Microsoft is now the first major tech company that says it plans to abide by the new CCPA not just in California, but also to honor California’s digital privacy law in every state where it operates in the United States. Read More
Data Protection
Certain types of personal data are very valuable to criminals, and can be very damaging to an individual or business if it falls into the wrong hands. As the world becomes more digital and more connected, more of this sort of data is generated and passed between various sources on a regular basis.
Government regulations and supervisory authorities aren’t just about keeping irresponsible parties in line. They also provide vital security guidance to every type of organization that handles sensitive personal, business or government information.
Data protection regulations also ensure that the end user has a transparent view of and a say in the processing of personal data. These safeguards play a significant role in everything from the preservation of civil rights to ensuring that democratic institutions function properly.
Some types of personal data are clear candidates for regulation: medical records, banking information, national ID numbers and so on. But some of these regulations also cover items that might seem relatively innocuous at first glance: home addresses, email addresses, website profile information and so on. For example, the European Union General Data Protection Regulation (GDPR) has stipulations about anything that is unique to an individual to include phone numbers and social media accounts. People have varying levels of privacy preference with these items, but they are often protected by regulation because they can be used for targeted scams and attempts at identity theft.
Given that regulations often take the size and customer count of businesses into consideration in terms of penalties and the scope of protection of personal data, compliance is particularly important for enterprise-scale organizations. You do not necessarily have to have an active business presence in a country or region; simply storing data on or moving it through servers there may subject you to their data protection rules.
Companies should have an automated, accurate and scalable technology solution to handle a potential mountain of Subject Rights Requests (SRRs) when CCPA comes into effect. Read More
U.S. is addressing GDPR compliance and data privacy through technologies whereas Europe is taking the litigation route, will Europe wake up at some point and realize they’re behind the technology curve? Read More
The size of today's GDPR penalties has set the level against which all future data breach fines will be judged as global data breaches are pursued by multiple regulatory authorities and private citizens alike. Read More
Companies are searching for data discovery and mapping tools to meet Brazil’s LGPD requirements but it will take more than technology to identify all the gaps. Read More
Some ad tech vendors appear to be engaging in a form GDPR consent string fraud by knowingly tampering with the consent information found in a publisher’s consent string, in order to give them the ability to deliver personalized ads. Read More
Distributed SaaS platform can help enterprises expand their business, comply with global data regulations, and avoid hefty cyber losses and cybersecurity spending. Read More
Max Schrems, chairperson of noyb, has directed his organization to file over 100 privacy complaints against major businesses engaging in data transfers with the US. Read More
While the proposed Data Care Act isn't quite a full-on EU GDPR equivalent, the bill still aims to bring the tech industry's practices more in line with current approaches for handling sensitive personal information. Read More
In this final instalment of an ongoing series on the issues that affect compliance in an ever more complex world Teresa Troester-Falklooks at how organisations can demonstrate compliance using an accountability approach. Read More