IT Governance

NOVEMBER 4, 2024

There are often problems with the lawfulnessof personal data processing, largely due to over-reliance on consent. How are organisations failing to process personal data lawfully under the GDPR, and how can they address this while improving their day-to-day business operations? I sat down with Andy to find out more.

Personal data 70

Personal data GDPR Marketing Archiving 70

IBM Big Data Hub

JANUARY 22, 2024

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Any company operating in the EU or handling EU residents’ data must adhere to GDPR requirements. However, GDPR compliance is not necessarily a straightforward matter.

GDPR 79

GDPR Compliance Personal data Privacy 79

IT Governance

FEBRUARY 16, 2024

Expert tips from Alan Calder Alan is the Group CEO of GRC International Group PLC, the parent company of IT Governance, and is an acknowledged international security guru. What are your top tips for ensuring compliance with the GDPR and similar laws? There are still more than ten months to go in 2024.

Data Privacy 108

Data Privacy GDPR Compliance Privacy 108

Data Protection Report

SEPTEMBER 23, 2021

The declining cost of electronic data storage may have caused some company executives to conclude that retaining personal data forever is “cheap.” The matter involved one of France’s largest insurers, SGAM AG2R LA MONDIALE, which was subject to an inspection by the French data protection authority (the CNIL), in 2019.

Personal data 111

Personal data Insurance GDPR Record destruction 111

Data Protection Report

FEBRUARY 25, 2020

Outbreak of the coronavirus and personal data privacy. There have been several data breach incidents which have given rise to concerns over privacy and potential discrimination against people from Wuhan and Hubei Province. Highlights of the CAC Circular.

Personal data 133

Personal data Big data Data Privacy Data breaches 133

Data Protection Report

APRIL 30, 2024

The claims related to the company’s sharing personal data without consumer consent and making it very difficult for consumers to cancel their subscriptions to this telehealth service. The complaint alleged that the company’s data handling practices also resulted in unauthorized disclosures of personal information.

Personal data 85

Personal data Privacy Information governance Compliance 85

DLA Piper Privacy Matters

AUGUST 22, 2023

To add to the compliance burden, new mandatory, periodic and detailed data protection compliance audits have now been proposed in China, with measures beyond the usual governance/compliance audit compliance steps expected under other data protection frameworks, and a duty to report the audit results to the China data authorities.

Compliance 75

Compliance Personal data Government Access 75

eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR-style data privacy laws came to the U.S.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

Collibra

NOVEMBER 5, 2024

Our exclusive webinar with Atrak Yadegari from Deloitte and Guido Bilstein from Collibra explored the key requirements of the EU AI Act and fast-track strategies to accelerate your compliance readiness. These models must comply with rules for data governance, technical documentation and risk management throughout their lifecycle.

Compliance 40

Compliance Risk Government Privacy 40

IT Governance

JULY 4, 2024

Expert insight from a data privacy trainer and DPO “Organisations tend to overcomplicate GDPR [General Data Protection Regulation] compliance.” Specifically for GDPR compliance , records of processing activities, also known as ‘ROPAs’, are one compliance activity that tends to be overcomplicated. What is a ROPA?

GDPR 93

GDPR Compliance Data Privacy Privacy 93

DLA Piper Privacy Matters

JUNE 27, 2023

Global flows of personal data have been a source of geopolitical concern for many years now. To date, these compliance challenges were essentially limited to personal data processing, so some organisations and sectors had to do more than others.

Personal data 52

Personal data Data Privacy GDPR Compliance 52

IT Governance

SEPTEMBER 17, 2024

If you can reduce the risk of data breaches and card fraud by reducing your scope, you can reduce your compliance burden to as little as 21 sub-requirements ( SAQ P2PE ). Let’s look at eight ways you can reduce your CDE (cardholder data environment) to reduce your PCI scope. Find out more Need other PCI DSS support?

Compliance 95

Compliance Encryption e-Discovery Access 95

Data Protection Report

FEBRUARY 28, 2020

The Personal Data Protection Act B.E. 2562 (2019) ( PDPA ) was published on 27 May 2019 in Thailand’s Government Gazette and became effective the following day. Definition of Personal Data. Person ” means a natural person. When monitoring of data subjects’ behavior is taken place in Thailand.

Personal data 93

Personal data Compliance Privacy Access 93

Thales Cloud Protection & Licensing

MAY 22, 2024

The regulation didn't just introduce new rules—it upended the entire approach to data privacy. Designed to safeguard the personal data of EU citizens, it introduced a paradigm shift towards a privacy-first approach. Digital enterprises found themselves compelled to adapt and navigate a new standard of data handling.

GDPR 62

GDPR Compliance Privacy Personal data 62

Collibra

JANUARY 14, 2022

The concern of protecting this data, especially personal data , has been around for quite some time. The sheer volume of data and the increased proliferation of cloud technology has brought this concern to the fore again. The intersection of data quality and compliance. Data quality is its fitness for use.

Compliance 52

Compliance Government GDPR Personal data 52

DLA Piper Privacy Matters

APRIL 11, 2022

Given these higher financial penalties, organisations collecting, using or disclosing personal data in Singapore are recommended to carefully review their existing data protection programmes and processes to ensure compliance with the PDPA. of personal data); and. of personal data); and.

Personal data 97

Personal data Compliance Cybersecurity Government 97

Thales Cloud Protection & Licensing

AUGUST 29, 2023

The UK and the US Build a ‘Data Bridge’ to Facilitate Personal Data Movements andrew.gertz@t… Tue, 08/29/2023 - 13:41 Modern-day business transactions heavily rely on international data transfers. The new “data bridge” would extend the EU-US Data Privacy Framework.

Personal data 62

Personal data Data Privacy Privacy GDPR 62

Data Matters

SEPTEMBER 23, 2021

If a company has already been GDPR compliant, its data privacy compliance system can basically work in China, while certain localizations are necessary in response to unique requirements under PIPL. In particular, a company should pay attention to the following differences between PIPL and GDPR: Data localization.

Data Privacy 94

Data Privacy Compliance Privacy Personal data 94

Thales Cloud Protection & Licensing

FEBRUARY 1, 2023

How to Address the Requirements of Personal Data Protection (PDP) Law of Indonesia divya Thu, 02/02/2023 - 06:35 In response to the increased number of attacks targeting the personal data of millions of Indonesian citizens, the government passed the first Personal Data Protection (PDP) Law in 2022.

Personal data 71

Personal data Encryption Data breaches Authentication 71

DLA Piper Privacy Matters

AUGUST 22, 2023

The Draft Measures propose to introduce or flesh out other compliance requirements contained in the PIPL. This aligns with controls to monitor recipients under C2C and C2P transfers in other data protection laws. Governance: a data controller must establish a proper internal data protection framework.

Compliance 98

Compliance Personal data Privacy Government 98

IT Governance

NOVEMBER 17, 2020

Under the GDPR (General Data Protection Regulation) , all personal data breaches must be recorded by the organisation and there should be a clear and defined process for doing so. In this blog, we take a look at the scenarios in which data protection breaches in schools must be reported. When must breaches be reported?

Personal data 105

Personal data Data breaches Data collection GDPR 105

IBM Big Data Hub

MAY 9, 2024

The healthcare industry faces arguably the highest stakes when it comes to data governance. For starters, healthcare organizations constantly encounter vast (and ever-increasing) amounts of highly regulated personal data. healthcare, managing the accuracy, quality and integrity of data is the focus of data governance.

Government 66

Government GDPR Compliance Analytics 66

IT Governance

NOVEMBER 3, 2022

You might remember that several months and a handful of prime ministers ago, the government proposed an overhaul of data protection law. The efforts stemmed from complaints over the GDPR (General Data Protection Regulation) , which was adopted by the UK on the precipice of Brexit. However, not everyone felt the same way.

Government 105

Government GDPR Personal data Compliance 105

IT Governance

AUGUST 8, 2024

Similarly, few people enjoy complex compliance, with documentation scattered in many places, giving you a headache when anything GDPR (General Data Protection Regulation) crops up. That needn’t even be an investigation or audit – a data subject simply exercising their rights might already cause problems.

GDPR 52

GDPR Compliance Personal data Risk 52

IT Governance

MAY 25, 2023

Given the scale and nature of its operations, Meta is obviously something of a special case, but the wider implications for personal data transfers from the EU to the US are clear: this case is surely going to be another nail in the coffin of the new EU-US DPF (Data Privacy Framework).

GDPR 89

GDPR Compliance Personal data Data Privacy 89

Data Protection Report

OCTOBER 12, 2020

Following the Singapore Ministry of Communications and Information (MCI) and the Personal Data Protection Commission of Singapore (PDPC) public consultation in May this year (Public Consultation), the Personal Data Protection (Amendment) Bill (Bill) was introduced and had its first reading in Parliament on 5 October 2020.

Personal data 97

Personal data Data breaches Compliance Communications 97

Hunton Privacy

AUGUST 10, 2023

On August 9, 2023, India’s upper house ( i.e. , Rajya Sabha) passed the Digital Personal Data Protection Bill (“DPDPB”), two days after India’s lower house ( i.e. , Lok Sabha) passed the legislation. The DPDPB now heads to India President Droupadi Murmu for signature.

Personal data 52

Personal data Data breaches Government Access 52

Collibra

JANUARY 28, 2019

For companies, getting data privacy right is no longer just a compliance exercise – a box to be ticked. Instead, having a robust approach to managing personal data well is beginning to be seen as an important competitive advantage for organizations. Today – January 28 – is Data Privacy Day around the globe.

Personal data 40

Personal data Compliance Data Privacy Data breaches 40

Thales Cloud Protection & Licensing

FEBRUARY 18, 2021

Key steps on the road to LGPD compliance. Brazil, the largest country in both South America and Latin America, released a data privacy law bringing new business opportunities, especially in the international domain. Reporting: demonstrates compliance and facilitates the administrative procedures required by LGPD (Article 50).

Compliance 98

Compliance Unstructured data Personal data Big data 98

Hunton Privacy

AUGUST 8, 2022

In July 2022, Maria Ostashenko from ALRUD Law Firm reports that the Russian Parliament passed, and the President of the Russian Federation signed into law, major reforms in data protection and information governance. The reforms include: Significant changes to Federal Law No.

Information governance 106

Information governance Government Personal data Data breaches 106

eSecurity Planet

SEPTEMBER 21, 2024

The landscape of cybersecurity laws and regulations today is set to undergo significant changes, impacting businesses, government entities, and individuals alike. Let’s explore what to expect from the upcoming regulations, provide insights into critical federal and state laws, and offer practical compliance and risk management strategies.

Cybersecurity 120

Cybersecurity Computer and Electronics Compliance Privacy 120

Data Protection Report

JUNE 4, 2021

The Hong Kong Government is proposing amendments to the Personal Data (Privacy) Ordinance (the “ PDPO ”) to combat doxxing acts. public display) personal data of a data subject. Also, the new provisions not only protect the data subject, but also offer protection to his/her immediate family members.

Personal data 98

Personal data Data Privacy Privacy Paper 98

Data Protection Report

JUNE 26, 2023

The Guidance sits alongside the ICO’s recommendation that organisations should, if they haven’t already, start using PETs to share personal data safely, securely and anonymously. It focuses on how PETs can help achieve data protection compliance but keeps the description of the PETs themselves quite high level.

Personal data 52

Personal data Privacy Security Compliance 52

erwin

APRIL 2, 2021

How can companies protect their enterprise data assets, while also ensuring their availability to stewards and consumers while minimizing costs and meeting data privacy requirements? Data Security Starts with Data Governance. Lack of a solid data governance foundation increases the risk of data-security incidents.

Government 106

Government GDPR Risk Metadata 106

DLA Piper Privacy Matters

NOVEMBER 16, 2021

The draft Network Data Security Management Regulation (“ Draft Regulation ”) was published for consultation on 14 November 2021, and is very wide-ranging in the compliance areas covered. This is a significant reminder to organisations to start data mapping and assessment of all China data sooner rather than later.

Compliance 118

Compliance Personal data Security Risk 118

AIIM

JUNE 21, 2019

In this post, I'll be focusing on Domain 4, Automating Governance and Compliance. This domain is important because it focuses on the compliance and risk side of information management. Domain 4: Automating Governance and Compliance. But data breaches are almost always preventable.

Compliance 80

Compliance Government Records Management Digital preservation 80

Data Protection Report

JUNE 22, 2022

UK GDPR Reform: government publishes response to consultation – likely to form basis of forthcoming UK Data Reform Bill. The Department for Culture, Media and Sport (DCMS) has finally published the UK government’s long-awaited response to the consultation on the future of the UK data protection regime.

GDPR 144

GDPR Government Personal data Risk 144