Data Protector

AUGUST 17, 2020

Some UK organisations will inevitably have to follow all the EU’s data protection rules because they will continue to process the personal data of individuals in the EU. Organisations have also spent many hours working out what legal basis each business process should rely on when personal data is processed.

Privacy 156

Privacy GDPR Personal data Computer and Electronics 156

Hunton Privacy

JULY 9, 2020

The New DP Law will apply to companies incorporated in the DIFC, regardless of where processing takes place, or companies that, whilst incorporated elsewhere, process personal data in the DIFC as part of stable arrangements (other than occasional processing). For more detail, read the full client alert.

Personal data 127

Personal data GDPR Data breaches Compliance 127

DLA Piper Privacy Matters

MAY 19, 2020

In its 2019 Annual Report, the DPC reported three separate statutory inquiries into Tusla in respect of a number of breaches which had been reported to it since May 2018. Tusla collects and processes highly sensitive, often special category data concerning children, vulnerable women and families across Ireland.

GDPR 122

GDPR Personal data Government Paper 122

DLA Piper Privacy Matters

MAY 13, 2020

Consistent with its previous coronavirus guidance, the ICO is keen to stress that data protection law does not prevent employers from taking steps to keep staff and the public safe and supported during the current pandemic. This means that the usual data protection principles apply. Appropriate lawful basis.

GDPR 126

GDPR Personal data Risk Privacy 126

Hunton Privacy

JUNE 15, 2021

The CJEU mainly examined the question of whether a national supervisory authority that is not the lead supervisory authority (“lead SA”) under the EU General Data Protection Regulation’s (“GDPR”) One-Stop-Shop may bring legal proceedings against a company for GDPR violations before a court in its Member State.

GDPR 81

GDPR Personal data IT 81

DLA Piper Privacy Matters

JANUARY 15, 2021

In late 2019, the Claimant issued proceedings and sought various relief, including in connection with an allegation that the Defendant had failed to provide data, contrary to the Data Protection Act 2018 ( “DPA 18” ) and the General Data Protection Regulation (EU) 2016/679 ( “GDPR” ).

Access 122

Access GDPR Personal data Retail 122

Hunton Privacy

DECEMBER 1, 2020

Between June 8, 2018 and April 6, 2019, the CNIL received 15 complaints from individuals relating to the exercise of their data protection rights with affiliates of the Carrefour Group. Loyalty program members’ data had been retained for a period of four years from their last activity.

GDPR 91

GDPR Personal data Data collection Marketing 91

Hunton Privacy

SEPTEMBER 25, 2018

The Information Commissioner’s Office (“ICO”) in the UK has issued the first formal enforcement action under the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 (the “DPA”) on Canadian data analytics firm AggregateIQ Data Services Ltd. (“AIQ”).

GDPR 99

GDPR Personal data Analytics IT 99

DLA Piper Privacy Matters

APRIL 24, 2020

Parallels with the Data Protection Act 2018. Of course, the FOIA offence is only available in respect of information held by public authorities, while the offence under the DPA18 relates to personal data and is applicable to all data controllers and those employed by them.

FOIA 66

FOIA Personal data GDPR Access 66

DLA Piper Privacy Matters

SEPTEMBER 6, 2021

The investigation began in December 2018, when the DPC commenced an own-volition inquiry under Section 110 of the Data Protection Act 2018. Non-User Data. In its Article 65 decision, the EDPB agreed that this non-user data constituted personal data. Background.

GDPR 105

GDPR Personal data Communications e-Delivery 105

Security Affairs

MAY 22, 2023

billion for transferring user data to the US. This is the biggest fine since the adoption of the General Data Protection Regulation (GDPR) by the European Union (EU) on May 25, 2018. In the past, the social media giant Meta threatened to block its services for users in Europe without a legal basis for data transfers.

GDPR 86

GDPR Personal data Privacy Data Privacy 86

Hunton Privacy

FEBRUARY 23, 2023

On February 20, 2023, in the case of Experian Limited v The Information Commissioner , the First-Tier Tribunal in the UK (the “ Tribunal ”) ruled on the ICO’s action to require Experian to make changes to how it processes personal data for direct marketing purposes.

Marketing 64

Marketing Personal data GDPR Privacy 64

IT Governance

DECEMBER 13, 2018

Hello and welcome to the final IT Governance podcast of 2018. And then there was the Cambridge Analytica scandal , which broke when the former employee and whistle-blower Christopher Wylie revealed to the Guardian that the political consulting firm had harvested 50 million Facebook users’ personal data and used it for political purposes.

Data breaches 55

Data breaches Personal data Access GDPR 55

Hunton Privacy

APRIL 20, 2020

On April 15, 2020, the French Data Protection Authority (the “CNIL”) published the final version of its standard (“Referential”) concerning the processing of personal data for core Human Resources (“HR”) management purposes. Main Changes in the Referential on HR Data Processing. Background.

Personal data 71

Personal data GDPR Compliance Archiving 71

Data Protection Report

JUNE 22, 2022

An exemption to the requirement to provide further fair processing information where personal data was collected directly from data subjects initially and is repurposed for research purposes later has also been identified, where to do so would involve disproportionate effort. Delivering better public services.

GDPR 144

GDPR Government Personal data Risk 144

Data Matters

JANUARY 3, 2019

When the GDPR came into effect on May 25, 2018, several European Member States had yet to put in place further implementing legislation. health data, ethnicity, race) is prohibited under Article 9(1) of the GDPR unless one of the conditions for processing such data are satisfied under Article 9(2) of the GDPR.

GDPR 66

GDPR Personal data Privacy Insurance 66

IT Governance

NOVEMBER 15, 2018

Updated 15 November 2018. This blog was originally published before the GDPR took effect in May 2018. The EU GDPR (General Data Protection Regulation) gives individuals eight rights relating to their personal data. But first, what is a data subject? What is a data subject? The right of access.

GDPR 47

GDPR Personal data Access Communications 47

ARMA International

APRIL 18, 2022

Introduction to Data Protection Laws. Data protection laws, regulations, and rules control the collection, use, transfer, and storage of personal and sensitive information. Personal data protection requirements may be issued by federal, state (provincial), or local governments.

Personal data 100

Personal data GDPR Privacy Records Management 100

Security Affairs

DECEMBER 24, 2019

The exercises aimed at testing and ensuring the integrity and the security of Russia’s Internet infrastructure, so-called RuNet. “According to Sokolov, several scenarios were worked out during the exercises. One of them is checking the integrity and security of the Internet as a result of external negative influences.”

IT 84

IT Communications Government Personal data 84

Hunton Privacy

NOVEMBER 5, 2020

During the investigation, the ICO conducted audits of the direct marketing data broking businesses of the UK’s three largest credit reference agencies (“CRAs”) – Experian, Equifax and TransUnion – and found “significant data protection failures at each” that were “deeply embedded” within the businesses.

Marketing 102

Marketing Compliance Personal data GDPR 102

IT Governance

FEBRUARY 9, 2021

Consider how much personal data you collect; if that information is lost or stolen, it will severely damage your customer relationships. Data protection by design states that information security and privacy concerns must be considered at the outset of any new system, service, product or process rather than being bolted on afterwards.

Marketing 108

Marketing Security GDPR Privacy 108

Hunton Privacy

JUNE 23, 2020

The CNIL’s enforcement action was the result of collective actions filed in May 2018 by two not-for-profit associations—None Of Your Business (“NOYB”) from Austria and La Quadrature du Net (“LQDN”) from France. Google had appealed this decision before the Conseil d’Etat. Background.

GDPR 75

GDPR Personal data Access IT 75

Hunton Privacy

JULY 15, 2020

After receiving multiple complaints from data subjects, the Dutch DPA investigated BKR’s management of data subjects’ access requests. In addition, Recital 59 of the GDPR clearly states that controllers should offer the possibility of accessing personal data in an electronic form when data is processed electronically.

Compliance 65

Compliance GDPR Personal data Paper 65

Thales Cloud Protection & Licensing

SEPTEMBER 12, 2019

At the 2018 Winter Olympic Games held in PyeongChang, for instance, cyber criminals leveraged a previously unknown family of malware called Olympic Destroyer to attack the Games’ servers just before the opening ceremony. We urge you to take precautions to protect your personal information when you are on the Internet.

Security 105

Security IoT Personal data Military 105

Data Matters

JANUARY 28, 2022

Another example is the inclusion of remediation details for old vulnerabilities (including some dating back to 2018) and CISA stating that the Russian state-sponsored advanced persistent threat (“APT”) actors have used these “common but effective” vulnerabilities for attacks.

Cybersecurity 155

Cybersecurity Financial Services Authentication Government 155

IT Governance

NOVEMBER 8, 2018

Updated X November 2018. This blog was originally published before the GDPR took effect in May 2018. The categories of personal data involved. The recipients (or categories of recipients) to whom the personal data has been or will be disclosed. Help creating a data subject access request procedure.

GDPR 59

GDPR Access Personal data Compliance 59

Security Affairs

APRIL 23, 2019

The website offers any kind of fitness articles, exercises, workouts, and supplements. The company confirmed it has no evidence that personal customer information was accessed or misused, as a precautionary measure the company is notifying all current and former users and customers. Review your accounts for suspicious activity.

Passwords 73

Passwords Security Retail Personal data 73

Hunton Privacy

MARCH 17, 2017

On March 15, 2017, the French data protection authority (the “CNIL”) published a six step methodology and tools for businesses to prepare for the EU General Data Protection Regulation (“GDPR”) that will become applicable on May 25, 2018. Step 1: Appointing a Data Protection Officer (“DPO”) or “Pilot”.

GDPR 75

GDPR Personal data Compliance Privacy 75

Thales Cloud Protection & Licensing

JANUARY 16, 2020

Objectives of the Personal Data Protection Bill. Many privacy professionals consider the European Union’s General Data Protection Regulation (GDPR), which took effect in May 2018, as the cornerstone of privacy regulation. GDPR is harmonizing data protection and privacy requirements across the EU.

Personal data 24

Personal data Compliance Data breaches GDPR 24

Hunton Privacy

NOVEMBER 5, 2020

On October 22, 2020, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth submitted its response to the UK Department for Digital, Culture, Media and Sport (“DCMS”) call for views and evidence on its review of representative actions under Section 189 of the Data Protection Act 2018 (“DPA”).

Compliance 107

Compliance Data breaches Personal data Marketing 107

DLA Piper Privacy Matters

FEBRUARY 15, 2019

Under European data protection law, journalists enjoy some regulatory exemptions when processing personal data for journalistic purposes, balancing the right to the protection of personal data with the principle of freedom of expression. Balancing exercise. The judgment was quashed on appeal.

GDPR 75

GDPR Personal data Privacy Compliance 75

Hunton Privacy

MARCH 8, 2019

The main topics of these cases relate to the exercise of individual rights, consumer rights and data breaches. The EDPB has adopted 28 consistency opinions regarding the national lists of processing subject to a data protection impact assessment. 23 DPAs reported an increase in their regulatory budgets for 2018-2019.

GDPR 88

GDPR Data breaches Personal data Marketing 88

DLA Piper Privacy Matters

JANUARY 7, 2019

The French Data Supervisory Authority (the CNIL) released guidance on December 28th 2018 on the principles to be followed when an organization that collects personal data through online or hard copy forms, shares it with business partners or data brokers to send SMS or emails for marketing purposes.

Marketing 40

Marketing Personal data Data collection GDPR 40

DLA Piper Privacy Matters

OCTOBER 22, 2020

On 28 September 2020, the Romanian National Supervisory Authority for the Processing of Personal Data (ANSPDCP) published on its website the annual activity report for 2019. Qualification of the parties involved in personal data processing activities. Obligation to carry out a data protection impact assessment.

Personal data 59

Personal data GDPR Communications Compliance 59

HL Chronicle of Data Protection

SEPTEMBER 14, 2018

101 of 10 August 2018 (the “Decree”) for the national implementation of General Data Protection Regulation (EU) 2016/679 (the “GDPR”) has been published in the Official Journal. The Decree will enter into force on 19 September 2018. The provisions relating to specific processing of personal data (e.g.

GDPR 40

GDPR Personal data Privacy Communications 40

IT Governance

DECEMBER 18, 2017

For a short time, we are offering a 10% discount on GDPR courses in Belfast, so book your place before Friday 5 January 2018. Special categories of personal data. The rights of data subjects, including data access requests. Data protection by design. Securing personal data. Was: £495.00.

GDPR 44

GDPR Personal data Compliance Data breaches 44

IT Governance

MAY 30, 2019

That’s been the reaction of many law enforcement bodies that have recently learned about their compliance requirements under the DPA (Data Protection Act) 2018. The DPA 2018 includes a framework designed specifically for the processing of personal data for law enforcement purposes. Learn more with our webinar.

GDPR 41

GDPR Personal data Government Compliance 41