article thumbnail

European Data Protection Roundup – October 2023

Debevoise Data Blog

Data protection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.

article thumbnail

UK Data Protection Bill No.2 – What is changed?

Technology Law Dispatch

On 8 March 2023, the UK government presented a new version of the UK Data Protection and Digital Information Bill No.2. As with the previous bill, the new bill aims to alleviate the burden of compliance with the UK GDPR and its implementing UK Data Protection Act (2018) for organisations in the UK.

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

European Data Protection Roundup – September

Debevoise Data Blog

million fine against Austrian Post for channelling electronic data protection-related inquiries to a web form and not offering an additional email address, irrespective of the data subject option to also use non-electronic postal mail or customer service. These developments, and more, covered below.

article thumbnail

European Data Protection Roundup: 2020 in Five Trends

Debevoise Data Blog

In this post, we look back at the 2020 European data protection landscape and five trends that help companies understand not only where we are, but where data protection enforcement, litigation, and practice may be headed. million against Marriott for its 2018 data breach When you dig deeper though, two key points emerge.

article thumbnail

ICO Dawn Raids: How to respond and what you can do to prepare – An FAQ

Debevoise Data Blog

However, data controllers and processers should be aware that the UK’s Information Commissioner’s Office (“ICO”) can also carry out dawn raids as part of investigations into compliance with data protection laws. What is a dawn raid? A dawn raid is an inspection of a business’ premises conducted without notice.

article thumbnail

Cyber Security Compliance for Legal Businesses: What You Need to Know

MatterSuite

In 2020, the American Bar Association reported that over 25% of law firms had experienced a data breach, with smaller firms being particularly vulnerable. Therefore, it is crucial for legal businesses to implement robust cyber security for law firm compliance measures to protect themselves and their clients.

article thumbnail

The Financial and Legal Costs of ID Theft to Small Businesses

Law Technology Today

As a small business owner, it is crucial to understand the potential risks and costs associated with identity theft and take proactive measures to protect your business. According to the 2022 Identity Theft Resource Center’s Data Breach Report , there were 1,802 data compromises in the United States.