GDPR: A simple explainer

guest · Jul 11, 2019

You Can’t Ignore GDPR In Customer Service
June 25, 2019
https://go.forrester.com/blogs/you-cant-ignore-gdpr-in-customer-service/

Many organizations, particularly in North America, think that the EU’s General Data Protection Regulation (GDPR) doesn’t apply to them. On May 25, 2018, the day the GDPR went into effect, I happened to be in Canada doing an in-person workshop with a large financial services client. In a session about contact center trends, I mentioned GDPR — only to be greeted with blank stares and “What’s that?” from the room. On the day of implementation!

GDPR doesn’t just affect European companies. It has global reach, and momentum for similar consumer privacy regulations is growing in the US, as well.
Don’t put your brand at risk by ignoring regulations like the GDPR — they’re steadily gaining momentum around the world, and your blank stares will only run you afoul of data protection authorities in the event of an unfortunate data incident.
Click to expand...

Minimalist · Jul 29, 2019

Think beyond tick-box compliance

Just over a year since the European Union’s General Data Protection Regulation (GDPR) came into force, many organisations still have a lot of work to do to make real changes and shift focus away from fines and instead to business value, according to PwC.
Click to expand...

https://www.computerweekly.com/news/252467484/Think-beyond-tick-box-compliance

Minimalist · Jul 31, 2019

UK Firms Move Operations as Brexit Data Fears Grow

UK businesses are stepping up their preparations for a potentially tortuous split from the EU, with a third moving some operations to the continent to avoid data privacy regulatory issues, according to new research.

Business process outsourcer Parseq polled 500 decision makers in businesses with 250+ employees about how Brexit might impact their current data privacy obligations.
Click to expand...

https://www.infosecurity-magazine.com/news/uk-firms-move-operations-as-brexit/

Minimalist · Aug 1, 2019

GDPR taken more seriously after first fines

Security professionals believe the first big fines under the General Data Protection Regulation will get organisations to take the new rules more seriously, but will not necessarily change policies or practices
Click to expand...

https://www.computerweekly.com/news/252467726/GDPR-taken-more-seriously-after-first-fines

Minimalist · Aug 9, 2019

Talk about unintended consequences: GDPR is an identity thief's dream ticket to Europeans' data

Black Hat When Europe introduced the General Data Protection Regulation (GDPR) it was supposed to be a major step forward in data safety, but sloppy implementation and a little social engineering can make it heaven for identity thieves.
Click to expand...

https://www.theregister.co.uk/2019/08/09/gdpr_identity_thief/

Minimalist · Aug 9, 2019

Consumers feel privacy is no safer under GDPR

GDPR’s impact since its rollout last year is somewhat hard to measure, but Tripwire decided to conduct several quick surveys on Twitter to measure how consumers and businesses view the privacy regulations impact in light of the recent fines levied against British Airways and Marriott.
Click to expand...

https://www.scmagazine.com/home/sec...onsumers-feel-privacy-is-no-safer-under-gdpr/

Minimalist · Aug 14, 2019

GDPR faces growing pains across Europe

The General Data Protection Regulation is over a year old now, but it faces challenges across Europe where compliance has taken place at different speeds
Click to expand...

https://www.computerweekly.com/news/252468372/GDPR-faces-growing-pains-across-Europe

guest · Aug 21, 2019

When will the GDPR pot boil over? It’s sooner (and different) than you think
August 21, 2019
https://www.helpnetsecurity.com/2019/08/21/gdpr-future/

There’s an old saying that a watched pot never boils. In reality, the sauce in that pot is heating up in a way we can’t quite see yet. After the major compliance ramp by companies in 2018, a lot of us thought the impact of GDPR would be instant and boiling over, so to speak. Instead we watch, and hear complaints that one year out from its effective date, the GDPR is barely bubbling with mostly minimal fines.

The GDPR sauces have been slowly simmering and are just beginning to boil. Just how hot is it? Let’s take a look at the security and privacy lessons from enforcement actions small and large, especially for security, privacy professionals and executives.
Click to expand...

Minimalist · Aug 22, 2019

GDPR fines impacting cyber security spend

Large General Data Protection Regulation (GDPR) fines against British Airways and Marriott have had a ripple effect on board level involvement and spending plans in relation to cyber security within UK financial firms.
Click to expand...

http://www.fstech.co.uk/fst/Clearswift_GDPR_Fines_Research.php

guest · Aug 22, 2019

7 steps to highly effective GDPR compliance
August 21, 2019
https://www.itgovernance.co.uk/blog/7-steps-to-highly-effective-gdpr-compliance

The GDPR (General Data Protection Regulation) hasn’t exactly crept up unnoticed over the past year or so, but it’s still caught many organisations by surprise.
Some mistakenly thought that it would only affect large organisations, others doubted that the much-discussed massive fines would ever be issued, and a few thought that Brexit would save them from the EU regulation.

If you’re overwhelmed about GDPR compliance or find most implementation advice too technical and complex, don’t worry. IT Governance has created a simple guide to help you understand how to achieve regulatory compliance and avoid disciplinary action.
But exactly how should you proceed? Let’s take a look.
Click to expand...

guest · Aug 27, 2019

Facial recognition in schools leads to Sweden’s first GDPR fine
August 27, 2019
https://thenextweb.com/eu/2019/08/27/facial-recognition-in-schools-leads-to-swedens-first-gdpr-fine/

The Swedish Data Protection Authority (DPA) has served a municipality in northern Sweden the country’s first GDPR fine — amounting to almost €19,000 (200,000 SEK) — for using facial recognition technology to monitor the attendance of students in school.

The high school in Skellefteå conducted a pilot program last fall where the attendance of 22 students over a period of three weeks was taken with the help of facial recognition technology, instead of good ol’ fashioned roll call, according to Computer Sweden.
The school failed to consult the Swedish DPA before launching its program and didn’t do a proper impact assessment.

This is an incredibly serious offense as the school unlawfully processed sensitive biometric data on its students, but it seems to have gotten off ‘lightly’ considering the maximum fine could amount to almost €1 million.
Click to expand...

Minimalist · Sep 11, 2019

GDPR non-compliance worse than feared

Over half of UK businesses do not yet appear to be fully GDPR-compliant, and many have de-prioritised their compliance efforts
Click to expand...

https://www.computerweekly.com/news/252470436/GDPR-non-compliance-worse-than-feared

Minimalist · Sep 16, 2019

GDPR One Year Anniversary: The Civil Society Organizations’ View

GDPR is a landmark in privacy jurisdiction. Through its 99 articles, it sets a framework for both businesses and individuals on their rights and responsibilities when it comes to protecting privacy. The most important element in my opinion is that privacy functions a fundamental human right and needs to be protected.
Click to expand...

https://www.tripwire.com/state-of-s...anniversary-civil-society-organizations-view/

guest · Sep 16, 2019

Is your school GDPR compliant? Use our checklist to find out
September 16, 2019
https://www.itgovernance.co.uk/blog/is-your-school-gdpr-compliant-checklist

GDPR compliance in schools
Schools have a particularly hard time of it when it comes to the GDPR. They often work with tight budgets and lack the resources to retain a dedicated information security team.

Additionally, schools process large amounts of children’s data, which merits extra protection. In some cases, there are specific rules that apply to children, which means data processors must work out whether the data subject qualifies as a child (defined as under 13 in the UK) before proceeding.
If that’s the case, the data processor must account for requirements concerning: [...]
[...] but many schools still fail to understand the importance of compliance or make the necessary changes. The ICO (Information Commissioner’s Office) reported that breaches in the education sector increased by 43% in the first three months that the GDPR was effective.
Click to expand...

guest · Sep 16, 2019

Companies still unprepared for GDPR rule changes and potential EU data breaches
A new survey finds many companies are still in the dark about GDPR compliance
September 16, 2019
https://www.techrepublic.com/articl...d-potential-eu-data-breaches/#ftag=RSS56d97e7

Enterprises across the world are still struggling to comply with the new rules enshrined in the GDPR that came into effect more than a year ago. The regulation had global implications, forcing companies in the US, China and Japan to comply with new, sometimes arcane, rules previously unseen on this scale.

A new study commissioned by international law firm McDermott Will & Emery and conducted by the Ponemon Institute found that almost 50% of respondents experienced at least one personal data breach that was required to be reported under GDPR in the last year.
Click to expand...

Minimalist · Sep 26, 2019

GDPR: Only one in three businesses are compliant – here's what is holding them back

GDPR came into force over a year ago but many organisations are still struggling to comply with data privacy legislation - despite the prospect of fines.
Click to expand...

https://www.zdnet.com/article/gdpr-...re-compliant-heres-what-is-holding-them-back/

ronjor · Sep 27, 2019

GDPR compliance: Whose job is it and is it really possible?

Alex Scroxton Security Editor Published: 27 Sep 2019
Nobody seems to have a good handle on business GDPR compliance, how many businesses are compliant, or indeed what compliance really is, but according to security experts, it very much depends on who you talk to
Click to expand...

guest · Oct 8, 2019

Updated whitepaper available: “Navigating GDPR Compliance on AWS”
October 8, 2019
https://aws.amazon.com/blogs/securi...-available-navigating-gdpr-compliance-on-aws/

The European Union’s General Data Protection Regulation 2016/679 (GDPR) safeguards EU citizens’ fundamental right to privacy and to personal data protection. In order to make local regulations coherent and homogeneous, the GDPR introduces and defines stringent new standards in terms of compliance, security and data protection.

The updated version of our Navigating GDPR Compliance on AWS whitepaper (.pdf) explains the role that AWS plays in your GDPR compliance process and shows how AWS can help your organization accelerate the process of aligning your compliance programs to the GDPR by using AWS cloud services.
The whitepaper provides guidelines to better orient you to the wide variety of AWS security offerings and to help you identify the service that best suits your GDPR compliance needs.
Click to expand...

guest · Oct 31, 2019

GDPR is changing consumer trust and data security across Europe
October 31, 2019
https://betanews.com/2019/10/31/gdpr-trust-security/

According to the results of a new survey, 74 percent of organizations say that since GDPR was introduced in 2018 it has had a beneficial impact on consumer trust, and 73 percent claim it has boosted their data security.
The study from Check Point questioned 1,000 CTOs, CIOs, IT and security managers from organizations in the UK, France, Germany, Italy and Spain. It shows that GDPR is delivering a strong positive effect overall for European businesses.

Overall, 83 percent of those polled say their organization uses cloud solutions. But many are more cautious about how the cloud is employed following GDPR's introduction. Just seven percent of companies have taken the drastic measure of ceasing to use cloud solutions altogether as a result of GDPR.

"What's clear from this research is that many European organizations have made significant progress in implementing the steps required to become GDPR compliant," says Rafi Kretchmer, head of product marketing at Check Point Software.
Check Point has also developed a new application called GDPRate to guide businesses through the essential components of an effective GDPR compliance strategy.
Click to expand...

Check Point: New research – how European companies are tackling GDPR

guest · Nov 5, 2019

Edward Snowden Says EU’s GDPR Gives A False Sense Of Reassurance
November 5, 2019
https://fossbytes.com/edward-snowden-says-eus-gdpr-gives-a-false-sense-of-reassurance/

According to American Whistleblower Edward Snowden, the EU’s data protection laws that came into force in the aftermath of Facebook’s Cambridge Analytica Scandal is nothing but a “paper tiger”.
GDPR is missing the point
“I think the mistake it makes is actually in the name; the General Data Protection Regulation (GDPR) misplaces the problem,” Snowden told at the conference.
Snowden’s primary argument is that while GDPR is a good effort, it completely misses the point. According to him, the EU’s data regulation law normalizes the data collection practices of major tech giants.

"It’s ok to spy on everyone all the time whether they are your customers or your citizens…so long as it never leaks, so long as only you are in control of what it is that you’ve stolen from everybody"
While at the conference, he also adds that data collection business models of tech giants such as Google and Facebook tantamount to “abuse…yet every bit of it, they argue, is legal.”
Click to expand...

guest · Nov 7, 2019

German housing giant fined £12.5m for GDPR violations
November 7, 2019
https://www.itpro.co.uk/policy-legislation/34776/german-housing-giant-fined-125m-for-gdpr-violations

German property company Deutsche Wohnen has been hit with a staggering data protection fine for hanging onto a treasure trove of personal and financial data of former and current housing tenants.

The firm was fined €14.5 million (approximately £12.5 million) after German data protection investigators found it had been holding information in an archival system from which it was impossible to delete records.
This highly sensitive data, which belonged to former and current tenants, included salary information, extracts from employment and training contracts, tax and health insurance records, as well as bank statements.

The German property firm was first warned about its archive system in 2017, according to the data regulator, and requested to change its archiving system as a matter of urgency.
Although the firm changed the archive system in March 2019, the changes still did not establish a lawful basis for storing the personal data [...]
Click to expand...

guest · Nov 27, 2019

Top GDPR breaches caused millions in fines
The biggest three make up more than the following seven combined
November 27, 2019
https://www.itproportal.com/news/top-gdpr-breaches-caused-millions-in-fines/

It’s been a year and a half since General Data Protection Regulation (GDPR) came into force, and in this year alone, companies have been fined in the millions for various data breaches.
According to PreciseSecurity analysis, the top ten biggest GDPR fines combined amount to $443.7 million. The three biggest data breaches make up almost 90 per cent of this sum.

The biggest fine went to British Airways, which got fined $225.16m for a data breach [...] The number two spot goes to Marriott International.
The world’s most popular search engine, Google, sits in number three, with a $55 million fine.
The top three highest data breach penalties in 2019 have caused a financial cost of roughly $400 million.
Click to expand...

PreciseSecurity: Top 10 GDPR Breaches in 2019 Cause €402.6 Million Fines

guest · Dec 10, 2019

GDPR Breach: German Privacy Regulator Fines 1&1 Telecom
$11 Million Fine for Authentication Shortcomings at Telecommunications Provider
December 10, 2019
https://www.inforisktoday.com/gdpr-breach-german-privacy-regulator-fines-11-telecom-a-13482

One of the largest fines to date for breaching the EU's General Data Protection Regulation has been announced by Germany's federal privacy watchdog.

On Monday 1 & 1 Telecommunications was fined €9.55 million ($10.6 million) by Germany's Federal Commissioner for Data Protection and Freedom of Information, aka the BfDI, for its failure to put in place "sufficient technical and organizational measures" to protect customer data in its call center environments. The company has said it will appeal the fine.

"Data protection is fundamental rights protection," says Federal Commissioner Ulrich Kelber. "The fines imposed are a clear sign that we will enforce this protection of fundamental rights. [GDPR] gives us the opportunity to strongly sanction the inadequate security of personal data. We apply these powers in the light of due consideration."
1&1 Fined for Poor Authentication
The BfDI says it fined 1 & 1 Telecom after discovering that callers to its call center could retrieve customer information simply by giving their name and date of birth, which it said was an insufficient level of authentication for protecting customer data.
Click to expand...

Also on Monday and in a separate case, the BfDI announced a fine of €10,000 ($11,100) against internet service provider Rapidata GmbH, for its failure to appoint a data protection officer, as required by GDPR, which is known as Datenschutz-Grundverordnung - the DSGVO - in Germany.
Click to expand...

guest · Jan 14, 2020

UK data watchdog kicks £280m British Airways and Marriott GDPR fines into legal long grass
January 13, 2020
https://www.theregister.co.uk/2020/01/13/ico_british_airways_marriott_fines_delayed/

The UK Information Commissioner's Office has kicked £280m in data breach fines against British Airways and US hotel chain Marriott into the long grass.

As spotted by City law firm Mishcon de Reya, the ICO has extended the time before it will fine the two companies what it claimed would be a total of £282m, split between BA's £183m and Marriott's £99m.

In a statement the UK's data protection regulator said: "Under Schedule 16 of the Data Protection Act 2018, BA [and Marriott] and the ICO have agreed to an extension of the regulatory process until 31 March 2020. As the regulatory process is ongoing we will not be commenting any further at this time."
Click to expand...

ICO agrees delay over GDPR fines with both BA and Marriott

UK legislation gives the ICO just six months to convert a notice of intent to a fine, and those six months were, by approximate calculation, due to expire in early January. As we recently noted – the midnight hour was approaching.
However, the law does allow the period to be extended if the ICO and the proposed recipient of the fine agree to an extension.

It is difficult to speculate just now on the reasons for the extension, but query whether settlements – similar to that agreed recently between ICO and Facebook – are being proposed.
Click to expand...

guest · Jan 22, 2020

GDPR Fines: Legal Consistency “Years Away” as Penalties Hit €114 Million
January 20, 2020
https://www.cbronline.com/boardroom/policyregulation/gdpr-fines-survey/

European data protection regulators have dished out over €114 million in GDPR fines since the regulation came into force in May 2018, DLA Paper figures showed today, with the law firm saying it expects enforcement activity to ramp up in coming years.

The law firm said over 160,000 data breach notifications have been made in 20 months across the 28 European Union Member States plus Norway, Iceland and Liechtenstein. Current data breach notifications are running at 278 per day across Europe, it added.
The Netherlands came top with 147.2 reported breaches per 100,000 people, up from 89.8 per 100,000 people last year, followed by Ireland and Denmark.

Ask two different regulators how GDPR fines should be calculated and you will get two different answers. We are years away from having legal certainty on this crucial question, but one thing is for certain, we can expect to see many more fines and appeals over the coming years.”
Click to expand...

DLA Piper: DLA Piper GDPR Data Breach Survey 2020

Log in or Sign up

GDPR: A simple explainer

guest Guest

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

Minimalist Registered Member

Minimalist Registered Member

guest Guest

guest Guest

Minimalist Registered Member

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

GDPR: A simple explainer

guest Guest

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

Minimalist Registered Member

Minimalist Registered Member

guest Guest

guest Guest

Minimalist Registered Member

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches