Hunton Privacy

DECEMBER 27, 2018

On December 20, 2018, the French data protection authority (the “CNIL”) announced that it levied a €400,000 fine on Uber France SAS, the French establishment of Uber B.V. for failure to implement some basic security measures that made possible the 2016 Uber data breach. On November 21, 2017, Uber Technologies Inc. Background.

Data breaches 54

Data breaches Personal data Security Access 54

Hunton Privacy

APRIL 12, 2017

On April 5, 2017, the Article 29 Working Party (“Working Party”) adopted the final versions of its guidelines (the “Guidelines”) on the right to data portability, Data Protection Officers (“DPOs”) and Lead Supervisory Authority (“SA”), which were first published for comment in December 2016.

Personal data 65

Personal data GDPR Metadata Compliance 65

Hunton Privacy

MARCH 17, 2017

On March 15, 2017, the French data protection authority (the “CNIL”) published a six step methodology and tools for businesses to prepare for the EU General Data Protection Regulation (“GDPR”) that will become applicable on May 25, 2018. Step 1: Appointing a Data Protection Officer (“DPO”) or “Pilot”.

GDPR 75

GDPR Personal data Compliance Privacy 75

HL Chronicle of Data Protection

SEPTEMBER 14, 2018

Finally, the controversial provisions regarding legitimate interest, introduced with the Budget Law at the end of 2017 are in fact repealed, so that the notification obligation to the Garante shall apply only in case of change of the name of minors. The provisions relating to specific processing of personal data (e.g.

GDPR 40

GDPR Personal data Privacy Communications 40

Data Matters

OCTOBER 20, 2017

On 4 October 2017 the Article 29 Working Party (“ WP29 ”) published its final Guidelines on Data Protection Impact Assessment (“ DPIA ”) which were initially released in draft form in April 2017.

GDPR 60

GDPR Personal data Risk Data collection 60

Data Protection Report

NOVEMBER 2, 2023

In 2017, Equifax Inc, suffered a cybersecurity breach, with hackers able to access the personal data of around 13.8 million individuals, including dates of birth, phone numbers, partially exposed credit card details and residential addresses.

GDPR 78

GDPR Risk Cybersecurity Compliance 78

Data Matters

NOVEMBER 6, 2017

Privacy Shield has survived its infancy, although the October 18, 2017 European Commission report on its first annual review of the functioning of the EU-U.S. continues to ensure an adequate level” of protection for personal data transferred under the Privacy Shield from the EU to the U.S. The EU-U.S. Privacy Shield if the U.S.

Privacy 60

Privacy IT Compliance Personal data 60

Data Protection Report

DECEMBER 6, 2017

Turkey continues to develop a legal framework on data protection. The Regulation was then followed by a set of guidelines detailing the process and methods of deletion, destruction and anonymization of personal data (the “ Guidelines ”). Establishment of the Data Protection Board & Early Board Activity. Definitions.

Personal data 40

Personal data Paper Encryption Cloud 40

Hunton Privacy

JUNE 1, 2020

In October 2017, the BGH suspended its proceedings and submitted questions to the Court of Justice of the European Union (“CJEU”) for a preliminary ruling regarding the effectiveness of obtaining consent for the use of cookies through a pre-ticked checkbox. Read the BGH’s press release (in German).

Marketing 75

Marketing Personal data Analytics Communications 75

Data Matters

OCTOBER 30, 2017

*This post originally appeared in Law 360 on October 24, 2017. Securities and Exchange Commission has issued specific guidance on disclosures related to cybersecurity risk and incidents[2] and the manner in which boards exercise responsibility for overseeing and managing risk.[3] We’ve seen it happen time and again. 1] The U.S.

Compliance 60

Compliance Cybersecurity Risk Government 60

HL Chronicle of Data Protection

JUNE 17, 2019

On 6 June, 2019, the Privacy Commissioner for Personal Data (the “ PCPD “) issued an enforcement notice against Cathay Pacific Airways (and its affiliate Hong Kong Dragon Airlines) (together, “ Cathay Pacific “) in respect of a data breach concerning unauthorized access to the personal data of some 9.4

Personal data 40

Personal data Data breaches Security Compliance 40

DLA Piper Privacy Matters

JANUARY 21, 2019

On 12 December 2018, the French Government issued an ordinance [1] finalizing, at the legislative level [2] , the alignment of the French Data Protection Law (“FDPL”) with the General Data Protection Regulation [3] (“GDPR”) and the Directive 2016/680 [4]. Following-up the adoption of the GDPR, the French Law No.

GDPR 49

GDPR Personal data Communications Government 49

DLA Piper Privacy Matters

MARCH 28, 2019

For this reason, it was decided that the members of the former Belgian Privacy Commission would perform the tasks and exercise the power of the BDPA on an interim basis during this transitional period. However, most candidates lacked sufficient knowledge of German, Belgium’s third national language (next to Dutch and French).

GDPR 93

GDPR Privacy Analytics Personal data 93

IT Governance

DECEMBER 13, 2018

Also in January, the ICO (Information Commissioner’s Office) fined Carphone Warehouse £400,000 – one of the largest fines it issued under the DPA (Data Protection Act) 1998 – for multiple security inadequacies that led to a 2015 data breach in which three million customers’ personal data was compromised.

Data breaches 55

Data breaches Personal data Access GDPR 55

Data Protection Report

MAY 23, 2018

The European Commission Fact Sheet and Q&A includes statistics that nine out of ten Europeans have expressed concern about mobile apps collecting their data without their consent, and seven out of ten worry about the potential use that companies may make of the information disclosed. Challenge #1. Challenge #3.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Data Protection Report

NOVEMBER 11, 2021

The Cyberspace Administration of China ( CAC ) released the draft Security Review Measures for Cross-Border Data Transfer (the Draft Security Review Measures ) for public comments on 29 October 2021 – shortly before the effective date of the Personal Information Protection Law ( PIPL ), 1 November 2021.

Security 52

Security Risk Personal data IT 52

Data Matters

SEPTEMBER 7, 2018

Since December 2017, however, Belgium has had in place a law implementing many of the more procedural provisions of the GDPR, namely the Act on the Establishment of the Supervisory Authority (the SA Act ). The post New Belgian Data Protection Act Takes Effect appeared first on Data Matters Privacy Blog. Children’s Consent.

GDPR 94

GDPR Archiving Privacy Compliance 94

Data Protection Report

JUNE 9, 2022

The Guidelines supplement the Article 29 Working Party’s Guidelines on the application and setting of administrative fines ( WP253 ) adopted in October 2017 and recommends that the two are read together. Categories of personal data affected (e.g.

GDPR 52

GDPR Compliance Personal data IT 52

CGI

MARCH 3, 2019

Late in 2017, CGI UK commissioned and directed the Centre for Economics and Business Research (CEBR) and Opinium to conduct a survey and research around attitudes towards and preparedness for GDPR. You should also check the insurance cover of all parties with regard to personal data breaches. Suppliers and GDPR. Conclusion.

GDPR 45

GDPR Insurance Data breaches Personal data 45

DLA Piper Privacy Matters

OCTOBER 6, 2017

The ICO has provided some clarity on how its notification and fee regime will change when the General Data Protection Regulation (“ GDPR “) enters into force from May 2018. The ICO aims to communicate the fees to data controllers by the end of 2017.

GDPR 40

GDPR Risk Personal data Compliance 40

Data Protection Report

JUNE 4, 2018

billion – roughly 4 percent of each company’s revenue for 2017, the maximum penalty allowed under the GDPR. In statements, both companies defended their data collection practices, saying they fully complied with the new European regulations.

GDPR 40

GDPR Compliance Personal data Privacy 40

Data Protection Report

SEPTEMBER 25, 2017

In a bid to keep pace with advancements in the technological landscape, the Singapore Government has in recent months embarked on public consultations on its draft Cybersecurity Bill (the Cyber Bill) and its proposed amendments to Singapore’s Personal Data Protection Act (PDPA) to update the country’s data protection regime.

Cybersecurity 40

Cybersecurity Data breaches Personal data Compliance 40

Hunton Privacy

OCTOBER 3, 2017

On September 29, 2017, the Federal Trade Commission published the eleventh blog post in its “Stick with Security” series. This week’s post, entitled Stick with Security: Secure paper, physical media, and devices , highlights the importance of adopting a 360 degree approach to protecting confidential data.

Security 40

Security IT Paper Encryption 40

Data Matters

MARCH 10, 2021

The first draft of the ePrivacy Regulation was approved by the European Commission in 2017 and has since been under discussion in the Council. The GDPR also supplements the ePrivacy rules on the protection of personal data.

GDPR 66

GDPR Metadata Communications Privacy 66

Data Protection Report

OCTOBER 1, 2019

In January 2009, the OPC issued Guidelines for processing personal data across borders setting out its interpretation that a “transfer” of personal information by an organization for processing is a “use” and not a “disclosure” of that personal information. What’s Old is New Again. and Equifax Canada’s Co.’s

Privacy 40

Privacy Risk Compliance Personal data 40

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

In the aftermath of the Cambridge Analytica scandal, and in the footsteps of Europe’s General Data Protection Regulation (“GDPR”), California privacy advocates introduced a ballot initiative on October 12, 2017 called “The Consumer Right to Privacy Act of 2018” (No. Right to Opt-Out. New Business Obligations.

Privacy 58

Privacy Sales Compliance Government 58

DLA Piper Privacy Matters

JUNE 13, 2018

In June 2018 the European Court of Justice’s Grand Chamber decided [1] on a long awaited case [2] regarding the responsibility of the administrators of Facebook fan pages, relating to the personal data of visitors to fan pages. 5] [link]. [6] 6] See case C?

Personal data 60

Personal data GDPR Privacy Risk 60

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

In the aftermath of the Cambridge Analytica scandal, and in the footsteps of Europe’s General Data Protection Regulation (“GDPR”), California privacy advocates introduced a ballot initiative on October 12, 2017 called “The Consumer Right to Privacy Act of 2018” (No. Right to Opt-Out. New Business Obligations.

Privacy 58

Privacy Sales Education Compliance 58

HL Chronicle of Data Protection

MAY 13, 2019

For example, the New York Department of Financial Services (‘NYDFS’) in March 2017 issued its Cybersecurity Regulation (23 NYCRR 500) (‘the NYDFS Cybersecurity Regulation’), a groundbreaking and far-reaching regulatory regime focused on financial institutions licensed in New York, including insurance companies.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Data Protector

OCTOBER 11, 2017

We want businesses to ensure that their customers and future customers have consented to having their personal data processed, but we also need to ensure that the enormous potential for new data rights and freedoms does not open us up to new threats. How then will we secure adequacy without adhering to the charter?

GDPR 120

GDPR Personal data Government IT 120

Data Matters

SEPTEMBER 29, 2021

Relatively recent advances in technology — smartphones and social media, in particular — have allowed businesses to collect, store, and find ways to monetize far more personal data than ever before. social security and credit card numbers, employee and patient health data, and customer financial records).”43

Privacy 94

Privacy e-Discovery Computer and Electronics e-Delivery 94

Hunton Privacy

APRIL 30, 2019

percent compared to the number of complaints in 2017). This upward trend was confirmed in the first few months of 2019, and may be due to the media impact of the EU General Data Protection Regulation (“GDPR”) and increased public awareness. percent of complaints); the banking/credit sector (8.9 percent of complaints); and.

GDPR 48

GDPR Personal data Data breaches Marketing 48

Hunton Privacy

JULY 17, 2018

On July 17, 2018, the European Union and Japan successfully concluded negotiations on a reciprocal finding of an adequate level of data protection, thereby agreeing to recognize each other’s data protection systems as “equivalent.” Privacy Shield)—which allow personal data to flow safely from the EU to these countries.

Personal data 45

Personal data Communications Access Privacy 45

Data Matters

AUGUST 8, 2018

As part of the agreement, the Commission has established that Japan provides a comparable level of protection of personal data to that of the European Union, enabling the personal data of individuals in the EU to be lawfully transferred from the European Economic Area (EEA) to Japan, without further safeguards or authorisations.

Personal data 60

Personal data Privacy GDPR IT 60

Data Matters

NOVEMBER 21, 2017

On 10 October 2017, Jamaica introduced into its House of Parliament a comprehensive Bill for privacy and data protection, entitled “An Act to Protect the Privacy of Certain Data and for Connected Matters.” If passed, the new law will be named the “Data Protection Act, 2017.” .

Privacy 68

Privacy Personal data Compliance Data breaches 68

Hunton Privacy

OCTOBER 18, 2017

On October 18, 2017, the EU Commission (“Commission”) released its report and accompanying working document on the first annual review of the EU-U.S. The Report states that the Privacy Shield framework continues to ensure an adequate level of protection for personal data that is transferred from the EU to the U.S.

Privacy 40

Privacy Personal data Compliance Marketing 40

Troy Hunt

DECEMBER 3, 2023

” Anyone can type in an email address into the site to check if their personal data has been compromised in a security breach. But looking at passwords through the lens of how breach data can be used to do good things, a list of known compromised passwords disassociated from any form of PII made a lot of sense.

Data breaches 145

Data breaches Passwords Sales IT 145