GDPR

Latest

GDPR

Could “The New Twitter” Run Into Issues With GDPR One Stop Shop Rule? Irish DPC Source Indicates Staffing Situation May Be a Problem

November 28, 2022

Losing Ireland "main establishment" status means that any national DPA in the EU could bring direct GDPR action against Twitter on behalf of its citizens without the standard collaborative process that ultimately funnels everything through the Irish DPC.

Judge gavel over US and EU flags showing executive order for EU-US data transfers under GDPR

Data Protection News

Executive Order for EU-US Data Transfers Looks To Smooth Over GDPR Restrictions, but Privacy Advocates Are Unsatisfied

October 11, 2022

The crux of the privacy objections is that the executive order does not guarantee that indiscriminate collection will be stopped; it merely attempts to narrow the scope of intelligence activity in EU-US data transfers.

Hand working with VR screen with padlock icon showing GDPR and privacy regulations

Data Protection Insights

How GDPR Changed the Game for Enterprises

September 28, 2022

Organizations must elevate their data management and privacy regulations to adhere to governance policies, which will align with privacy laws. This will enable the proper management and storage of personal data and avoid some of the ongoing privacy issues faced today.

European Parliament building on a winter day at dusk showing GDPR

Data Protection Insights

Looking Back 4 Years Later, Is the GDPR All It Was Cracked Up To Be?

September 23, 2022

GDPR was introduced in 2018 and has significantly impacted privacy, transparency, and business accountability. What could have been done better, and what’s next?

Google Analytics app on smartphone screen showing EU-US data transfers considered GDPR violation

Data Protection News

Italy Bans Google Analytics Over Improper EU-US Data Transfers

July 5, 2022

Italy’s data protection authority has ruled that Google's data transfers to servers in the United States fall afoul of the rules of the GDPR, with the company not anonymizing IP addresses sufficiently.

Waving flags in front of European Parliament building showing Digital Markets Act

Data Protection Insights

EU Digital Markets Act: Key Aspects and Lingering Questions

June 7, 2022

The EU Digital Markets Act (DMA) appears headed for adoption in May. Companies providing “core platform services”, as well as those potentially receiving data from such companies, should understand not only what the DMA requires, but also its impact on existing obligations under the GDPR.

London Big Ben and Westminster Bridge showing Queen's Speech Data Reform Bill and data adequacy issue

Data Protection News

UK Data Reform Bill Announced in Queen’s Speech, Could Jeopardize Existing Data Adequacy Decision

May 16, 2022

A new data reform bill included in the 2022 Queen's Speech promises a "pro-growth" framework of greater benefit to both businesses and citizens of the UK. It could put an end to the data adequacy decision that allows personal data to continue flowing between it and the EU.

Data Protection News

Danske Bank Fined for GDPR Violations, Customer Data Held for Longer Than Legally Allowed

April 18, 2022

A statement from Danske Bank indicates that the GDPR violations are tied to an inability to build data deletion functionality into its complex interlocked IT systems despite beginning efforts in 2016.

Data flows around the city showing data transfer deal for Privacy Shield

Data Privacy News

EU and US Move Closer to Privacy Shield Replacement With Agreement on Data Transfer Deal

March 28, 2022

The EU and US have reached an agreement in principle on a Privacy Shield replacement, but details of the data transfer deal are not yet available to the public.

Face recognition signs and tags on people faces showing Clearview AI GDPR fine

Data Privacy News

Clearview AI To Pay More for Facial Recognition Scraping as Italy Issues a €20 Million Fine; Plans To Collect 100 Billion Images by 2022

March 14, 2022

Clearview AI has been found to scrape the data of European citizens for its facial recognition systems and has been ordered to remove these subjects from its database. Claims it will have 100 billion facial images by the end of 2022.

GDPR

CISA: A Coordinated Cyber Attack by Suspected Iranian Hackers Affected Over 100 Water Systems

Iranian-Linked Cyber Attack Shuts Down a UK Power Plant

FBI, CISA, and HHS Warn about Medusa Ransomware Targeting Over 500 Critical Infrastructure Organizations