GDPR

Latest

GDPR

Waving flags in front of European Parliament building showing Digital Markets Act

EU Digital Markets Act: Key Aspects and Lingering Questions

June 7, 2022

The EU Digital Markets Act (DMA) appears headed for adoption in May. Companies providing “core platform services”, as well as those potentially receiving data from such companies, should understand not only what the DMA requires, but also its impact on existing obligations under the GDPR.

London Big Ben and Westminster Bridge showing Queen's Speech Data Reform Bill and data adequacy issue

Data Protection News

UK Data Reform Bill Announced in Queen’s Speech, Could Jeopardize Existing Data Adequacy Decision

May 16, 2022

A new data reform bill included in the 2022 Queen's Speech promises a "pro-growth" framework of greater benefit to both businesses and citizens of the UK. It could put an end to the data adequacy decision that allows personal data to continue flowing between it and the EU.

Data Protection News

Danske Bank Fined for GDPR Violations, Customer Data Held for Longer Than Legally Allowed

April 18, 2022

A statement from Danske Bank indicates that the GDPR violations are tied to an inability to build data deletion functionality into its complex interlocked IT systems despite beginning efforts in 2016.

Data flows around the city showing data transfer deal for Privacy Shield

Data Privacy News

EU and US Move Closer to Privacy Shield Replacement With Agreement on Data Transfer Deal

March 28, 2022

The EU and US have reached an agreement in principle on a Privacy Shield replacement, but details of the data transfer deal are not yet available to the public.

Face recognition signs and tags on people faces showing Clearview AI GDPR fine

Data Privacy News

Clearview AI To Pay More for Facial Recognition Scraping as Italy Issues a €20 Million Fine; Plans To Collect 100 Billion Images by 2022

March 14, 2022

Clearview AI has been found to scrape the data of European citizens for its facial recognition systems and has been ordered to remove these subjects from its database. Claims it will have 100 billion facial images by the end of 2022.

Data Protection News

Already Reeling, Meta’s Fate in Europe May Be Decided by Draft Decision on EU-US Data Transfers Set for Late March

February 28, 2022

Meta has issued statements indicating that a stoppage of EU-US data transfers would be "devastating" and could cause it to pull services from the region, even specifically naming Facebook and Instagram as products that could become inaccessible.

Phone with Google Analytics icon on screen showing GDPR violation for data transfers

Cyber Security News

France Finds Google Analytics to Be In Violation of GDPR Due to Overseas Data Transfers

February 17, 2022

The immediate order to cease use of Google Analytics pertains to a particular French website that was the subject of a GDPR complaint over data transfers, but signs show it expanding to the rest of the EU before long.

Digital data flow on road showing international data transfer

Data Protection News

UK International Data Transfer Tools Lay Out Path for Replacing Standard Contractual Clauses

February 15, 2022

The International Data Transfer Agreement tools are meant to reflect the changes made to the UK's own version of the GDPR, and could be available in late March.

Businessman uses a virtual network connection to protect data with a padlock showing cyber attacks under GDPR

Data Protection Insights

Cyber Attacks Under the GDPR

December 20, 2021

Be vigilant when you engage with third party service providers. Ultimately it is your responsibility under the GDPR when cyber attacks and data breaches occur, not solely your service providers.

Front of the Irish social seat of Facebook showing user consent lobby to Irish DPC

Data Protection News

Privacy Group Accuses Facebook of Trying to Lobby Irish DPC’s “Contractual” Interpretation of User Consent Into EU-Wide Guidelines

December 13, 2021

noyb has leaked documents that show Facebook approached the EDPB with their concept of “user contracts” that sidestep GDPR rules for user consent after numerous receptive meetings with the Irish DPC.

GDPR

Are Portable Digital Identities Swiftly Replacing Conventional Passwords?

Cybersecurity Incidents From Poor API Security Cost Businesses $75 Billion Annually

International Law Enforcement Partnership Takes Down Russian Botnet; Illicit Proxy Service Had Been Selling Hacked IP Addresses

Can Your Cybersecurity Strategy Stop a Determined Attacker?