 2023

” Anyone can type in an email address into the site to check if their personal data has been compromised in a security breach. It's a non-trivial exercise to index that (for all sorts of reasons), but it also seems like an increasingly worthy exercise. Breaches 731 breaches later, here we are.

Data breaches 145

Data breaches Passwords Sales IT 145

Data Matters

NOVEMBER 21, 2017

On 10 October 2017, Jamaica introduced into its House of Parliament a comprehensive Bill for privacy and data protection, entitled “An Act to Protect the Privacy of Certain Data and for Connected Matters.” If passed, the new law will be named the “Data Protection Act, 2017.” .

Privacy 68

Privacy Personal data Compliance Data breaches 68

Hunton Privacy

OCTOBER 5, 2015

On October 1, 2015, the Court of Justice of the European Union (the “CJEU”) issued its judgment in Weltimmo v Nemzeti (Case C-230/14). The advertisers complained to the Hungarian Data Protection Authority (“DPA”), which investigated the matter and issued a fine of HUF 10 million (approximately 36,500 USD) against Weltimmo.

Personal data 40

Personal data Government IT 40

Troy Hunt

JANUARY 16, 2019

I've written before about what's involved in verifying data breaches and it's often a non-trivial exercise. People will receive notifications or browse to the site and find themselves there and it will be one more little reminder about how our personal data is misused. What can you do if you were in the data?

Data breaches 112

Data breaches Passwords Risk Personal data 112

Data Matters

MAY 31, 2019

Data Breaches and Enforcement Action. Perhaps of most interest has been how the data protection authorities (“ DPAs ”) would exercise their expanded enforcement powers under the GDPR. That is an increase of 20% since the same survey (the Special Eurobarometer) was carried out in 2015.

GDPR 66

GDPR Data breaches Privacy Compliance 66

Data Protection Report

OCTOBER 15, 2020

On 6 October 2020, the Court of Justice of the European Union ( CJEU ) published two decisions that further define the permitted scope of governmental access to personal data. The exercise must be subject to effective judicial review, although the judgment stops short of requiring prior review.

Metadata 75

Metadata Government Communications Personal data 75

IT Governance

JANUARY 24, 2019

Second, by failing to obtain a valid legal basis for processing personal data for ad personalisation, in violation of the GDPR’s requirements for specific and unambiguous consent for all forms of personal data processing. It is not a one-off, time-limited, infringement”.

GDPR 53

GDPR Privacy Personal data Government 53

Troy Hunt

APRIL 15, 2019

For example, there was VTech back in 2015 who leaked millions of kids' info after they registered with "smart" tablets. Still, this has been a useful exercise to understand not just how the various entities relate to each other, but also because it shows that the scope of this issue isn't just constrained to kids, it affects the elderly too.

Passwords 111

Passwords Privacy Security Access 111