Hunton Privacy

MAY 24, 2021

On May 20, 2021, the Belgian Data Protection Authority (“Belgian DPA”), as the lead authority (in collaboration with two co-reviewing authorities), announced that it had approved the EU Data Protection Code of Conduct for Cloud Service Providers (the “EU Cloud CoC”). e) of the GDPR.

Cloud 131

Cloud GDPR Compliance Personal data 131

Hunton Privacy

JANUARY 24, 2022

The Austrian DPA ruled that the use of Google Analytics cookies by the website operator violates both Chapter V of the EU General Data Protection Regulation (“GDPR”), which establishes rules on international data transfers, and the Schrems II judgment of the Court of Justice of the European Union. intelligence agencies under U.S.

Analytics 83

Analytics GDPR Personal data Data collection 83

Data Matters

JULY 22, 2020

Considering these new circumstances, the imposition of new costs in connection to the LGPD may not be welcomed by market actors, even if those costs were foreseeable when the law was initially published. 959/2020 (“MP 959”), postponing the enforcement of the LGPD’s general provisions, previously scheduled for August 15, 2020, to May 3, 2021.

Marketing 66

Marketing Compliance Personal data GDPR 66

Thales Cloud Protection & Licensing

AUGUST 30, 2023

The bright side of data privacy compliance: 5 value-driven opportunities for retailers madhav Thu, 08/31/2023 - 05:20 Failing to keep up with data privacy legislations, such as General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA) can harm a brand’s bottom-line and public reputation.

Retail 71

Retail Data Privacy Compliance Privacy 71

Hunton Privacy

APRIL 27, 2021

On April 23, 2021, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth submitted its response to the European Data Protection Board (“EDPB”) consultation on draft guidelines on virtual voice assistants (the “Guidelines”). The Guidelines were adopted on March 12, 2021 for public consultation.

GDPR 77

GDPR Artificial Intelligence Privacy Personal data 77

DLA Piper Privacy Matters

MAY 5, 2021

The GDPR has clearly driven public awareness of data protection and privacy and expectations have increased accordingly. Shareholders and stock markets react when incidents happen. Regulatory expectation. The public expect their personal data and privacy to be protected.

Security 105

Security Personal data GDPR Privacy 105

Data Protection Report

FEBRUARY 14, 2022

The French Data Protection Authority (the “ CNIL ”) continues its campaign against companies that do not respect the rules relating to cookies and other trackers, which the CNIL has previously reminded the market about in multiple communications and decisions. CNIL’s role to issue practical illustrations under GDPR. High sanctions.

GDPR 115

GDPR Compliance Communications Personal data 115

DLA Piper Privacy Matters

SEPTEMBER 15, 2021

By the end of the 2018, the Spanish Parliament belatedly completed the framework provided by EU’s GDPR approving a new Data Protection Act. All this local gold-plating may have now been blown-out by a decision of the Spanish Supreme Court dated 14 September 2021. This implies an earthquake in the Spanish privacy market.

GDPR 130

GDPR Privacy Government Personal data 130

Hunton Privacy

SEPTEMBER 15, 2021

On September 10, 2021, the UK Government Department for Digital, Culture, Media & Sport (“DCMS”) launched a consultation on its proposed reforms to the UK data protection regime. Organizations are encouraged to provide input on a range of data protection proposals, some of which are outlined below.

GDPR 109

GDPR Personal data Risk Communications 109

DLA Piper Privacy Matters

APRIL 19, 2021

The GDPR imposes restrictions on the transfer of personal data to a ‘third country’ unless that country benefits from (i) an adequacy decision; (ii) appropriate safeguards (e.g. standard contractual clauses ( SCCs )); or (iii) one of the limited exceptions under Article 49 GDPR. adequacy decision. Background. EDPB Opinions.

Personal data 105

Personal data GDPR Access Marketing 105

Hunton Privacy

OCTOBER 29, 2020

The notice requires Experian to make fundamental changes to its offline direct marketing practices, and was issued after the ICO undertook a two-year investigation into the use of personal data by data broking businesses Experian, Equifax and TransUnion.

Personal data 81

Personal data Marketing GDPR Compliance 81

DLA Piper Privacy Matters

JANUARY 28, 2022

Fully refreshed and updated for 2022 we have new jurisdictional entries that now includes Sri Lanka and the Abu Dhabi Global Market Free Zone who launched their new data protection regime last year. Looking back on 2021, the privacy and data protection landscape continues to evolve at pace. billion) in fines since 28 January 2021.

GDPR 98

GDPR Privacy Data breaches Personal data 98

Hunton Privacy

JANUARY 29, 2021

On January 19, 2021, the UK Information Commissioner’s Office (“ICO”) published its analysis of the application of the UK General Data Protection Regulation (the “UK GDPR”) to transfers from UK-based firms or branches that are registered, required to be registered or otherwise regulated by the U.S. exchange or market.

GDPR 79

GDPR Compliance Marketing Security 79

eSecurity Planet

JANUARY 21, 2021

Data privacy regulations like the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) can be hard to navigate for businesses of any size, but GRC tools can simplify and streamline compliance with all of the requirements. Audit management. Compliance management. Risk scoring. End user experience.

Compliance 67

Compliance Risk Government Retail 67

Hunton Privacy

AUGUST 20, 2021

On August 20, 2021, China’s 13 th Standing Committee of the National People’s Congress passed the Personal Information Protection Law (the “PIPL”). It is modeled, in part, on other jurisdictions’ omnibus data protection regimes, including the EU General Data Protection Regulation (“GDPR”). Application of the PIPL.

GDPR 111

GDPR Government Access Security 111

DLA Piper Privacy Matters

FEBRUARY 28, 2022

The Data Protection Commission (DPC) has published its 2021 Annual Report , highlighting key observations, emerging guidance, and large-scale inquiries and decisions of 2021. The DPC received a total of 6,549 valid notifications of personal data breaches in 2021. ePrivacy Enforcement – Website Cookies & Marketing.

Financial Services 97

Financial Services Data breaches Personal data Compliance 97

Thales Cloud Protection & Licensing

NOVEMBER 15, 2021

Tue, 11/16/2021 - 06:15. On August 26, 2021, Wiz announced it had gained "complete unrestricted access to the accounts and databases of several thousand Microsoft Azure customers, including many Fortune 500 companies" via a loophole created by "a series of flaws in a Cosmos DB feature." Krishna Ksheerabdhi | VP, Product Marketing.

Encryption 143

Encryption Cloud Access Privacy 143

Data Matters

SEPTEMBER 22, 2021

Accordingly, the MHRA has opened its anticipated Consultation on the future regulation of medical and in vitro diagnostic (IVD) devices in the United Kingdom, setting out the upcoming legislative changes, which runs until November 25, 2021. A summary table of the work packages is below/ at the end of the article.].

Marketing 86

Marketing Artificial Intelligence Risk Access 86

Thales Cloud Protection & Licensing

MARCH 1, 2021

Tue, 03/02/2021 - 07:06. However, the level of the impact depends on the geography and the vertical of each organization and the strategic privacy planning they have done for sustaining compliance with GDPR. Data protection is a market differentiator, because consumers care about their data and how it is being handled by companies.

GDPR 142

GDPR Compliance Privacy Cloud 142

eSecurity Planet

FEBRUARY 14, 2023

The vision was to automate security and compliance across 14 frameworks, including SOC 2, ISO 27001, HIPAA and GDPR. GRC Market Defies Downturn There are some powerful drivers for the compliance and security automation market. OneTrust is another company benefiting from the booming compliance market, rocketing to a $5.3

Compliance 121

Compliance Security Cybersecurity Marketing 121

IT Governance

MAY 27, 2021

For example, the report revealed that police stations suffered 299 data breaches on average between January 2016 and April 2021. Indeed, we reported in 2017 that the Metropolitan Police handed the addresses of 30,000 London gun owners to a direct mail marketing agency.

Data breaches 124

Data breaches Data Privacy Marketing Privacy 124

Data Matters

MARCH 10, 2021

On February 10, 2021, the Council of the European Union (which includes representatives of the European Union (EU) member states, hereinafter Council) reached an agreement on the ePrivacy Regulation proposal that governs the protection of privacy and confidentiality of electronic communications services (ePrivacy Regulation).

GDPR 66

GDPR Metadata Communications Privacy 66

DLA Piper Privacy Matters

FEBRUARY 16, 2021

To align with the GDPR, metadata collected for one purpose can be further processed for a compatible purpose. Compatibility is to be determined using a non-exhaustive list of criteria which resemble those of the GDPR. 6 (1)(b) GDPR added as an additional legal basis for processing metadata. Direct marketing and SPAM.

Metadata 86

Metadata GDPR IT Communications 86

DLA Piper Privacy Matters

FEBRUARY 22, 2022

As a reminder, in 2021, the CNIL’s priority topics were (i) the cybersecurity of the French websites, (ii) the security of the health data and (iii) compliance with the rules applicable to cookies and other trackers further to its recommendations and guidelines released in March 2021. Direct marketing. Use of cloud computing.

IT 105

IT Cloud Personal data Data breaches 105

Thales Cloud Protection & Licensing

APRIL 14, 2021

Thu, 04/15/2021 - 05:17. Just when you thought that you had a working solution compliant with General Data Protection Regulation (GDPR), for sharing data between EU and non-EU countries as part of your regular business communications, the Schrems II ruling appears out of nowhere and moves the goalposts! Encryption. Compliance.

GDPR 90

GDPR Compliance Encryption Privacy 90

IT Governance

OCTOBER 21, 2021

This campaign is part of Cybersecurity Awareness Month 2021 , which is focused on empowering individuals and organisations to “own their role in protecting their part of cyberspace”. No matter what area of cyber security you move into, you will almost certainly come across the GDPR. UK skills gap. Build your cyber security career.

Security 110

Security Information Security GDPR Data Privacy 110

DLA Piper Privacy Matters

MAY 23, 2023

For Meta, the decision has resulted in a record administrative fine of €1.2bn, an order to suspend further transfers of EEA personal data to the US within five months, and an order to cease all unlawful processing of EEA personal data transferred to the US in violation of GDPR, within six months.

Personal data 59

Personal data GDPR Risk Privacy 59

Thales Cloud Protection & Licensing

JUNE 24, 2021

Thu, 06/24/2021 - 07:22. In the following paragraphs we will examine use cases where FIDO2 simplifies compliance with privacy and security regulations, namely GDPR, CCPA and PSD2. Compliance with GDPR and CCPA. Sarah Lefavrais | IAM Product Marketing Manager. As such, FIDO2 can become an enabler for regulatory compliance.

Authentication 71

Authentication Compliance Personal data GDPR 71

Data Matters

JUNE 30, 2020

The discussion focused largely on the Commission’s report on two years of the GDPR which was issued on 24 June 2020. Key takeaways from the Sidley Monitor-Side Chat include: COVID-19 – “stress test” and a “test case” for the GDPR, DPAs and the European Data Protection Board (“EDPB”). International Transfer Mechanisms Update.

Privacy 66

Privacy GDPR Cybersecurity Personal data 66

Data Protection Report

FEBRUARY 15, 2021

On 10 February 2021, the Council of the EU’s Permanent Representatives Committee (COREPER) finally adopted an agreed position on the ePrivacy Regulation, allowing the legislation to progress to the next stage of negotiation, namely the trilogue between the Council, the European Parliament and the European Commission. Direct marketing.

Metadata 126

Metadata GDPR Privacy Marketing 126

DLA Piper Privacy Matters

FEBRUARY 10, 2021

A judgment handed down following a costs and case management conference in Weaver [2021] EWHC 217 (QB) appears to have struck a blow to claimant solicitors seeking to pursue group-action in the UK. distress”) were made recoverable – a concept ultimately embodied in the UK-GDPR and the Data Protection Act 2018. Background.

Marketing 105

Marketing Data breaches GDPR Personal data 105

Hunton Privacy

OCTOBER 24, 2022

Clearview AI markets access to its image database, which consists of a search engine where a person can be searched by using a picture. Under the EU General Data Protection (the “GDPR”), biometric data qualifies as sensitive personal data and the processing thereof requires additional protection.

Data collection 72

Data collection Personal data GDPR Marketing 72

Data Matters

APRIL 23, 2021

On April 21, 2021, the European Commission ( EC ) issued its eagerly awaited draft proposal on the EU Artificial Intelligence Regulation ( Draft AI Regulation ) – the first formal legislative proposal regulating Artificial Intelligence ( AI ) on a standalone basis. Who Does the Draft AI Regulation Apply to?

Artificial Intelligence 72

Artificial Intelligence GDPR Risk Marketing 72

Data Matters

MAY 3, 2021

In March 2021, the European Commission released a proposal for the creation of a “Digital Green Certificate,” which will allow EU citizens to travel easier throughout the EU during the COVID-19 pandemic. Based on the revised text of the Council, the European Parliament is expected to adopt its position at its plenary on April 26-29, 2021.

Personal data 66

Personal data Data Privacy Privacy Data collection 66

Thales Cloud Protection & Licensing

AUGUST 3, 2021

Tue, 08/03/2021 - 09:44. Financially motivated actors target medical records because they are lucrative assets on the dark market. In fact, the Thales 2021 Data Threat Report reveals that: Only 33% of healthcare providers encrypt 41-50% of their data in the cloud, much better than the global 17% of survey respondents.

IoT 87

IoT Encryption Cloud Authentication 87

DLA Piper Privacy Matters

FEBRUARY 23, 2022

This means that the Data Act would further regulate personal data in addition to the GDPR. It would also extend certain GDPR-like obligations to non-personal data, such as data portability and data transfer restrictions for non-personal data, as well as introduce completely new rules.

GDPR 97

GDPR Personal data IoT Access 97

Thales Cloud Protection & Licensing

NOVEMBER 22, 2021

Tue, 11/23/2021 - 06:13. Digital-only banks and Fintechs are expected to grow “at a compound annual rate of about 23.41%” from 2021-2026. Digital-only banks and Fintechs are expected to grow “at a compound annual rate of about 23.41%” from 2021-2026. Marcelo DeLima | Senior Manager, Americas Channel Marketing.

Digital transformation 71

Digital transformation Financial Services Customer Experience Risk 71