In June 2016 the Korean government announced new guidelines on personal data de-identification measures which have contributed to a greater clarity around the use and transfer of personal data for purposes other than those consented to by the data subject. How will they positively impact the big data market?
The Data Privacy Asia 2016 Conference will feature top ranked industry experts from more than 15 countries and a more interactive audience experience than ever before. The Conference, which is themed Building Digital Trust: Establishing an Ecosystem of Trust and Protection in the Digital Age will examine subjects like trust vs. innovation and privacy vs. security, how enterprises can meet the challenges of a globally diverse regulatory and compliance landscape, and the privacy challenges on IT and security.
Recently, we examined some of the challenges that companies face in terms of the evolving privacy and data protection landscape - and how these challenges may require a whole new breed of information security professional. In this second part of the series we unpack the argument for a new role combining Chief Security Officer and Chief Privacy Officer in a rapidly evolving regulatory and threat rich environment. We also chat with Chief Security and Privacy Officer (CSPO) at a Fortune 500 company to get his take on the subject.
Data privacy has long been an issue of public concern, and with changes in online technology, the problem has only deepened. From a legal perspective, a website’s privacy policy essentially functions as an agreement with a site’s users in which the operator seeks consent or agreement from the users to collect and process their personal information. The privacy policy also informs users of the specific type of information the site collects, and how this information will be utilised, processed or shared with third parties.
In this final instalment of an ongoing series on the issues that affect compliance in an ever more complex world Teresa Troester-Falklooks at how organisations can demonstrate compliance using an accountability approach.
In part one of a two part series, we examine some of the challenges that companies face in terms of the evolving privacy and data protection landscape. Data protection and privacy issues are now bedrock strategic issues for companies across the world and Information Security professionals are now under even more pressure to ensure that data remains secure. The value of data as an intangible asset continues to grow and legislation and regulation is becoming ever more stringent. The onus is on companies to comply or suffer the consequences. This is going to require a whole new breed of information security professional. In part two of this series (in next month’s newsletter) we’ll look at the argument for and against a new role combining Chief Security and Privacy Officer in this rapidly evolving regulatory environment.
Improvements to the first Privacy Shield include better data retention provisions and independent Ombudsman, but Data Protection Authorities still cautious.
In this, the final instalment in the series, Pauline C. Reich, Professor and Director of the Asia-Pacific Cyberlaw, Cybercrime and Internet Security Research Institute at the Waseda University School of Law in Tokyo, Japan examines the implications of the recent US v. Apple case in terms of disclosure requirements in Asia and across the globe.
The exit of the United Kingdom from the EU has caused turmoil in world markets and has far reaching consequences for those companies in the European Union doing business with the country – and vice versa. There has also been some uncertainty about how the authorities based in London will be treating data security and privacy issues. The consensus seems to be that companies doing business with the second largest economy in Europe (after Germany) should be adopting a ‘business as usual’ approach. However, will this necessarily be the case in the future? Will global companies with a British connection (including those in Asia) be forced to revisit how they treat data security and privacy issues when dealing with the United Kingdom – and will British companies move away from the rules that have been set in place by Brussels? We take a closer look.
The use and disclosure of personal data for direct marketing purposes is strictly regulated in Hong Kong with more severe consequences for non-compliance than other breaches of Hong Kong privacy law, and is often found to be significantly more onerous than in other jurisdictions. This article summarises some of the key elements of Hong Kong’s direct marketing regime.










