This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Our top-five European dataprotection developments from February are: European Commission publishes guidelines on prohibited AI practices : The EU Commission has published non-binding guidance on the EU AI Acts prohibited use cases. 10(5) allows for the exceptional processing of special category data (as defined under the GDPR Art.
Our top-eleven European dataprotection developments for the end of 2024 are: EU Cyber Resilience Act: The Council of the European Union approved the Cyber Resilience Act , introducing cybersecurity requirements for digital products sold in the EU. The UK Upper Tribunal did not consider the provisions under the UK GDPR.
On 11 September 2023, the UK’s Department for Science, Innovation, and Technology (DSIT), published the draft DataProtection (Fundamental Rights and Freedoms) (Amendment) Regulations 2023 (DP Regulations), which seek to amend the UK General DataProtection Regulation (UK GDPR) and DataProtection Act 2018 (DPA 2018).
Our top-five European dataprotection developments from August are: Uber fined for personal data transfer: The Dutch DataProtection Authority fined Uber €290 million for the unlawful transfer of European drivers’ personal data to the U.S., without sufficient safeguards.
EDPB “Consent or pay” models: Businesses operating large online platforms should consider the European DataProtection Board’s recent opinion indicating that “consent or pay” models are unlikely to be GDPR-compliant. These developments, and more, are covered below.
UK High Court dismisses most of the Dixons data breach claim What happened : The UK High Court dismissed various claims against DSG Retail Limited (“DSG”), the owner of Currys PC World and Dixons Travel, relating to a 2017 – 2018data breach where hackers accessed personal data in the company’s systems.
million fine against Austrian Post for channelling electronic dataprotection-related inquiries to a web form and not offering an additional email address, irrespective of the data subject option to also use non-electronic postal mail or customer service. These developments, and more, covered below.
On 8 March 2023, the UK government presented a new version of the UK DataProtection and Digital Information Bill No.2. As with the previous bill, the new bill aims to alleviate the burden of compliance with the UK GDPR and its implementing UK DataProtection Act (2018) for organisations in the UK.
In this post, we look back at the 2020 European dataprotection landscape and five trends that help companies understand not only where we are, but where dataprotection enforcement, litigation, and practice may be headed. million against Marriott for its 2018data breach When you dig deeper though, two key points emerge.
Key takeaways from March include: CNIL data security practice guide: The French DPA published an update of its data security practice guide for dataprotection officers, chief information security officers, computer scientists and legal experts. 33(2) GDPR relating to the same personal data breach.
“If you don’t see me in half a decade, just wait a little longer” – India’s dataprotection bill ( circa 2018 ) On 9 th August, the Digital Personal DataProtection Bill, 2023 was finally passed in the Parliament. The finish line – the new data bill What stood out? Whose competition is it but?
GDPR one-stop-shop: Businesses wishing to take advantage of the GDPR one-stop-shop system should take note of a new digest, published by the European DataProtection Board, which analyses the decisions made by so-called Lead Supervisory Authorities in this context.
Dataprotection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.
Key takeaways this April include: UK children’s dataprotection focus continues: Businesses may wish to review policies and procedures for dealing with children’s data in light of recent UK ICO fines and guidance, especially to ensure that terms of use are adequately enforced. UK ICO fines TikTok £12.7
On 3 October 2023, the Information Commissioner’s Office (ICO) published guidance (the Guidance) on lawful monitoring in the workplace. This is not limited to employees and could include monitoring of workers or those who are self-employed. their right of erasure). their right of erasure).
This is the amount of a fine paid by a well-known company for violating the rules of the European General DataProtection Regulation (the GDPR). In this article, you will learn about the top 7 largest fines of 2022 and the personal data practices that should be avoided in your business. Is 1,000 EUR a lot for a business?
New dataprotectionlaws, increasing regulation, greater risk of cyber attacks: The challenges for entrepreneurs are becoming ever greater. On September 1, a new dataprotectionlaw (revDSG) has come into force in Switzerland. However, compliance can be largely automated through artificial intelligence.
Law firm data security should be a top priority for any practice, and here’s why: Clients trust you with their most confidential information. Since clients entrust lawyers with so much of their sensitive data, law firms make prime targets for cybercrime. You don’t want your law firm to become part of that statistic.
On 3 October 2023, the UK Information Commissioner’s Office (“ ICO ”) finalized its Employment practices and dataprotection − Monitoring workers guidance (“ Guidance ”) to account for new types of work, including work from home, and the use of more sophisticated technologies for monitoring.
Moreover, since 2018, IAB Ukraine has had its own representative office in Ukraine. It is a “guide” for website owners, technology providers, agencies, advertisers, and digital marketers to comply with the law on processing personal data. In total, the IAB Global Network unites 45 IAB organizations around the world.
These requirements cover a wide range of issues that are frequently debated in relation to the governance of generative AI globally, such as dataprotection, non-discrimination, bias and the quality of training data.
However, data controllers and processers should be aware that the UK’s Information Commissioner’s Office (“ICO”) can also carry out dawn raids as part of investigations into compliance with dataprotectionlaws. unlawfully obtaining personal data). unlawfully obtaining personal data).
On 15 January 2024, the UK’s Information Commissioner’s Office (“ICO”) announced the launch of a consultation series (“Consultation”) on how elements of dataprotectionlaw apply to the development and use of generative AI (“GenAI”). Interested stakeholders are invited to provide feedback to the ICO by 1 March 2024.
HealthCareInfoSecurity.com reported that “A user of the now-shuttered BreachForums in April 2021 posted a data set of 533 million Facebook profiles, including mobile numbers, email addresses and names scraped from the site in 2018 and 2019.” Facebook reported revenue of $23 billion in 2022 and $39 billion in 2021.
These include e-commerce law, consumer protectionlaw, data privacy laws, and breach notification laws. However, companies can use these laws to their advantage by using them as a guide to identify the most suitable e-commerce market to enter. 11] Therefore, it is crucial for U.S. 15] Ultimately, U.S.
somebody has to sound the alarm.” – Meryl Streep, The Laundromat The Prevention of Money Laundering Act (or, as its friends call it, the ‘PMLA’) is a long-arm law. Reporting entities must follow several compliance and reporting obligations under the anti-money laundering law. The datalaw is nearly here!
A law firm website is its most important marketing tool, particularly for insurance defense or AmLaw 100-200 law firms that do not typically run online advertising campaigns. Once a prospect learns about your law firm, they often visit your attorney bio pages and practice area pages to learn more about your services.
As anyone following the fallout from the Court of Justice of the European Union’s decision in Schrems II will know, the GDPR restricts the transfer of personal data to “third countries”, including the U.S., This requires firms to share only personal data that is truly necessary for the stated purpose of the data request.
If you can remember as far back as December 2021, we published a blog post announcing that the European DataProtection Board (EDPB) published draft guidelines on the interplay between the territorial scope of the GDPR and the international transfer requirements.
Why is Data Compliance Important? Failure to adhere to the security framework regarding dataprotection can lead to high fines and even court cases. General DataProtection Regulation (GDPR) Europe introduced a dataprotectionlaw, which is the GDPR, in 2018 for businesses handling personal and private personal information.
The Clarifying Lawful Overseas Use of Data Act (Pub. 115-141 (2018), or the CLOUD Act, was enacted in the U.S. on March 23, 2018, in response to difficulties U.S. 115-141 (2018), or the CLOUD Act, was enacted in the U.S. on March 23, 2018, in response to difficulties U.S.
6, 2018, the Article 29 Working Party (Working Party 29) published Working Paper 261 (WP 261), which provided guidance on the provisions of Article 49 of the European Union’s (EU) General DataProtection Regulation (GDPR).
Ever wondered how technology is reshaping the practice of law, an arena known for its venerable traditions and meticulous procedures? billion by 2023, growing at a compound annual growth rate (CAGR) of around 10% from 2018. This analyzes vast legal databases and provides attorneys with relevant case law, statutes, and legal precedents.
The law firm produced the documents but sought reimbursement for over $44,000 spent complying with the subpoena. Although the law firm petitioned for costs under Fed. The court concluded that the law firm was not a “disinterested non-party.” The court denied the reimbursement request.
Entities transferring personal data outside the European Economic Area on the basis of standard contractual clauses that are no longer in force (where the transfer began before 27 September 2021) should conclude agreements based on new clauses by 27 December 2022.
Google was then able to collate and sell that data to advertisers. privacy laws, fining Google US$ 22.5 Mr Lloyd alleged that Google breached its duties as a data controller under the DataProtection Act 1998 (“DPA”) when it implemented the ‘Safari Workaround’. million in 2012.
The penalty resolves charges that Pearson misled investors related to a 2018data breach. The SEC has shown this week that, when the facts warrant, it is prepared to call out such communications strategies as violations of the securities laws. securities issuer. For What Did the SEC Fault Pearson ?
While the EU GDPR regulates the international transfer of personal data, several recently enacted EU laws regulate the international transfer of non-personal data, which is any data that is not “personal data” under the GDPR. This is borne out by the provisions in the proposed EHDS, as discussed below.
On August 18, 2023, the Fourth Circuit decertified approximately 20 million putative class action claims arising out of a 2018data breach involving Marriott Hotels.
The UK Network and Information Systems (NIS) Regulations 2018 will be strengthened in an effort to protect essential and digital services. However, the frequency and scale of cyber incidents and consequent increased risk of severe damage has prompted change to UK cyber laws as well. What are the changes?
Instead of a separate regulator, the government is contemplating a body similar to the dataprotection board suggested under the latest version of the data bill. Meanwhile, the Delhi High Court has given the government six weeks’ time to share the outcome of its consultations on the draft e-pharmacy rules from 2018.
This tension is particularly challenging when considering how long to keep confidential data that was used to train an AI model that is currently in operation. Taking the second question first, there does not appear to be any specific legal requirements as to how long AI training data must be maintained.
He holds the Chair for Public Law, Real Estate Law, Infrastructure Law, and Information Law at the Faculty of Law of the University of Regensburg since 2007. And both of us are pursuing the law in tech certificate specialization from Berkeley Law School. Dr. Jürgen Kühling. It’s a pleasure.
He holds the Chair for Public Law, Real Estate Law, Infrastructure Law, and Information Law at the Faculty of Law of the University of Regensburg since 2007. And both of us are pursuing the law in tech certificate specialization from Berkeley Law School. Dr. Jürgen Kühling. It’s a pleasure.
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content