The exit of the United Kingdom from the EU has caused turmoil in world markets and has far reaching consequences for those companies in the European Union doing business with the country – and vice versa. There has also been some uncertainty about how the authorities based in London will be treating data security and privacy issues. The consensus seems to be that companies doing business with the second largest economy in Europe (after Germany) should be adopting a ‘business as usual’ approach. However, will this necessarily be the case in the future? Will global companies with a British connection (including those in Asia) be forced to revisit how they treat data security and privacy issues when dealing with the United Kingdom – and will British companies move away from the rules that have been set in place by Brussels? We take a closer look.
The use and disclosure of personal data for direct marketing purposes is strictly regulated in Hong Kong with more severe consequences for non-compliance than other breaches of Hong Kong privacy law, and is often found to be significantly more onerous than in other jurisdictions. This article summarises some of the key elements of Hong Kong’s direct marketing regime.
The article provides a brief overview of the legal framework relating to data protection and privacy and discusses the provisions of relevant data protection and data privacy laws in India. It also discusses proposed legislative changes in India to strengthen and improve the existing data protection regime.
In this, the third of a series of articles, Pauline C. Reich examines how Asian countries are approaching the thorny issue of cybercrime and the interception of data. The author takes a look at two Southeast Asian countries in particular, Cambodia and the Philippines.
Are individuals more likely to allow use of their data when it’s ‘for the greater good’ – even if permission is not sought? It may be that they don’t have a choice. Even as data protection measures increase and regulatory bodies increase their ability to punish bad behaviour by data custodians, there are still some thorny issues when it comes to the moral and legal obligations governing the sharing of Big Data and personal information.
In our first article on the European Union General Data Protection Regulation (Regulation (EU) 2016/679 or ‘GDPR’) we focused on the global territorial scope of the new rules and how they could affect businesses based in Asia. In particular, we highlighted how the enhanced rights of data subjects in the EU and the expanded obligations on data controllers and data processors — even if they are located outside the EU — provide much for businesses to consider as they become compliant with the new rules. In this second article, we will focus on the new regulatory-enforcement regime and international data transfers, and then draw comparisons with the Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR) system.
Living in the age of Big Data, consumers are slowly awakening half in doubt regarding the ownership of the data which they generated. As more enterprises start utilising user-generated data for so-called target marketing, more consumers begin questioning about unfairness in sharing the profit earned by commercialising that data. This question motivates us to think about the essence of privacy. Is privacy just about the right to be let alone? Or might it include the right to sell the users' own data?
In this, the second of a series of articles, Professor Reich examines the implications of the battle between Apple and the U.S. government for other jurisdictions worldwide.
In the first part we examined whether a balance can be struck between business imperatives and employee privacy. In this second and final part of the article we delve into just how privacy issues have been treated under the law and delve further into the rights and responsibilities of both employer and employee.
In the first part of a three part series of articles, Pauline C. Reich, Professor and Director of the Asia-Pacific Cyberlaw, Cybercrime and Internet Security Research Institute at Waseda University School of Law in Tokyo, Japan gives some context to the recent US v. Apple case.










