With fines and breach notifications seeing double digit growth year after year, what do organizations need to know as the GDPR approaches its third anniversary? Read More
Data Protection
Certain types of personal data are very valuable to criminals, and can be very damaging to an individual or business if it falls into the wrong hands. As the world becomes more digital and more connected, more of this sort of data is generated and passed between various sources on a regular basis.
Government regulations and supervisory authorities aren’t just about keeping irresponsible parties in line. They also provide vital security guidance to every type of organization that handles sensitive personal, business or government information.
Data protection regulations also ensure that the end user has a transparent view of and a say in the processing of personal data. These safeguards play a significant role in everything from the preservation of civil rights to ensuring that democratic institutions function properly.
Some types of personal data are clear candidates for regulation: medical records, banking information, national ID numbers and so on. But some of these regulations also cover items that might seem relatively innocuous at first glance: home addresses, email addresses, website profile information and so on. For example, the European Union General Data Protection Regulation (GDPR) has stipulations about anything that is unique to an individual to include phone numbers and social media accounts. People have varying levels of privacy preference with these items, but they are often protected by regulation because they can be used for targeted scams and attempts at identity theft.
Given that regulations often take the size and customer count of businesses into consideration in terms of penalties and the scope of protection of personal data, compliance is particularly important for enterprise-scale organizations. You do not necessarily have to have an active business presence in a country or region; simply storing data on or moving it through servers there may subject you to their data protection rules.
EU data transfer mechanisms are in a state of flux, and the additional complications of Brexit can leave organizations wondering how best to navigate this current area of uncertainty. Read More
UK’s ICO is taking its investigation into adtech back up. The central focus is on RTB systems, one of the cornerstones of the targeted advertising industry. Read More
A new report from DLA Piper shows that GDPR fines are being handed out more frequently, with a jump of 39% in 2020 but there remains a strong disparity in the willingness of individual regulators to issue them. Read More
EDPB guidance on cross-border data transfers post Schrems II ruling highlights a number of things that have changed that organizations will need to keep in mind when thinking about how to comply. Read More
Hybrid cloud platform brings a new level of complexity, which comes with its own set of challenges. How can we best utilize a cloud approach while staying ahead of challenges such as data residency compliance? Read More
Post Brexit any alteration to the current data laws UK businesses must abide by will have far reaching implications, impacting where information can be stored and how it can be shared. Read More
Big Tech companies are feeling more pressure in Europe with the proposal of two new antitrust policies. Together the "Digital Markets Act" and "Digital Services Act" would limit use of personal and business data. Read More
Facebook has come up with a clever workaround that takes advantage of Brexit; it's simply going to move local users to California to evade EU privacy rules. Read More
Twitter will pay a GDPR fine of €450,000 (about $546,000) in the first EU cross-border enforcement action brought against a tech giant. Read More