GDPR: A simple explainer

ronjor · May 25, 2018

GDPR Oddsmakers: Who, Where, When Will Enforcement Hit First?

Sara Peters 5/25/2018
The GDPR grace period ends today. Experts take their best guesses on when data protection authorities will strike - and what kind of organizations will be first to feel the sting of the EU privacy law.
Click to expand...

Reality · May 26, 2018

what kind of organizations will be first to feel the sting of the EU privacy law
Click to expand...

hopefully the answer is found:

https://www.wilderssecurity.com/thr...ambridge-analytica.401743/page-9#post-2759260

Minimalist · May 27, 2018

So long, GDPR... but what did it all mean? We asked a philosopher

In the wake of the GDPR legislation, I like others have been updating my privacy settings on websites, apps and mailing lists. I have been unsubscribing here, deleting accounts there, and resetting old passwords. The feeling throughout has been one of restrained paranoia.

My diligence in following the data privacy recommendations has been fuelled by the fear that the bad people out in cyberspace will hack my accounts, steal my information and either sell it on to third parties or help themselves directly to my bank balance. I have tried to protect my personal information as assiduously as I can.
Click to expand...

http://www.wired.co.uk/article/gdpr-robert-rowland-smith

Minimalist · May 27, 2018

Facebook's Scandal And GDPR Are Creating New Opportunities For Retail

Have you noticed recently how all the tech giants have quietly updated all of their privacy policies, and small updates have been pushed out to consumers via mobile and desktops? Have you caught yourself wondering why?

Facebook. GDPR. Data Breaches. Oh my. The new era of consumer data protection is upon us.
Click to expand...

https://www.forbes.com/sites/gregpe...dpr-are-creating-new-opportunities-for-retail

ronjor · May 28, 2018

The Next Privacy Battle in Europe Is Over This New Law

By Natasha Singer May 27, 2018
The new European data privacy legislation is so stringent that it could kill off data-driven online services and chill innovations like driverless cars, tech industry groups warn.
Click to expand...

Minimalist · May 29, 2018

The GDPR can slim your mailbox while improving mailing lists and business processes

The European Union's attempt to increase consumer control of personal data has already had some useful effects. This puts it well ahead of earlier EU interventions, such as the annoying notifications of website cookies and the utterly pointless N versions of Microsoft Windows. The GDPR (General Data Protection Regulation) has prompted me to clean up my mailbox, it has greatly improved email marketing lists, and some companies have used it to improve their business processes, according to an IBM survey.
Click to expand...

https://www.zdnet.com/article/the-g...proving-mailing-lists-and-business-processes/

Minimalist · May 29, 2018

GDPR attacks: First Google, Facebook, now activists go after Apple, Amazon, LinkedIn

After privacy activist Max Schrems and his None Of Your Business organization hit Google and Facebook with General Data Protection Regulation (GDPR) complaints on Friday -- mere minutes after the long-awaited privacy regime came into effect across the EU -- the companies have now been targeted by another broadside.

This time it's French digital rights group La Quadrature du Net that's on the rampage, and it hasn't just gone after Google and Facebook. It's pursuing Apple, Amazon, and LinkedIn as well.
Click to expand...

https://www.zdnet.com/article/gdpr-...now-activists-go-after-apple-amazon-linkedin/

guest · May 29, 2018

GDPR 'risks making it harder to catch hackers'
A service used to identify and contact website owners has been forced to strip out most of the information on its site to comply with the EU's GDPR legislation.
May 29, 2018
http://www.bbc.co.uk/news/technology-44290019

Whois, which is used by the police and journalists to check the legitimacy of websites, no longer displays the name, email address or phone number of some websites.
Icann, the owner of Whois had asked for a delay to comply with GDPR.

In a letter to the Wall Street Journal entitled, The EU's gift to Cybercriminals, lawyers Brian Finch and Steven Farmer claim: "Police will be robbed of ready access to vital data drastically impeding their efforts to identify and shut down illicit activity."

"The regulatory rubric the EU has created will make it harder than ever to catch computer hackers," they wrote.

Whois was used by cyber-security firms as well as law enforcement.
Nik Whitfield, chief executive of cyber-security company Panaseer, said he had used Whois to help companies spot dodgy emails.
Click to expand...

guest · May 29, 2018

EU Parliament's Own Website Violates The GDPR
May 29, 2018
https://www.techdirt.com/articles/2...u-parliaments-own-website-violates-gdpr.shtml

I know that some people keep insisting that the requirements to be compliant aren't actually that difficult. Indeed, EU Commissioner Vera Journova recently claimed that complying with the GDPR was so easy that even she could do it.

Upon hearing that, software engineer Matthias Gliwka wondered if the EU was actually complying with its own "so easy" GDPR rules. Turns out, not so much. As Gilwka noted, the EU Parliament's own website appears to violate the GDPR.

Oops. This, of course, is not to mock the EU Parliament for screwing up, but rather to highlight the fact that when politicians and regulators insist that certain regulations are "easy" to comply with, they often have no idea what they're talking about -- and the GDPR is a case in point.

Related to that, the fallout from the GDPR is already being felt -- and it's not being felt by Google and Facebook and the other internet giants that everyone celebrating the GDPR often point to. Instead, it's hitting smaller sites really, really hard. Google and Facebook are fine. They can handle the GDPR. Everyone else is freaked out.
Click to expand...

ronjor · May 30, 2018

U.S. Commerce Chief Warns of Disruption From EU Privacy Rules

By AFP on May 30, 2018
Washington - US Commerce Secretary Wilbur Ross warned Wednesday that the new EU privacy rules in effect since last week could lead to serious problems for business, medical research and law enforcement on both sides of the Atlantic.
Click to expand...

guest · May 31, 2018

Icann Files Suit in Germany in Bid to Clarify GDPR
May 31, 2018
https://www.infosecurity-magazine.com/news/icann-files-suit-in-germany-bid/

Internet oversight body Icann has filed a one-sided lawsuit in Germany in a bid to clarify its GDPR obligations, after clashes with European regulators.
Icann is taking action after EPAG, part of the Tucows group, decided to no longer collect “administrative and technical contact information” for the Whois database as it believes it would conflict with the new privacy legislation.

However, failing to do so breaks the terms of Icann’s recently created Temporary Specification.
Although the oversight body believes the new rules comply with the GDPR, Tucows disagrees, claiming it breaks the principle of data minimization if it means the registry is required “to store and process personal data belonging to people with whom we have no legal or contractual relationship.”

“Icann has also required that we continue to publish the organization, state/province, and country fields in the public Whois. We disagree that the organization should be published because, although it is optional, many people do not realize this and put their own first and last names in the organization field,” Tucows added.
Click to expand...

guest · Jun 1, 2018

What Alphabet Won't Tell You About The GDPR
May 31, 2018
https://seekingalpha.com/article/4178492-alphabet-tell-gdpr

[...] Therefore, understanding the nuances of advertising especially as it relates to data regulations is going to be key for any savvy Alphabet investor. [...]
In addition, while Alphabet has been preparing for 18 months, they recently dropped new terms and conditions on publishers only 8 weeks before the GDPR took effect – and publishers are not happy about it.

Data collected from the Android OS augments and enriches data science modeling for Alphabet to monetize the data elsewhere. That “elsewhere” is Adsense, AdX and AdMob. Google’s AdSense and AdX Networks enable non-Google websites to incorporate Google display advertising, and this is what current publishers are in an uproar about.

To summarize, Alphabet is attempting to become a co-controller for data in some instances and a processor in other instances. It’s unknown how the European Union will view data leaks from publishers to Alphabet. [...]
Click to expand...

ronjor · Jun 2, 2018

The emergence and impact of the Data Protection Officer

Oussama El-Hilali, VP of products at Arcserve June 1, 2018
Many companies either didn’t have time, are ignoring, or are unaware of the true impact of GDPR and how it not only affects systems and processes, but also staffing needs. That said, one of the lesser known mandates of the regulation is the creation of a completely new role: The Data Protection Officer (DPO).
Click to expand...

Minimalist · Jun 8, 2018

Shape up US businesses: GDPR will be coming stateside

Despite the significant financial penalties, US consumers have tended to look away or forgive brands in the aftermath of a breach, but recent research shows that this is no longer the case.

High profile security breaches, such as the one hitting Hyatt Hotels last October, combined with the focus on privacy and personal data resulting from the Facebook case has created a more informed consumer. The majority is now demanding that brands better protect their data, threatening to take dollars and loyalty elsewhere if they feel their security is being compromised.

European consumers have long been preoccupied by privacy which leaves us wondering why the US hasn’t yet followed suit and why it took so long for consumers to show appropriate concern? With the EU passing GDPR to address data security, will we see the US implement similar laws to address increased consumer anxiety?
Click to expand...

https://www.helpnetsecurity.com/2018/06/08/gdpr-usa/

Minimalist · Jun 8, 2018

GDPR: A Compliance Quagmire, for Now

The European Union’s General Data Protection Regulation (GDPR) has gone into effect – but questions as to what compliance actually means are far from settled.

While the GDPR is a European regulation, it affects any organization that handles data on E.U. citizens, whether they be customers or partners. That means any entity in the U.S. is subject to enforcement actions, such as fines, if they do business with any E.U. citizen. In other words, it’s an E.U. law, but has global applicability.

For U.S. consumers, while they aren’t protected by the regulation when it comes to non-E.U. companies, the law could either spur similar regulation on this side of the pond, or, more likely, create an environment where industry voluntarily implements GDPR-like protections in response to consumer demand.
Click to expand...

https://threatpost.com/gdpr-a-compliance-quagmire-for-now

guest · Jun 10, 2018

GDPR will increase reported breaches and trigger a flood of ‘Right to be Forgotten’ requests
June 10, 2018
https://thenextweb.com/contributors...er-a-flood-of-right-to-be-forgotten-requests/

The General Data Protection Regulation (GDPR) is now being enforced, and 60 percent of affected businesses are not prepared. This is concerning, but I’m not here to spread the fear, uncertainty and doubt (FUD).
We’ll see a significant increase in reported breaches
Let’s look at what happened in Australia recently – in February, the country enacted the Notifiable Data Breach regulation, which increased requirements around breach notification, and immediately, reported breaches skyrocketed.
We’ll see a similar surge in reported breaches now that GDPR is enforceable, thanks to its 72-hour breach notification rule.
Companies will receive a ton of “Right to be Forgotten” requests
In addition to strengthening data security, the other primary objective of GDPR is to put EU consumers in control of their own personal data. To that end, it’s adding a few key rules: [...]

These punishments – even with their potential severity – shouldn’t be the only motivating factor for achieving compliance. Instead, keep in mind that compliance will be beneficial in the long run for your company and all customers/partners/suppliers.
Click to expand...

Minimalist · Jun 11, 2018

GDPR: The Biggest Data Breaches And The Shocking Fines (That Would Have Been)

Data is breached every single day but most of these breaches don’t make headlines. When the European Union’s General Data Protection Regulation (GDPR) came into effect May 25, 2018, many companies who experience a significant data breach won’t just be dealing with a public relations snafu and financial strain brought on by the breach, but will also face large fines mandated by the regulation. To get a sense for what the GDPR means for companies, we will review a few of the world’s largest data breaches and the implications if GDPR penalties would have been in place at the time of the breach.
Click to expand...

https://www.forbes.com/sites/bernar...s-and-the-shocking-fines-that-would-have-been

guest · Jun 11, 2018

How third-party risk affects your GDPR compliance
June 11, 2018
https://www.helpnetsecurity.com/2018/06/11/third-party-risk-gdpr-compliance/

In this Help Net Security session today, I am going to be covering third-party risk – how does this affect your GDPR compliance? One are the key tenets of the GDPR is understanding where all of your data is going, who has access to it, and what organizations have access to that data.

The problem for a lot of organizations is that they are dealing with a large number of suppliers: from vendors, outsource partners, and various organizations – even heating ventilation air conditioning organizations that may have access to personal data. So, how as security or compliance team, are you able to look and understand the risks in your supply chain? [...]
Click to expand...

Minimalist · Jun 14, 2018

ICANN Puts First GDPR Measures Into Place

Internet governance body ICANN said it has now put preliminary measures into place to comply with the EU’s General Data Protection Regulation (GDPR), as it continues to spar with European regulators and courts about changes to data processing practices that date back nearly 40 years, to the dawn of the internet.
Click to expand...

https://www.silicon.co.uk/workspace/icann-first-gdpr-measures-233681

ronjor · Jun 16, 2018

No one is opening those emails about privacy updates, and marketers are getting nervous

Michelle Castill @mishcastillo Published 12:23 PM ET Fri, 15 June 2018
The GDPR requires companies to send emails to people on their mailing list who have never bought anything, asking permission to keep emailing them.
Most Americans are not opening those emails, and some are using them to unsubscribe.
As a result, some email marketers stand to lose 80 percent of their marketing lists -- or face huge fines from the EU if they keep trying to email these people without permission.
Click to expand...

Minimalist · Jun 16, 2018

Since GDPR introduction, I didn't get even one mail in my Gmail spam folder. It seems that even marketers are afraid of fines that they could face.

Minimalist · Jun 22, 2018

Sneaky Web Tracking Technique Under Heavy Scrutiny by GDPR

What will new General Data Protection Regulation laws mean for websites that use sneaky web trackers such as browser fingerprinting to profile visitors? Privacy experts say the practice is likely illegal under the newly-enacted GDPR regulation. But they also say don’t expect the method of tracking users to disappear anytime soon, said the Electronic Frontier Foundation in a report issued Tuesday.
Click to expand...

https://threatpost.com/sneaky-web-tracking-technique-under-heavy-scrutiny-by-gdpr

ronjor · Jun 26, 2018

European readers still blocked from some US news sites

BBC 26 Jun 2018
Major American news sites, including the Los Angeles Times and the New York Daily News, remain unavailable to readers in the EU, a month after new data protection rules were implemented.
Click to expand...

ronjor · Jun 28, 2018

‘Everyone is breaking the law right now’: GDPR compliance efforts are falling short

June 28, 2018 by Jessica Davies
Part of the issue, experts say, is the vague regulation has been interpreted in wildly different ways. GDPR consent-request messages vary wildly across sites. There are default pre-ticked opt-ins, buried options that require users to hunt for them, consent banners with information only available at a further click but no button to reject, and implied consent approaches. Others have used what some industry execs refer to as “nuke buttons,” which let the user reject everything without explaining what they’re rejecting or what they’re agreeing to. Others have simply reskinned cookie-banner messages required under the existing ePrivacy directive.
Click to expand...

Reality · Jun 28, 2018

A default pre-ticked opt-in? lol what a joke. That's NOT an opt in.

Log in or Sign up

GDPR: A simple explainer

ronjor Global Moderator

Reality Registered Member

Minimalist Registered Member

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

Minimalist Registered Member

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

Minimalist Registered Member

Minimalist Registered Member

guest Guest

Minimalist Registered Member

guest Guest

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

Reality Registered Member

Log in or Sign up

GDPR: A simple explainer

ronjor Global Moderator

Reality Registered Member

Minimalist Registered Member

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

Minimalist Registered Member

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

Minimalist Registered Member

Minimalist Registered Member

guest Guest

Minimalist Registered Member

guest Guest

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

Reality Registered Member

Useful Searches