Data Protector

AUGUST 17, 2020

It is also possible that, in the near future, the EU will publish revised sets of Standard Contractual Clauses to replace the existing SCCs in a bold effort to ensure that flows of personal data outside the European Union remain suitably protected. To expect them to commission a similar exercise so soon is cruel (and costly).

GDPR 120

GDPR Personal data Government Privacy 120

Data Protection Report

JUNE 17, 2020

This judgement concerns the legality of the European Commission approved Standard Contractual Clauses ( SCCs ) which many organisations rely on to transfer personal data outside of the UK and the European Economic Area ( EEA ), particularly in relation to outsourcing services.

Personal data 119

Personal data Communications Access GDPR 119

DLA Piper Privacy Matters

MAY 19, 2020

In its 2019 Annual Report, the DPC reported three separate statutory inquiries into Tusla in respect of a number of breaches which had been reported to it since May 2018. In 2017, the DPC’s Special Investigation Unit (SIU) investigated the governance of Tusla, examining the processing of personal data in child protection cases.

GDPR 122

GDPR Personal data Government Paper 122

Hunton Privacy

DECEMBER 1, 2020

Between June 8, 2018 and April 6, 2019, the CNIL received 15 complaints from individuals relating to the exercise of their data protection rights with affiliates of the Carrefour Group. Loyalty program members’ data had been retained for a period of four years from their last activity.

GDPR 91

GDPR Personal data Data collection Marketing 91

Hunton Privacy

JUNE 25, 2019

The European Commission also published the Contribution from the Multistakeholder Expert to the Stock-Taking Exercise of June 2019 on One Year of GDPR Application (the “Report”). use of privacy settings and reasons for not changing the default settings. Access the full report with the results of the Eurobarometer.

GDPR 80

GDPR Personal data Privacy Risk 80

DLA Piper Privacy Matters

JANUARY 15, 2021

In late 2019, the Claimant issued proceedings and sought various relief, including in connection with an allegation that the Defendant had failed to provide data, contrary to the Data Protection Act 2018 ( “DPA 18” ) and the General Data Protection Regulation (EU) 2016/679 ( “GDPR” ).

Access 122

Access GDPR Personal data Retail 122

Data Matters

JULY 16, 2020

The Supreme Court has recently granted Google permission to appeal the Court of Appeal’s decision in the case of Lloyd v Google LLC ([2019]) EWCA Civ 1599). relates to the alleged tracking of personal data by Google of 4.4 2) allows the court, exercising its discretion, to direct that a person may not act as a representative.

Personal data 90

Personal data GDPR Privacy Data Privacy 90

Data Matters

DECEMBER 2, 2019

On 4 November 2019, the European Data Protection Board (EDPB), the EU-wide data supervisory authority, held a stakeholders’ event on data subject rights under the GDPR. Stakeholders noted some requests were too broad, in turn, making it difficult to identify which data subject right was being exercised (e.g.,

GDPR 68

GDPR Compliance Personal data Access 68

Hunton Privacy

FEBRUARY 25, 2020

With this Recommendation, the Belgian DPA aims to clarify the complex rules relating to the processing of personal data for direct marketing purposes, including by providing practical examples and guidelines to the different stakeholders involved in direct marketing activities. Purchase , Rental and Enrichment of Personal Data.

Marketing 109

Marketing Personal data GDPR Communications 109

Data Protection Report

FEBRUARY 11, 2022

was announced on 21 August 2019. of the TCF in 2019, however, various EU data protection authorities have received numerous complaints from organisations across the EU in respect of the use of personal data in the RTB component of programmatic advertising. Since the inception of v2.0

GDPR 90

GDPR IT Personal data Compliance 90

Hunton Privacy

APRIL 20, 2020

On April 15, 2020, the French Data Protection Authority (the “CNIL”) published the final version of its standard (“Referential”) concerning the processing of personal data for core Human Resources (“HR”) management purposes. That Referential was adopted following a public consultation launched by the CNIL on April 11, 2019.

Personal data 71

Personal data GDPR Compliance Archiving 71

Hunton Privacy

DECEMBER 13, 2019

On December 11, 2019, the European Data Protection Board (“EDPB”) published its draft guidelines 5/2019 (the “Guidelines”) on the criteria of the right to be forgotten in search engine cases under the EU General Data Protection Regulation (“GDPR”).

Personal data 61

Personal data GDPR Privacy IT 61

Thales Cloud Protection & Licensing

SEPTEMBER 12, 2019

Now that it’s September, the excitement is beginning to build in earnest for the 2019 Rugby World Cup. Japan, the host country of both the 2019 Rugby World Cup and the 2020 Summer Olympic Games, is well-aware of these previous incidents. We urge you to take precautions to protect your personal information when you are on the Internet.

Security 105

Security IoT Personal data Military 105

Hunton Privacy

JULY 15, 2020

After receiving multiple complaints from data subjects, the Dutch DPA investigated BKR’s management of data subjects’ access requests. In addition, Recital 59 of the GDPR clearly states that controllers should offer the possibility of accessing personal data in an electronic form when data is processed electronically.

Compliance 65

Compliance GDPR Personal data Paper 65

Hunton Privacy

FEBRUARY 3, 2022

The Belgian DPA started an investigation into IAB Europe after receiving several complaints since 2019 regarding the TCF. The Belgian DPA rejected this argument and found that IAB Europe acts as a data controller with respect to the TCF and therefore can be held responsible for violations of the GDPR. Background.

GDPR 111

GDPR Personal data Marketing IT 111

Security Affairs

DECEMBER 24, 2019

The exercises aimed at testing and ensuring the integrity and the security of Russia’s Internet infrastructure, so-called RuNet. “According to Sokolov, several scenarios were worked out during the exercises. One of them is checking the integrity and security of the Internet as a result of external negative influences.”

IT 84

IT Communications Government Personal data 84

DLA Piper Privacy Matters

NOVEMBER 17, 2019

The crackdown is taking place during November and December 2019, so businesses operating apps in China must take urgent action or else face sanctions. Supervised examinations by the authorities (MIIT) and third party assessors against frequently downloaded apps: from 11 to 30 November 2019.

Personal data 40

Personal data Compliance Data collection Privacy 40

DLA Piper Privacy Matters

FEBRUARY 15, 2019

Under European data protection law, journalists enjoy some regulatory exemptions when processing personal data for journalistic purposes, balancing the right to the protection of personal data with the principle of freedom of expression. In its judgment of 14 February 2019 in the Sergejs Buivids v.

GDPR 75

GDPR Personal data Privacy Compliance 75

Hunton Privacy

MARCH 8, 2019

On February 26, 2019, the European Data Protection Board (the “EDPB”) presented its first overview of the GDPR’s implementation and the roles and means of the national supervisory authorities to the European Parliament (the “Overview”). 23 DPAs reported an increase in their regulatory budgets for 2018-2019.

GDPR 88

GDPR Data breaches Personal data Marketing 88

Security Affairs

APRIL 23, 2019

The website offers any kind of fitness articles, exercises, workouts, and supplements. The company confirmed it has no evidence that personal customer information was accessed or misused, as a precautionary measure the company is notifying all current and former users and customers. Review your accounts for suspicious activity.

Passwords 73

Passwords Security Retail Personal data 73

Hunton Privacy

MARCH 19, 2019

On March 12, 2019, the European Data Protection Board (“EDPB”) adopted an opinion on the interplay between the EU Directive on Privacy and Electronic Communications (“the ePrivacy Directive”) and the General Data Protection Regulation (“GDPR”) (the “Opinion”). Competence, tasks and powers of EU DPAs.

GDPR 45

GDPR Personal data Communications Government 45

DLA Piper Privacy Matters

FEBRUARY 11, 2020

The DPA lists three topics of high social significance and wishes to ensure compliance by data controllers and processors. health data, biometric data,…) and, if so, make sure it is processed lawfully. health data, biometric data,…) and, if so, make sure it is processed lawfully. 3 SOCIETAL THEMES IN THE PICTURE.

IT 81

IT GDPR Compliance Personal data 81

Managing Your Information

JANUARY 8, 2019

Tkm Consulting is delighted to announce new data protection courses are available for 2019. Tkm Consulting is an accredited training partner for the BCS (The Chartered Institute for IT) and we have added their data protection professional certifications to our training portfolio. What courses are available? VM – Dec 18.

Compliance 28

Compliance GDPR Information governance Risk 28

Managing Your Information

JANUARY 8, 2019

Tkm is delighted to announce new data protection courses are available for 2019! Tkm is now an accredited training partner for the BCS and has added their data protection professional certifications to our training portfolio. The post BCS Data Protection Courses Available for 2019! What courses are available?

Compliance 28

Compliance GDPR Information governance Risk 28

DLA Piper Privacy Matters

OCTOBER 17, 2022

A recent decision by the Irish Data Protection Commission (“ DPC “) imposing a record €405 million fine provides clarification on the lawfulness of processing children’s personal data in accordance with the legal bases of ‘performance of contract’ and ‘legitimate interest’. Background. Analysis of Article 6(1).

GDPR 97

GDPR Personal data Risk Compliance 97

Data Matters

SEPTEMBER 24, 2019

The GDPR was designed to harmonize data protection laws across Europe and to protect EU residents’ data privacy rights; and, its coming triggered significant privacy and data protection compliance activities amongst organizations doing business in the EU and working with the personal data of EU residents.

Personal data 66

Personal data GDPR Data Privacy Privacy 66

Hunton Privacy

JULY 26, 2019

The European Data Protection Board (the “EDPB”) recently adopted its Guidelines 3/2019 on processing of personal data through video devices (the “Guidelines”). Although the Guidelines provide examples of data processing for video surveillance, these examples are not exhaustive.

GDPR 57

GDPR Personal data Privacy Compliance 57

Hunton Privacy

JANUARY 23, 2019

On January 23, 2019, the European Commission announced that it has adopted its adequacy decision on Japan (the “Adequacy Decision”). According to the announcement, Japan has adopted an equivalent decision and the adequacy arrangement is applicable with immediate effect.

Personal data 54

Personal data Access Privacy Security 54

DLA Piper Privacy Matters

MAY 29, 2020

80 GDPR is in conflict with member state law which allows consumer protection associations and competitors to take action against infringements of the GDPR irrespective of the violation of subjective rights of individuals and without a mandate from the data subject. Background. 8(3)(3) in conjunction with sec. Decision of the BGH.

GDPR 52

GDPR Personal data Marketing IT 52

Data Protection Report

APRIL 12, 2019

UFC asked the judges to declare Google’s policies unlawful and abusive, on the grounds that they did not respect consumers’ privacy and personal data. Accordingly, the judges ruled that such personal data constituted goods from which Google derived an economic benefit in return for the service provided to users.

Privacy 40

Privacy Personal data IT Data Privacy 40

DLA Piper Privacy Matters

JANUARY 21, 2019

On 12 December 2018, the French Government issued an ordinance [1] finalizing, at the legislative level [2] , the alignment of the French Data Protection Law (“FDPL”) with the General Data Protection Regulation [3] (“GDPR”) and the Directive 2016/680 [4]. Following-up the adoption of the GDPR, the French Law No.

GDPR 49

GDPR Personal data Communications Government 49

Privacy and Cybersecurity Law

AUGUST 5, 2020

A DPIA must be meaningful and not a box-ticking exercise. “NumPy” Python vulnerability discovered in 2019). Nevertheless, the principle still needs to be complied with in: Development phase: in the training phase, your organisation needs to consider whether all the data used is necessary (e.g.

Artificial Intelligence 59

Artificial Intelligence GDPR Personal data Compliance 59

Hunton Privacy

DECEMBER 2, 2019

On November 26, 2019, the French Data Protection Authority (the “CNIL”) announced that it had levied a fine of €500,000 on Futura Internationale, a French SME specializing in thermal insulation of private buildings, for various infringements of the EU General Data Protection Regulation (“GDPR”). The CNIL’s Decision.

Marketing 49

Marketing GDPR Personal data Compliance 49

Hunton Privacy

JUNE 23, 2020

In particular, the CNIL found that essential information about the data processing (such as the purposes, the data retention periods or the types of personal data processed for ad personalization) was spread across several pages, and that users sometimes needed to complete up to six actions to obtain that information.

GDPR 75

GDPR Personal data Access IT 75

Data Matters

FEBRUARY 26, 2020

ia de Proprietari bloc M5A-ScaraA EU:C:2019:1064 ( TK ), the CJEU considered whether the processing carried out by CCTV cameras was necessary and proportionate for the purposes of legitimate interests pursued by the controller. In its recent decision of TK v Asocia?ia

Personal data 66

Personal data Compliance Access Privacy 66

DLA Piper Privacy Matters

APRIL 24, 2020

Of course, the FOIA offence is only available in respect of information held by public authorities, while the offence under the DPA18 relates to personal data and is applicable to all data controllers and those employed by them. report laid before Parliament on 28 January 2019.

FOIA 66

FOIA Personal data GDPR Access 66

IT Governance

MARCH 11, 2019

Technically, this is the law that replaces the DPA 1998, and both it and the GDPR currently apply to all organisations in the UK that process personal data. Part 2: General data processing. It should be read alongside the GDPR by every UK organisation that processes personal data. Wait… what?

GDPR 64

GDPR Personal data Compliance Government 64