Remove 2021 Remove Data protection Remove e-records
article thumbnail

Using personal devices for business: what should UK firms think about?

Debevoise Data Blog

The PRA strongly criticised Wyelands’ lack of record-keeping policies and procedures to manage the use of WhatsApp communications, which the PRA found had prevented the bank’s Board and Risk function from effectively scrutinising transactions, as well as hindering the PRA’s supervision and investigation activities.

article thumbnail

China Passes the Personal Information Protection Law

Debevoise Data Blog

On August 20, 2021, China’s Standing Committee of the National People’s Congress passed the Personal Information Protection Law (“PIPL”). 1 The PIPL will take effect on November 1, 2021. 21 Risk Assessment A Personal Information Processor must evaluate the impact of such export in advance and keep relevant records.

Law 52
professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

The EU AI Act – Navigating the EU’s Legislative Labyrinth

Debevoise Data Blog

The specific detail of these requirements is yet to be agreed but could include heightened data governance standards, monitoring and record-keeping rules, heightened standards for cybersecurity and transparency, as well as human oversight obligations. To subscribe to the Data Blog, please click here. Limited risk systems.

article thumbnail

European Data Protection Roundup – September

Debevoise Data Blog

million fine against Austrian Post for channelling electronic data protection-related inquiries to a web form and not offering an additional email address, irrespective of the data subject option to also use non-electronic postal mail or customer service. Standard Contractual Clauses).

article thumbnail

European Data Protection Roundup – January 2021

Debevoise Data Blog

As covered in our Annual Review , 2020 was a blockbuster year for European data protection. If January is anything to go by, 2021 will be the same. has appealed , both penalties show that companies need to be wary not only of how they treat customer data, but also employee data. While Notebooksbilliger.de

article thumbnail

European Data Protection Roundup – December 2022 and January 2023

Debevoise Data Blog

The Task Force was convened in September 2021 following hundreds of cookie banner-related complaints from the European Center for Digital Rights. EDPB’s cookie banner task force report highlights user-friendly design choices What happened : In January 2023, the EDPB adopted a final report on the Cookie Banner Task Force’s work.

article thumbnail

European Data Protection Roundup – Q4 2024

Debevoise Data Blog

Our top-eleven European data protection developments for the end of 2024 are: EU Cyber Resilience Act: The Council of the European Union approved the Cyber Resilience Act , introducing cybersecurity requirements for digital products sold in the EU. The UK Upper Tribunal did not consider the provisions under the UK GDPR.