This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Here are our highlights: European Commission adopts new Standard Contractual Clauses What happened : As reported in our blog post , the European Commission adopted its new Standard Contractual Clauses (“SCCs”) for the cross-border transfer of personal data from the EEA to “third countries”.
The AEPD held that a DPO cannot hold a position that leads them to determine the purposes and means of data processing. The scale and dataprotection risks associated with such technologies has been further complicated recently by their increasing integration with artificial intelligence systems.
UK ICO updates guidance to clarify requirements for fairness in AI What happened : The UK ICO has updated its existing Guidance on AI and dataprotection following requests from industry to clarify requirements for fairness in AI. Norwegian DataProtection Authority fines medical device company c.$240,000
ICO targets the data broking industry : On 27 October, the ICO demanded that Experian make sweeping changes to dataprotection practices within its direct marketing business within three months or face further enforcement action. We will continue to report on developments as Experian’s appeal progresses.
Dataprotection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.
As covered in our Annual Review , 2020 was a blockbuster year for European dataprotection. The decision draws parallels with the AI-related claims brought against Uber in the Netherlands , and is another example of the cross-over between dataprotection and employment law. CJEU Opinion clarifies the one-stop-shop.
. : Business may want to revisit their cross-border data transfer arrangements following the new adequacy decision for the EU-U.S. Data Privacy Framework, assess whether they are eligible to self-certify and, if they are, whether it makes sense to. Data Privacy Framework (the “DPF”).
From scheduling to document filing and billing, these tasks become unwieldy if they are not standardized with the right technology. Any data breach or mishandling of client funds can result in severe reputational damage and legal repercussions. Confident employees are happy employees, and happy employees stay with the company.
Last year regulators in the EU devoted a lot of attention to cookie files and other tracking technologies used on websites. Cookies and data transfers to the US A large proportion of tools relying on cookie files and other tracking technologies commonly used by operators of websites in the European Union (e.g.
It is possible for off-channel communications to continue, but there needs to be some way either to record these automatically (with monitoring software) or else ensure that they are captured and filed soon afterwards (which may be a manual process). To subscribe to the DataBlog, please click here.
A single incident—even a relatively minor one—may require notification to dozens of dataprotection, cyber, law enforcement, and sectoral regulators around the world, in addition to insurers, customers, and counterparties. To subscribe to the DataBlog, please click here.
For example, the Connecticut Insurance Department has stated that it has the authority to require that insurers provide the department with access to data used to build models or algorithms that are included in underwriting filings. To subscribe to the DataBlog, please click here.
Use platforms like blogs, social media, and even webinars to educate your audience on the importance of sustainable tech. Sophia : “From a tech standpoint, opt for eco-friendly hosting solutions and data centers. Ensure that every subsequent business decision aligns with these sustainability principles.”
Use platforms like blogs, social media, and even webinars to educate your audience on the importance of sustainable tech. Sophia : “From a tech standpoint, opt for eco-friendly hosting solutions and data centers. Ensure that every subsequent business decision aligns with these sustainability principles.”
Last week on 3 Geeks, I posted a blog that talked about how to use AI to generate summaries of legal articles. The proposal also covers other contract provisions that the CFPB director dislikes comments on the proposal must be filed by March 13 2023. AI Generated Librarian as a machine editing a podcast.
As cyber threats continue to grow, and consumers gain more privacy rights over their personal data, businesses need robust data minimization programs that can significantly reduce the amount of sensitive data they collect and maintain. In February 2022, the FTC filed a complaint against WW International Inc.,
Data Privacy Framework (the “DPF”). The decision enables businesses in Europe to transfer personal data to DPF-certified U.S. businesses without having to implement additional dataprotection safeguards. Data subjects may lodge complaints through both U.S.- UK and Swiss Data Transfers to the U.S.
16] As a general rule, CIDs are confidential and not publicly disclosed by the FTC during the investigation period unless the recipient voluntarily discloses the existence of the investigation or files a petition to quash. If disagreements remain, companies have the option of filing a petition to quash within 20 days after receipt of the CID.
If approved, the license authorizes only the specific transaction described in the application and mandates compliance with all stipulated conditions, such as filing required reports. persons understand their data flowsboth in terms of volume and type of data but also in terms of the geographic flows of such data.
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content