In this final instalment of an ongoing series on the issues that affect compliance in an ever more complex world Teresa Troester-Falklooks at how organisations can demonstrate compliance using an accountability approach.
Certain types of personal data are very valuable to criminals, and can be very damaging to an individual or business if it falls into the wrong hands. As the world becomes more digital and more connected, more of this sort of data is generated and passed between various sources on a regular basis.
Government regulations and supervisory authorities aren’t just about keeping irresponsible parties in line. They also provide vital security guidance to every type of organization that handles sensitive personal, business or government information.
Data protection regulations also ensure that the end user has a transparent view of and a say in the processing of personal data. These safeguards play a significant role in everything from the preservation of civil rights to ensuring that democratic institutions function properly.
Some types of personal data are clear candidates for regulation: medical records, banking information, national ID numbers and so on. But some of these regulations also cover items that might seem relatively innocuous at first glance: home addresses, email addresses, website profile information and so on. For example, the European Union General Data Protection Regulation (GDPR) has stipulations about anything that is unique to an individual to include phone numbers and social media accounts. People have varying levels of privacy preference with these items, but they are often protected by regulation because they can be used for targeted scams and attempts at identity theft.
Given that regulations often take the size and customer count of businesses into consideration in terms of penalties and the scope of protection of personal data, compliance is particularly important for enterprise-scale organizations. You do not necessarily have to have an active business presence in a country or region; simply storing data on or moving it through servers there may subject you to their data protection rules.
This article is based on a presentation made during the Data Privacy Asia 2016 conference held on 9-11 November 2016 by well-known and widely respected information security, privacy and compliance expert Rebecca Herold. Rebecca addresses how IT leaders are increasingly challenged by the myriad of physical, legal, political and logical considerations for data residency.
This article is based on a presentation made during the Data Privacy Asia 2016 conference held on 9-11 November 2016. The new EU General Data Protection Regulation aims to implement uniform data protection rules within the EU, boost the Digital Single Market and increase cooperation across its member states. The current rules have been sharpened to provide more enforcement teeth with penalties up to 4% of annual global turnover or EUR 20 million for firms in breach with the GDPR. In this article Héloïse Bock, a Partner at Arendt & Medernach, a law firm located in Luxembourg, examines the core principles and applicability of the GDPR, and discusses what companies in Asia must do to avoid missteps.
Privacy Law in Australia: Breach Reporting, New Frontiers of Big Data and Differences with the EU GDPR
This article is based on a presentation made by Steven Klimt, a partner in the Sydney office of Clayton Utz during the Data Privacy Asia 2016 conference held on 9-11 November 2016. It outlines the new mandatory data breach reporting legislation, how Australian privacy regulation impacts Big Data and the differences between Australian Privacy legislation and the proposed EU GDPR.
Attribute based access control provides a dynamic level of access control, based on the environment and conditions, needed for privacy and data protection.
The 21st of June 2017 saw UK’s Queen Elizabeth give what is generally known as ‘The Queen’s Speech’ in which Her Majesty gave some insights into just how seriously the UK government is taking issues of online privacy and data protection.
Estonia takes over presidency of EU and hosts major Digital Single Market conference on free movement of data, touching on data flow and data localization.
Right to privacy debates over the last month have highlighted the critical need for a regime of data protection in India, which will be vital for the outsourcing industry.
The EU GDPR signals a move towards a technology-based approach that can enforce data protection policies for personal data. What’s the solution?
Emerging technologies including biometrics and advanced analytics are helping to revolutionize the way governments and public service agencies address data privacy and security concerns, according to a new report from Accenture.