Loading

cristinac

Author: cristinac
Page 5

Profiling and the GDPR —here’s what you need to know

In today’s blog we take a deeper look into profiling and the GDPR. Given the highly automated technological world that we live in, we’re pretty certain that by now you’ve heard the term profiling once, twice, thrice—who knows, maybe even hundreds of times. But what is it really? How is it used by organizations? Could

ICO launches consultation on draft right of access guidance

From now until February 12, 2020, the ICO will facilitate a public consultation on draft right of access guidance. Over a year and a half ago, the GDPR was officially implemented within the EU and UK with an aim of giving greater control to individuals over their personal data. Article 15 of the GDPR specifically

ePrivacy Regulation Draft to be updated and presented at next EU Presidency

A revamped draft ePrivacy Regulation is expected to be presented at next Presidency of the EU. Last week, Aphaia reported on the  news—originally presented by the European Digital Rights (EDRi)—that EU states had rejected the draft ePrivacy Regulation. Understandably, this shocking outcome had spurred EU wide concern. The head of policy at the EDRi had

Nevada enacts internet privacy act

Internet Privacy Act becomes law in US state of Nevada. On Oct 1st 2019, Nevada enacted the Senate Bill 220. This bill, also referred to as “An Act relating to internet privacy” came into effect some three months before the much anticipated January 1, 2020 compliance deadline of  California Consumer Protection Act. According to the

EDPB Guidelines on Data Protection by Design and by Default

The European Data Protection Board (EDPB) adopted draft guidelines on data protection by design and by default according to article 25 GDPR. Did you struggle with the decision of turning the settings on or off by default when you created your company App? Do you normally feel tempted to gather more data than necessary from

EU states reject draft ePrivacy Regulation

More than a dozen EU states have objected to draft ePrivacy Regulation text intended to complement GDPR in relation to communications Last week, the European Digital Rights (EDRi)—a civil and human rights organisation—broke the news that the Permanent Representatives Committee of the Council of the European Union has rejected the Council’s position on the draft

14.5 Million Euro Fine for Violations of GDPR

Real Estate company fined millions for violations of the General Data Protection Regulation (GDPR) in relation to its archive systems. Is your company’s archive system compatible with the GDPR? The answer to this could cost you thousands, hundreds of thousands, or even millions! Indeed this is a lesson that Berlin-based Real Estate company, Deutsche Wohnen

Aphaia attends Third Stakeholder Forum on Digitising European Industry

The forum was focused on Artificial Intelligence and Digital Innovation Hubs. Third Stakeholder Forum on Digitising European Industry took place in Madrid from the 13th to the 15th of November 2019. It brought together more than 600 attendees and 50 panellists who addressed topics like the opportunities that the AI offers to the European market

Withdrawal of Consent Should be Easy

Withdrawal of consent requests could have dire consequencesfor your company if they are not immediately and seamlessly processed. Withdrawal of consent should be just as easy as giving consent.  So says the President of the Polish Data Protection Authority. This assessment came as a result of the review of practices by company ClickQuickNow. According to

Hash function as a personal data pseudonymisation technique

Spanish Data Protection Authority (AEPD) has launched new guidance on hash function as a personal data pseudonymisation technique. GDPR refers pseudonymization of personal data as one of the appropriate technical and organisational measures that may be taken by data controllers in order to ensure a level of security appropriate to the risk. However, it does