To prepare for any privacy regulation, adopt a core technical framework where privacy controls can be applied to any new or existing system. Read More
Data Protection
Certain types of personal data are very valuable to criminals, and can be very damaging to an individual or business if it falls into the wrong hands. As the world becomes more digital and more connected, more of this sort of data is generated and passed between various sources on a regular basis.
Government regulations and supervisory authorities aren’t just about keeping irresponsible parties in line. They also provide vital security guidance to every type of organization that handles sensitive personal, business or government information.
Data protection regulations also ensure that the end user has a transparent view of and a say in the processing of personal data. These safeguards play a significant role in everything from the preservation of civil rights to ensuring that democratic institutions function properly.
Some types of personal data are clear candidates for regulation: medical records, banking information, national ID numbers and so on. But some of these regulations also cover items that might seem relatively innocuous at first glance: home addresses, email addresses, website profile information and so on. For example, the European Union General Data Protection Regulation (GDPR) has stipulations about anything that is unique to an individual to include phone numbers and social media accounts. People have varying levels of privacy preference with these items, but they are often protected by regulation because they can be used for targeted scams and attempts at identity theft.
Given that regulations often take the size and customer count of businesses into consideration in terms of penalties and the scope of protection of personal data, compliance is particularly important for enterprise-scale organizations. You do not necessarily have to have an active business presence in a country or region; simply storing data on or moving it through servers there may subject you to their data protection rules.
The new normal has highlighted the need for new solutions - one of which is device-as-a-service (DaaS) which can boost overall risk mitigation in companies. Read More
A German court has slashed a GDPR fine assessed to one of the country's largest telecommunications service providers by over 90%, calling it "unreasonably high." Read More
Employing a data protection method such as data masking as soon as production data enters the development cycle ensures that data is secured before it travels downstream or outside the business. Read More
Consent is a major requirement in every data privacy regulation worldwide. PrivacyOps and automation is becoming increasingly necessary for compliance. Read More
The increase in cyber threats is forcing general counsels to grow into a strategic leadership role in terms of management of data risks, per the General Counsel Report 2021. Read More
How organizations can maintain a strong security and compliance posture during the ‘new normal’ of remote working? Read More
Though the CCPA is still relatively new, the state has already passed a substantial revision in the form of the California Privacy Rights Act (CPRA). Its terms will begin going active at the beginning of 2023. Read More
In the wake of the Schrems II decision, organizations performing EU-US data transfers are faced with significant challenges to comply with the GDPR. Read More
The 2018 Marriott data breach was one of the biggest of its type in history, and was initially looking at receiving one of the biggest fines of £99 million. However, the UK ICO has reduced the penalty to £18.4 million. Read More