IT Governance

JUNE 25, 2018

The EU General Data Protection Regulation (GDPR) has big implications for marketing departments and how they can advertise products and services. Marketing personnel will be pleased that direct marketing comes under “legitimate interest”, one of the six lawful bases for processing. Marketing based on consent.

GDPR 42

GDPR Marketing Personal data Privacy 42

Hunton Privacy

MARCH 29, 2022

On March 24, 2022, the European Union unveiled the final text of the Digital Markets Act (the “DMA”). billion in annual revenue and market capitalization of €65 billion to €7.5 billion in annual revenue and market capitalization of €75 billion. The DMA imposes a set of obligations on “gatekeeper” platforms.

Marketing 108

Marketing GDPR Compliance Paper 108

IT Governance

MARCH 30, 2023

Article 17 of the GDPR (General Data Protection Regulation) plays a distinctive yet essential role in data protection law. Failure to fulfil this requirement is considered a serious breach and could be penalised under the GDPR’s upper tier of fines of €20 million (£17.5 What is the right to erasure?

GDPR 96

GDPR Personal data Compliance Government 96

Hunton Privacy

NOVEMBER 23, 2021

On November 19, 2021, the European Data Protection Board (“EDPB”) published its draft Guidelines 05/2021 (the “Guidelines”) on the interplay between the application of Article 3 of the EU General Data Protection Regulation (“GDPR”), which sets forth the GDPR’s territorial scope, and the GDPR’s provisions on international data transfers.

GDPR 125

GDPR Personal data Marketing Government 125

IT Governance

FEBRUARY 9, 2021

If your marketing agency is under the impression that cyber security is strictly an IT issue, you should think again. Effective security is a company-wide commitment, and marketers play one of the most crucial roles. So, what should marketing agencies do to reduce the risk of cyber attacks and protect their reputation?

Marketing 108

Marketing Security GDPR Privacy 108

IT Governance

JULY 2, 2020

What is the GDPR? First, the UK has implemented the UK DPA (Data Protection Act) 2018 , which adopts the GDPR into national law. Second, if you process EU residents’ personal data, the GDPR still applies. Does the GDPR apply to small businesses? What does the GDPR mean for my business? A quick overview.

GDPR 111

GDPR Personal data Data breaches Compliance 111

Hunton Privacy

DECEMBER 7, 2022

The UK Information Commissioner’s Office (“ICO”) recently published a package of detailed guidance and checklists for direct marketing activities. PECR applies to direct marketing activities even where personal data is not involved.

Marketing 108

Marketing Personal data Communications Privacy 108

AIIM

JUNE 26, 2018

Now that the EU General Data Protection Regulation (GDPR) is in force organizations are ramping up their efforts to re-fresh data subject consent obtained prior to GDPR and under the EU Data Protection Directive 95/46/EC by virtue of which opt-out, or implied consent was permissible. Furthermore, the.

GDPR 115

GDPR Privacy Marketing Sales 115

Hunton Privacy

FEBRUARY 25, 2020

On February 10, 2020, the Belgian Data Protection Authority (the “Belgian DPA”) published its Recommendation 1/2020 on data processing activities for direct marketing purposes (the “Recommendation”). Direct marketing is one of the Belgian DPA’s top priorities for the next few years, as indicated in its 2019-2025 Strategic Plan.

Marketing 109

Marketing Personal data GDPR Communications 109

IT Governance

OCTOBER 28, 2020

It has given the organisation nine months to make appropriate changes, with the threat of a GDPR (General Data Protection Regulation) penalty looming. Under the GDPR, organisations must explain to individuals why their personal data is being collected and limit the use of the data to that purpose. Fundamental changes are needed.

GDPR 131

GDPR Personal data Marketing Privacy 131

Hunton Privacy

FEBRUARY 23, 2023

On February 20, 2023, in the case of Experian Limited v The Information Commissioner , the First-Tier Tribunal in the UK (the “ Tribunal ”) ruled on the ICO’s action to require Experian to make changes to how it processes personal data for direct marketing purposes. Experian appealed the enforcement notice, which was heard by the Tribunal.

Marketing 64

Marketing Personal data GDPR Privacy 64

Hunton Privacy

FEBRUARY 3, 2022

The TCF is a GDPR consent solution developed by IAB Europe that has become a widely used approach to collecting and managing consent for targeted advertising cookies in the EU. Audit participating organizations to ensure they comply with the GDPR. Background. Key points from the Belgian DPA’s decisions are summarized below: Lawfulness.

GDPR 111

GDPR Personal data Marketing IT 111

Privacy and Cybersecurity Law

JULY 22, 2020

Two years after the GDPR entered into force, the European Commission ( EC ) issued its first evaluation of the GDPR. Individuals are increasingly aware of the GDPR and their GDPR rights. The GDPR’s international data transfer toolbox. We have addressed the key points from the EC’s evaluation below.

GDPR 105

GDPR Privacy Personal data Compliance 105

Hunton Privacy

NOVEMBER 5, 2020

On October 27, 2020, the UK Information Commissioner’s Office (“ICO”) published a report following its investigation into data protection compliance in the direct marketing data broking sector, alongside its enforcement action against Experian. Three such hubs were the three CRAs audited as part of this investigation.

Marketing 102

Marketing Compliance Personal data GDPR 102

Hunton Privacy

MAY 4, 2020

On April 30, 2020, the French Data Protection Authority (the “CNIL”) published guidance on the extraction of web users’ personal data from online public spaces by web scraping tools and re-use of such data for direct marketing (the “Guidance”). The Guidance was issued following inspections carried out by the CNIL in 2019. Background.

Marketing 108

Marketing GDPR Communications Personal data 108

AIIM

SEPTEMBER 12, 2018

You might also be interested in: The Re-Permissioning Dilemma Under GDPR. Data Privacy and Open Data: Secondary Uses under GDPR. Three Critical Steps for GDPR Compliance. GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law. What Do the GDPR and new Privacy Laws Mean for U.S.

GDPR 94

GDPR Government Information governance Compliance 94

The Guardian Data Protection

MAY 21, 2018

Many companies, acting based on poor legal advice, a fear of fines of up to €20m (£17.5m) and a lack of good examples to follow, have taken what they see as the safest option for hewing to the General Data Protection Regulation (GDPR) : asking customers to renew their consent for marketing communications and data processing.

GDPR 112

GDPR Data Privacy Privacy Communications 112

Hunton Privacy

JUNE 4, 2020

The decision followed a complaint filed by an individual who continued to receive promotional materials from the organization after he had objected to the processing of his contact details for direct marketing purposes and had requested that the organization erase his data from its database. Read the Belgian DPA’s decision (in Dutch).

Marketing 69

Marketing GDPR Communications Personal data 69

HL Chronicle of Data Protection

MARCH 5, 2020

On January 17, The Belgian Data Protection Authority (DPA) published Recommendation no 01/2020 providing Guidance on direct marketing. The Recommendation provides a methodology on how to comply with the General Data Protection Regulation (GDPR) when conducting direct marketing. Definition of Direct Marketing.

Marketing 59

Marketing GDPR Personal data Healthcare 59

Data Matters

FEBRUARY 10, 2020

On 8 January 2020, the UK’s Information Commissioner’s Office ( ICO ) published a draft Direct Marketing Code of Practice ( Draft Code ) for public consultation. The Draft Code is intended to update existing guidance published pre-GDPR and provide clarity on certain important issues.

Marketing 66

Marketing GDPR Personal data Communications 66

Hunton Privacy

APRIL 11, 2019

The European Commission (the “Commission”) has released a long-awaited study on GDPR data protection certification mechanisms (the “Study”). As we previously reported , the Commission announced its intention to look into GDPR certifications in January of 2018. Certifications continue to be a developing area under the GDPR.

GDPR 99

GDPR Marketing Privacy IT 99

Data Protection Report

FEBRUARY 11, 2022

Since then, the Belgian Data Protection Authority ( BDPA ) has taken on the lead role of investigating the TCF’s conformity with the GDPR. The BDPA has given the IAB a maximum period of six months to bring the TCF in line with the provisions of the GDPR. Since the inception of v2.0 IAB’s response.

GDPR 90

GDPR IT Personal data Compliance 90

AIIM

AUGUST 8, 2018

The GDPR’s May 25, 2018 deadline set in motion a mad compliance and security scramble not only for European companies, but also for any company doing business in Europe or with European customers. We just published a new market research report on GDPR. How do they assess their progress in meeting the core requirements of GDPR?

GDPR 85

GDPR Compliance Digital preservation Artificial Intelligence 85

AIIM

JANUARY 17, 2018

GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law. What Do the GDPR and new Privacy Laws Mean for U.S. GDPR Compliance Starts with Data Discovery. GDPR Compliance Starts with Data Discovery. Compliance with GDPR is just a short five months away. The Privacy and Security Dichotomy.

GDPR 84

GDPR Compliance Data collection Privacy 84

AIIM

NOVEMBER 16, 2017

GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law. What Do the GDPR and new Privacy Laws Mean for U.S. 50% of organizations not ready for GDPR. What should your organization budget for GDPR? The Privacy and Security Dichotomy. Privacy by Design: The Intersection of Law and Technology.

GDPR 108

GDPR Compliance Privacy Paper 108

Data Breach Today

JULY 30, 2020

CRM Firm Admits Paying Ransom; Waited Weeks to Notify Victims Despite GDPR Rules Numerous unanswered questions persist concerning a ransomware outbreak at Blackbaud, which provides cloud-based marketing, fundraising and customer relationship management software used by thousands of charities, universities, healthcare organizations and others.

Ransomware 225

Ransomware GDPR Marketing Cloud 225

AIIM

AUGUST 1, 2018

The GDPR’s May 25, 2018 deadline set in motion a mad compliance and security scramble not only for European companies, but also for any company doing business in Europe or with European customers. We just published a new market research report on GDPR. How do they assess their progress in meeting the core requirements of GDPR?

GDPR 84

GDPR Compliance Privacy Marketing 84

Hunton Privacy

NOVEMBER 27, 2018

On November 23, 2018, the European Data Protection Board (“EDPB”) published its long-awaited draft guidelines on the extraterritorial application of the EU General Data Protection Regulation (“GDPR”) (the “Guidelines”). is subject to the GDPR.

GDPR 93

GDPR Personal data Marketing Data collection 93

AIIM

AUGUST 8, 2018

The GDPR’s May 25, 2018 deadline set in motion a mad compliance and security scramble not only for European companies, but also for any company doing business in Europe or with European customers. We just published a new market research report on GDPR. How do they assess their progress in meeting the core requirements of GDPR?

GDPR 80

GDPR Compliance Digital preservation Artificial Intelligence 80

Hunton Privacy

FEBRUARY 1, 2019

On January 25, 2019, the European Commission (the “Commission”) issued an infographic on compliance with and enforcement and awareness of the EU General Data Protection Regulation (“GDPR”) since the GDPR took force on May 25, 2018. Three fines have been issued under the GDPR so far.

GDPR 66

GDPR Data breaches Personal data Compliance 66

Data Protection Report

JUNE 22, 2022

UK GDPR Reform: government publishes response to consultation – likely to form basis of forthcoming UK Data Reform Bill. The test will be relative and it appears lower than under the EU GDPR, although the precise approach is not set out in the response. However, the precise approach will be set out in the AI white paper.

GDPR 144

GDPR Government Personal data Risk 144

AIIM

AUGUST 1, 2018

The GDPR’s May 25, 2018 deadline set in motion a mad compliance and security scramble not only for European companies, but also for any company doing business in Europe or with European customers. We just published a new market research report on GDPR. How do they assess their progress in meeting the core requirements of GDPR?

GDPR 80

GDPR Compliance Privacy Marketing 80

Hunton Privacy

MAY 26, 2020

On the second anniversary of the EU General Data Protection Regulation (the “GDPR”), the Belgian Data Protection Authority (the “Belgian DPA”) published a Statement with some key GDPR-related numbers (the “Statement”). 5,416 data protection officer (“DPO”) notifications. Read the Statement (in French and Dutch ).

GDPR 88

GDPR Personal data Data breaches Compliance 88

Hunton Privacy

MARCH 4, 2020

Article 97 of the GDPR requires the European Commission to submit, by May 25, 2020, and every four years thereafter, a report on the evaluation and review of the GDPR to the European Parliament and to the Council of the EU. In order to prepare its report, the European Commission may request information from DPAs.

GDPR 101

GDPR Personal data Data breaches Communications 101

Data Matters

SEPTEMBER 18, 2020

On 2 September 2020, the European Data Protection Board ( EDPB ) published draft guidelines on the concepts of controller and processor under the GDPR ( Draft Guidelines ). Controllers may also consider a processor’s adherence to an approved code of conduct or certification mechanism and reputation in the market, where relevant.

GDPR 96

GDPR Personal data Compliance Access 96

Hunton Privacy

JUNE 14, 2019

On June 12, 2019, the Belgian Data Protection Authority (the “Belgian DPA”) launched a public consultation on direct marketing with a view to updating its Recommendation No. 02/2013 of January 30, 2013 on direct marketing (the “Direct Marketing Recommendation” – in French and in Dutch ).

Marketing 59

Marketing GDPR IT 59

IT Governance

JULY 31, 2019

The documentation of processing activities is a new legal requirement under the EU GDPR (General Data Protection Regulation). Documenting your processing activities can also support good data governance, and help you to demonstrate your compliance with other aspects of the GDPR. Personal Data Protection Policy (Article 24).

GDPR 64

GDPR Data breaches Personal data Compliance 64