Data Protection News, Insights and Resources

The GDPR has been in effect for a few months now, and it’s safe to say most businesses are familiar with it by now. It’s also likely a safe bet that at least a few view it as an inconvenience. Truth is, it’s anything but. From a business perspective, privacy regulations are one of the best things that could possibly exist - here’s why.

Second annual review of the EU-U.S. Privacy Shield went better than the first, but the European Commission is still waiting on the U.S. government to nominate a permanent Ombudsperson to handle potential complaints and requests from EU citizens.

While the proposed Data Care Act isn't quite a full-on EU GDPR equivalent, the bill still aims to bring the tech industry's practices more in line with current approaches for handling sensitive personal information.

So what does a GDPR data protection officer need to know to step into this role and be effective? The job will need some significant experience in both IT and risk management at minimum and also other ancillary skills that are important to success in the role.

Both the GDPR and ePrivacy Regulation alter regulations of how organisations use cookies which falls under the GDPR's definition of personal data. Why should companies care and how do they ensure compliance.

ICO had a busy 2018 with the ten largest fines totaling about £5,000,000 and also the first ICO fines levied at the maximum amount for Facebook and Equifax.

Some ad tech vendors appear to be engaging in a form GDPR consent string fraud by knowingly tampering with the consent information found in a publisher’s consent string, in order to give them the ability to deliver personalized ads.

The pace of cross-industry fraud is accelerating and becoming more costly and this is exacerbating the identity theft problem. New fraud study from LexisNexis reports that 84% of organizations had been the victim of cross-industry fraud.

The GDPR has influenced the future of corporate compliance at a global level. As we see the CCPA, the USCDPA, and bills in other jurisdictions like India and Brazil being passed, it is evident that all companies soon will be required to comply with some consumer data privacy measure.

Since June 1, eight U.S. states have either amended or enacted tougher new data breach notification laws requiring notification anywhere between 30 to 60 days. While still a far cry from the 72 hours required under the European GDPR, tougher notification laws will no doubt be adopted around the world.