This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Our top-five European dataprotection developments from February are: European Commission publishes guidelines on prohibited AI practices : The EU Commission has published non-binding guidance on the EU AI Acts prohibited use cases. Spanish Telecomm Provider Fined 1.2
Our top-eleven European dataprotection developments for the end of 2024 are: EU Cyber Resilience Act: The Council of the European Union approved the Cyber Resilience Act , introducing cybersecurity requirements for digital products sold in the EU. These developments are covered below.
By understanding this purpose, digital marketers can make informed design decisions. The Core Purpose: Conversion The primary purpose of a website is to share information online. Are you aiming to: Generate Leads: Capture potential clients’ information through forms, contact requests, or email sign-ups.
In that case, you also need to be aware of whether the dataprotection rules are not violated. Source: Drones and DataProtection What should companies/people who use drones do to be in compliance with privacy regulations? Once again, it depends on the type of drone and the purpose you use it for.
Our top five European dataprotection developments from January are: UK ransomware reporting proposals. DeepSeek investigated by Italian DPA over AI chatbot data collection practices. DeepSeek was given 20 days to provide the requested information. UK ICO acts on cookie compliance. These developments are covered below.
For example, in 2020, the DataProtection Authority of Hamburg imposed a 35.3 In particular, specific details about the lives of some employees of H&M (illnesses, medical diagnoses, religious beliefs, and family problems) were comprehensively recorded and stored as information on a network drive. 6 (1) (a) of GDPR Art.
Every day, more and more companies face the problem of personal dataprotection. As companies are increasingly scrutinised for proper dataprotection, it’s worth paying close attention to the latest best practices to avoid dealing with the potential negative consequences of a data breach.
Therefore, individual states took matters into their own hands and passed local laws to protect the privacy of their residents. In this article, we will review who needs to know the new rules of the US legislation, when exactly they will come into force and what obligations these laws provide.
state to mandate that attorneys take continuing legal education courses in cybersecurity, privacy and dataprotection. New York has become the first U.S. The order creates two types of cybersecurity training, one focused on ethics and the other on practice.
Not only are law firms storing more data, but since the pandemic has forced us all to become increasingly mobile, keeping clients’ sensitive information safe is even more challenging. 11 Tips for Effective Law Firm DataProtection As a law firm, protecting your clients' sensitive information should be at the top of your priority list.
On 29 March 2023, the UK Information Commissioner’s Office (“ICO”) published updated Guidance on AI and dataprotection (the “Guidance”) following “requests from UK industry to clarify requirements for fairness in AI”. AI has been a strategic priority for the ICO for several years.
On 3 October 2023, the UK Information Commissioner’s Office organised its annual DataProtection Practioner’s Conference 2023 (DPPC 2023). This year its focus was on Cybersecurity – a topic that concerns organisations across the board. Here are the takeaways from the DPPC 2023 (the event sessions available here ).
On March 13, 2023, the CNIL published a statement announcing that it reminded these two organizations of their legal obligations under the French dataprotection framework. Another requirement is that patients participating in the research must receive all the information mandated by Art.
Candidate, 2025 No one wants to be left holding the bag after a break-in, but for chief information security officers (CISOs), the risk of liability is ever-present. Tasked with overseeing a firms cybersecurity posture, CISOs stand on the front lines of a corporations digital defense.
But in Latin America, no, perhaps there are, in some jurisdictions, regulations related to dataprotection, but that's not necessarily what we are referring to. All that technology offers to the new generations, they have access to information. If I'm not wrong, the latest was Peru. Nowadays, it is much easier.”
EDPB “Consent or pay” models: Businesses operating large online platforms should consider the European DataProtection Board’s recent opinion indicating that “consent or pay” models are unlikely to be GDPR-compliant.
India’s Digital Personal DataProtection Bill 2023 was introduced in Parliament on 3 August 2023. Once passed, the law will govern how businesses collect and use individuals’ data. What data is covered? Personal data, i.e., data about an individual that can identify them. What else should fiduciaries do? (a)
Our top-five European dataprotection developments from August are: Uber fined for personal data transfer: The Dutch DataProtection Authority fined Uber €290 million for the unlawful transfer of European drivers’ personal data to the U.S., without sufficient safeguards. ICO proposes £6.09
Our top five European dataprotection developments from May are: UK guidance on ransom payments: The UK NCSC and various insurance industry bodies co-published guidance on key considerations for ransomware payments. 22, then there must be sufficient human-involvement in that processing for it to be GDPR-compliant.
Our top five European dataprotection developments from June are: Non-material damage under GDPR: The CJEU clarified the scope of compensation for non-material damage in the context of identity theft and data subjects’ fear that their personal data had been exposed. These developments, and more, are covered below.
In this regard, we describe below what they should take under consideration in light of Polish labour law and dataprotection law. Bossware and the rules for processing personal data As a rule, the operation of bossware will involve the processing of employee personal data. 5 of the General DataProtection Regulation.
A detailed clause-wise analysis of the Digital Personal dataProtection Bill 2023 On 7 August 2023, the Lok Sabha passed the Digital Personal DataProtection Bill, 2023. It will soon be introduced in the Rajya Sabha and likely become a law in a couple of days. Read the analysis here.
On 19 June 2023, the Information Commissioner’s Office (ICO) has released new Guidance on Privacy-Enhancing Technologies (PETs) for DataProtection Compliance. Understanding PETs PETs are software and hardware systems that can help minimize use of personal data use while maximizing information security.
Introduction In our previous articles , we have already drawn your attention to the Brazilian dataprotection legislation which is quite similar to the General DataProtection Regulation (GDPR). Also, the ANPD has shared a new form which should be used for sending security incident reports by a data controller.
UK ICO updates guidance to clarify requirements for fairness in AI What happened : The UK ICO has updated its existing Guidance on AI and dataprotection following requests from industry to clarify requirements for fairness in AI. Norwegian DataProtection Authority fines medical device company c.$240,000
On 3 October 2023, the UK Information Commissioner’s Office (“ ICO ”) finalized its Employment practices and dataprotection − Monitoring workers guidance (“ Guidance ”) to account for new types of work, including work from home, and the use of more sophisticated technologies for monitoring.
However, the personalized advertising ecosystem relies heavily on the personal data of users, raising questions about dataprotection and privacy requirements. So, what should businesses take into account to comply with dataprotection requirements?
ChatGPT (Generative Pre-trained Transformer) — is a chatbot based on AI, developed by the US laboratory OpenAI, which gives information and answers to users’ requests. Regardless of the proven practical benefits of AI in different fields, its use has some risks for users’ privacy and dataprotection. Violation of Art.
Countries like Italy initially blocked ChatGPT's use, later reinstating it with promises of increased transparency and dataprotection. The Ibero-American DataProtection Network (RIPDP) warns of the risks associated with using AI services like those developed by OpenAI, L.L.C.,
Recently, the Senate Judiciary Committee heard the bill for informational purposes. Among their targets were the DataProtection Impact Assessment requirements, which NetChoice argued amounted to prior restraint and compelled speech. The bill is currently pending approval by both chambers. Enforcement is limited to the MN AG.
Our summary of the Digital Personal DataProtection Bill, 2023 The Digital Personal DataProtection Bill, 2023 ( 2023 Bill ) was tabled in Parliament on 3 August 2023. It is the fifth – and likely final – iteration of India’s efforts to formulate a personal dataprotection law.
With this regard, it is essential to know about the privacy legislation of this country since, nowadays, most internet businesses process the personal data of their clients, and they should do it in compliance with dataprotection laws. The Privacy Act aims to regulate how mentioned entities should protect personal information.
On 29 December 2022, the CNIL fined TikTok UK and Ireland as joint controllers €5 million for failing to: offer users the ability to refuse cookies as easily as accepting them (several clicks were required to refuse all cookies, as opposed to just one to accept them); and inform users in a sufficiently precise manner about cookie purposes.
A dataprotection impact assessment (DPIA) sounds like something big, complicated and problematic. DPIA stands for DataProtection Impact Assessment. A DPIA is typically conducted when a new project involving the specific processing of personal data is being implemented. Well, it is true. Let’s check.
Ensuring compliance with data privacy regulations is not only a legal obligation; it’s a critical component of maintaining customer trust and safeguarding sensitive information. In 2025, several new regulations are expected to be enacted.
On February 16, 2023, the UK Information Commissioner’s Office (“ICO”) released guidance for the video game industry on how to conform with the UK’s Age Appropriate Design Code when developing video games. For more information about the UK’s Age Appropriate Design Code, see our previous blog posts here and here.
Lawyers expect a wave of demand for advice from companies that need to strengthen their internal safeguards in order to avoid fines and restrictions on handling personal information
Brazil’s Lei Geral de Proteção de Dados Pessoais (or LGPD), similar to GDPR, CCPA and PIPEDA, regulates personal dataprotection. If the company does not process personal data in Brazil but still processes data to offer or supply goods or services to Brazil, the LGPD also applies in this case.
Therefore, a logical question arises: what should an employer know about the use of personnel monitoring tools in order not to violate the requirements of personal dataprotection legislation? Justifying the need for monitoring The General DataProtection Regulation (GDPR) does not prohibit surveillance of employees in the workplace.
Those who process personal data of EU residents should comply with the requirements of the General DataProtection Regulation or GDPR. Moreover, it is necessary to remember that personal data processing processes are dynamic. Non-compliance with GDPR may result in hefty fines and reputational losses.
In today’s digital age, data security is a critical concern for law firms. As custodians of sensitive client information, law firms must take proactive measures to safeguard data from cyber threats and ensure compliance with dataprotection regulations.
From DataProtection (including GDPR) to Privacy & Security, Cybersecurity, Social Media Law, E-Commerce, website compliance, and even matters concerning the Freedom of Information Act, our guest, Peter Wright, is an absolute authority in the field. The scary part of starting a law firm.
The concept of necessity has an independent meaning in European Union law, which must reflect the objectives of dataprotection law. If the data is necessary to achieve the latter, the criterion of “necessity” of collecting information is met. Therefore, Meta was illegally processing this information.
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content