The 2018 Marriott data breach was one of the biggest of its type in history, and was initially looking at receiving one of the biggest fines of £99 million. However, the UK ICO has reduced the penalty to £18.4 million. Read More
Data Protection
Certain types of personal data are very valuable to criminals, and can be very damaging to an individual or business if it falls into the wrong hands. As the world becomes more digital and more connected, more of this sort of data is generated and passed between various sources on a regular basis.
Government regulations and supervisory authorities aren’t just about keeping irresponsible parties in line. They also provide vital security guidance to every type of organization that handles sensitive personal, business or government information.
Data protection regulations also ensure that the end user has a transparent view of and a say in the processing of personal data. These safeguards play a significant role in everything from the preservation of civil rights to ensuring that democratic institutions function properly.
Some types of personal data are clear candidates for regulation: medical records, banking information, national ID numbers and so on. But some of these regulations also cover items that might seem relatively innocuous at first glance: home addresses, email addresses, website profile information and so on. For example, the European Union General Data Protection Regulation (GDPR) has stipulations about anything that is unique to an individual to include phone numbers and social media accounts. People have varying levels of privacy preference with these items, but they are often protected by regulation because they can be used for targeted scams and attempts at identity theft.
Given that regulations often take the size and customer count of businesses into consideration in terms of penalties and the scope of protection of personal data, compliance is particularly important for enterprise-scale organizations. You do not necessarily have to have an active business presence in a country or region; simply storing data on or moving it through servers there may subject you to their data protection rules.
With less than a year until the new implementation date, how can organizations successfully prepare for Thailand’s PDPA enforcement come May 31, 2021? Read More
Experian’s data broking department providing marketing analytics is in trouble with the UK ICO, requiring it to make major changes to its direct marketing services. Read More
Whether you are a musician, entrepreneur, photographer, inventor, vlogger, or anyone producing original content, you need to protect your intellectual property. Here are 11 proven ways. Read More
The IAB TCF was one of the first ad tracking standards to ensure compliance with GDPR terms. There's just one small problem; it may not actually comport with the relevant data protection rules. Read More
Key takeaways from the data rights report include that access and deletion are the most common types of requests, and that data accountability is a major technical challenge. Read More
The main issues surrounding data management and consumer privacy will only accelerate as we move forward into the final months of the year. Here are three major trends and events to look out for. Read More
One of the largest GDPR fines to date, the UK ICO's decision found that the travel giant was negligent due to ‘poor security arrangements’ creating a hole that was exploited for two months. Read More
LGPD has been active for a month now and may be a major job creator for Latin America's biggest nation. A new report from IAPP found that 50,000 new DPOs will be needed. Read More
Web scraping can become a cautionary tale if it doesn’t comply with the GDPR, or, most recently, with the CCPA. What are the considerations and how can you do it successfully and with ease? Read More