This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Our top-eleven European dataprotection developments for the end of 2024 are: EU Cyber Resilience Act: The Council of the European Union approved the Cyber Resilience Act , introducing cybersecurity requirements for digital products sold in the EU. The UK Upper Tribunal did not consider the provisions under the UK GDPR.
GDPR Compliance: From theory to practice GDPR has become a real challenge for businesses. GDPR compliance is not about formalities, but about real processes. That is why GDPR compliance is not just a set of rules or documents. So what does real GDPR compliance look like? So what does real GDPR compliance look like?
Therefore, it is crucial for legal businesses to implement robust cyber security for law firm compliance measures to protect themselves and their clients. What is Cyber Security Compliance? Compliance requirements are usually set by government and regulatory bodies, as well as industry associations.
Since the entry into force of the General DataProtection Regulation (GDPR), many companies processing the data of Europeans have faced the task of achieving the much desired GDPR-compliance. Why do we need this?
Introduction In our previous articles , we have already drawn your attention to the Brazilian dataprotection legislation which is quite similar to the General DataProtection Regulation (GDPR). Also, the ANPD has shared a new form which should be used for sending security incident reports by a data controller.
Brazil’s Lei Geral de Proteção de Dados Pessoais (or LGPD), similar to GDPR, CCPA and PIPEDA, regulates personal dataprotection. If the company does not process personal data in Brazil but still processes data to offer or supply goods or services to Brazil, the LGPD also applies in this case. Apparently not.
Building on prior European guidance , the French and Irish DPAs published guidance on the deployment of generative AI, large language models and dataprotection. To that end, the EDPB proposed designating DPAs as the “national competent authorities” under the AI Act to create a single point of contact.
On 3 October 2023, the UK Information Commissioner’s Office organised its annual DataProtection Practioner’s Conference 2023 (DPPC 2023). Here are the takeaways from the DPPC 2023 (the event sessions available here ). Any framework could be used as a baseline as long as the focus is on security as an outcome and not compliance.
UK ICO updates guidance to clarify requirements for fairness in AI What happened : The UK ICO has updated its existing Guidance on AI and dataprotection following requests from industry to clarify requirements for fairness in AI. Norwegian DataProtection Authority fines medical device company c.$240,000
There were a few European dataprotection developments in February that companies may want to have on their radar. What to do: Nothing right now other than monitor progress and, in the unlikely event that the adequacy decision is not finalised, put in place an alternative transfer mechanism for EU-UK transfers.
In today’s digital age, data security is a critical concern for law firms. As custodians of sensitive client information, law firms must take proactive measures to safeguard data from cyber threats and ensure compliance with dataprotection regulations.
Our summary of the Digital Personal DataProtection Bill, 2023 The Digital Personal DataProtection Bill, 2023 ( 2023 Bill ) was tabled in Parliament on 3 August 2023. It is the fifth – and likely final – iteration of India’s efforts to formulate a personal dataprotection law.
Managing a law firm requires more than overseeing cases and delegating tasksit demands a strategic approach that balances client expectations, regulatory compliance, and operational efficiency. This includes financial management, client communication, human resources, compliance, marketing, and technology integration.
Regardless of the proven practical benefits of AI in different fields, its use has some risks for users’ privacy and dataprotection. 13 GDPR (information to be provided where personal data are collected from the data subject) Violation of Art.6 25 GDPR (dataprotection by design and by default).
Sixty percent of general counsel are concerned that their risk landscape is expanding or becoming more difficult to navigate in areas spanning compliance, regulatory enforcement, data privacy, information security, emerging data sources and ongoing impacts of the pandemic. in 2020 to 2.9
What to do : Businesses that process personal data should keep this decision in mind when considering their compensation obligations in the event of a cyberattack or other data breach. It remains to be seen whether dataprotect authorities will provide guidance on how to interpret the “draw strongly” condition.
Therefore, if you do not see the secure mark (HTTPS) on a website while transmitting your data, it is important to contact your cloud-based storage software provider and confirm that they are using encryption. Laptop Encryption Lawyers and firms are responsible for encrypting the data themselves when using laptop encryption.
For example, Clios legal timekeeping software makes it simple to track time from anywhereadding time entries straight from calendar events, tasks, communications logs, notes, and documents. But they may lack the security and compliance features needed when working in a legal context. This makes human oversight essential.
According to the GDPR – General DataProtection Regulation – residents of the European Union (“ EU ”) can send requests regarding their data to all legal and natural persons who process it. Failure to comply with these requirements may lead to a complaint being made against you with a supervisory authority.
By Rick Clark and Jacob Hesse 2023 was an eventful year in the world of legal technology, with new technology emerging to address both traditional and new challenges legal teams face when collecting, processing, and reviewing data for litigation, investigations, or public access requests.
By Rick Clark Highlights from this event are covered below. based organizations: GDPR: As data privacy regulations continue to evolve, companies must work together to navigate the complexities of GDPR compliance and dataprotection. Participants gained valuable insights from a global perspective.
The General DataProtection Regulation (GDPR) applies to businesses that operate in the European Union and require businesses to take measures to protect the personal data of EU citizens. State data breach notification laws require businesses to notify customers and employees in the event of a data breach.
By staying informed, legal counsel can identify potential risks and take proactive measures to ensure compliance. Implement Comprehensive Compliance Programs Developing and implementing robust compliance programs is an essential strategy for managing legal risks. Associated with dataprotection and enhancing customer trust.
By staying informed, legal counsel can identify potential risks and take proactive measures to ensure compliance. Implement Comprehensive Compliance Programs Developing and implementing robust compliance programs is an essential strategy for managing legal risks. Associated with dataprotection and enhancing customer trust.
People can now seek access to, rectification of, or erasure of their personal data held by companies, thanks to the introduction of dataprotection regulations like the California Consumer Privacy Act (CCPA) and the General DataProtection Regulation (GDPR). Then what constitutes a suitable DSAR response?
On 23 February 2023, the UK ICO hosted its latest privacy forum in a series aimed at helping product designers and managers incorporate “privacy by design” or “dataprotection by design and by default” principles into their work. Key observations shared during the event included: Privacy is not just for lawyers.
HIPAA, GDPR, CCPA, SHIELD, and state-specific breach notification laws Data security laws can vary with location. It’s your firm’s responsibility to understand your legal responsibilities in the event of a breach. Check out our blog post on understanding HIPAA compliance for more information. and developing communication plans.
However, data controllers and processers should be aware that the UK’s Information Commissioner’s Office (“ICO”) can also carry out dawn raids as part of investigations into compliance with dataprotection laws. unlawfully obtaining personal data). Train key staff on protocols and procedures for dawn raids.
Sixty percent of general counsel are concerned that their risk landscape is expanding or becoming more difficult to navigate in areas spanning compliance, regulatory enforcement, data privacy, information security, emerging data sources and ongoing impacts of the pandemic. in 2020 to 2.9
He announces SessionGuardian will offer free CLE courses on cybersecurity awareness and compliance. Firms should look beyond check-the-box compliance to make privacy and security central in their culture. And as lawyers, we just can’t simply pass the buck to cybersecurity engineers and experts in the event that there’s a data breach.
As we delve into the multifaceted world of webinars within the legal landscape, it becomes evident that these virtual events offer a unique platform for legal professionals to connect with their audience in ways that traditional methods often fall short.
Missed the event? In her keynote, Nita explored the concept of mental privacy in the age of neurotechnology, discussing how generative AI advancements are raising significant legal challenges around dataprotection, consent, and the ethical use of brain-related technologies. Don’t worry—we’ve got a quick recap for you below!
EU authorities have understandably declined to put forward a single list of mandatory data security controls that apply to all companies subject to the GDPR. million fine imposed by the UK Information Commissioner’s Office (“ICO”) against Ticketmaster for alleged data security failings that exposed customer payment card data.
As we delve into the multifaceted world of webinars within the legal landscape, it becomes evident that these virtual events offer a unique platform for legal professionals to connect with their audience in ways that traditional methods often fall short.
For those of us at Lineal, the event was a remarkable opportunity to engage with the latest in legal technology, share insights, and showcase how our eDiscovery services and tools are evolving, especially with the integration of generative AI (genAI) technologies.
The Measures will take effect on June 1, 2023, but are subject to a 6-month grace period to allow companies time to bring their activities into compliance. The finalization of the Measures marks another important step forward in the establishment of China’s cross-border data transfer framework.
They have to keep taking up new courses and learn about new laws and compliances. Working in a complex and ever-changing legal environment requires lawyers to stay updated with legal technology , compliances, court rulings, and other industry advancements. Lawyers’ education is a continuous process. How to Earn CLE Credit?
The Virginia Consumer DataProtection Act (“VCDPA”) and amendments to the California Consumer Privacy Act (“CCPA”)—enshrined in the California Privacy Rights Act (“CPRA”)—take effect on January 1, 2023. Assess the Need to Complete DataProtection Impact Assessments.
Since these models generally evolve, regulators and courts might argue that—in the event of a performance issue or other regulatory concern—the model’s earlier outputs are important to understanding its later performance. Another benefit is the simplicity of the policy, which would make compliance relatively easy.
Compliance with Evolving Regulatory Standards The legal landscape is marked by constantly evolving regulatory standards and compliance requirements. Tracking and documenting changes is vital, especially in legal documents, ensuring compliance and accuracy by maintaining a clear audit trail of alterations.
Compliance with Evolving Regulatory Standards The legal landscape is marked by constantly evolving regulatory standards and compliance requirements. Tracking and documenting changes is vital, especially in legal documents, ensuring compliance and accuracy by maintaining a clear audit trail of alterations.
By Rick Clark The Masters Conference in Washington, DC, on April 17th, 2024, was a bustling event with crowded sessions throughout the day. The agenda featured a diverse range of topics, such as Modern Data, Link Files, eDiscovery Case Law, and Artificial Intelligence, making it an exceptional experience for attendees.
The PIPL has been referred to as China’s version of Europe’s General DataProtection Regulation (“GDPR”), given that the PIPL in substance mimics many of GDPR’s restrictions on the usage and collection of personal information. The sheer amount of serial change to Chinese law adds to compliance challenges.
The DMA will also impact other regulations applicable to the delivery of services on digital markets, particularly involving dataprotection (the General DataProtection Regulation and the ePrivacy Directive), competition law, consumer protection, and copyright (e.g. DMA recital 12).
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content