In our first article on the European Union General Data Protection Regulation (Regulation (EU) 2016/679 or ‘GDPR’) we focused on the global territorial scope of the new rules and how they could affect businesses based in Asia. In particular, we highlighted how the enhanced rights of data subjects in the EU and the expanded obligations on data controllers and data processors — even if they are located outside the EU — provide much for businesses to consider as they become compliant with the new rules. In this second article, we will focus on the new regulatory-enforcement regime and international data transfers, and then draw comparisons with the Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR) system.
Living in the age of Big Data, consumers are slowly awakening half in doubt regarding the ownership of the data which they generated. As more enterprises start utilising user-generated data for so-called target marketing, more consumers begin questioning about unfairness in sharing the profit earned by commercialising that data. This question motivates us to think about the essence of privacy. Is privacy just about the right to be let alone? Or might it include the right to sell the users' own data?
In this, the second of a series of articles, Professor Reich examines the implications of the battle between Apple and the U.S. government for other jurisdictions worldwide.
In the first part we examined whether a balance can be struck between business imperatives and employee privacy. In this second and final part of the article we delve into just how privacy issues have been treated under the law and delve further into the rights and responsibilities of both employer and employee.
In the first part of a three part series of articles, Pauline C. Reich, Professor and Director of the Asia-Pacific Cyberlaw, Cybercrime and Internet Security Research Institute at Waseda University School of Law in Tokyo, Japan gives some context to the recent US v. Apple case.
In part I of an ongoing series of articles Teresa Troester-Falk examined how the evolution of the concept of Accountability as a privacy and data protection principle. In this article, part II she looks at accountability in practice, and how to achieve accountability through structured privacy management.
As personal data protection continue to challenge companies it is becoming apparent that the commissions and other structures that police these issues have become impatient with organisations that are not complying with recommendations. For the first time those companies which have suffered a data breach and been found not in compliance are feeling the wrath of governing bodies.
It's not quite the world of George Orwell's 1984, but employers and employees are still searching for a meeting of minds when it comes to privacy. Can a balance be struck between business imperatives and employee privacy? In part one of a two-part article we examine just how technology is contributing to a steady erosion of employee privacy and how both employer and employee must each bear some of the burden when it comes to privacy issues.
The General Data Protection Regulation is the first comprehensive overhaul of European Union data protection rules in 20 years. This two-part article will examine the GDPR’s impact on businesses in Asia, with a focus on territorial scope, controller and processor obligations, and international data transfers.
Following the Malaysia Personal Data Protection Act (PDPA), the Personal Data Protection Standards 2015 sets out the "minimum" standards to be observed.










