Loading

Zandilli Lucien

Author: Zandilli Lucien
Page 30

Healthcare providers’ broad data access authorisations lead to fines of over 2.9 million euros.

Healthcare providers’ broad data access authorisations lead to fines of over 2.9 million euros in Sweden.    The Swedish DPA, after reviewing eight healthcare providers found that there were deficiencies in the way that they protected access to electronic health records. The assessments primarily examined whether the health care providers had conducted the needs’ and

Marketing Executive banned by the Insolvency Service for thousands of unsolicited marketing calls.

Marketing executive banned by the Insolvency Service for six years after making 75,500 unsolicited marketing calls. A former director of a marketing company has been banned from acting as a director or directly or indirectly becoming involved, in the promotion, formation or management of a company, without the permission of the court. For the next

EDPB releases statement of clarification on the concepts of controller and processor

EDPB releases statement of clarification on the concepts of controller and processor, as well as other key functional concepts in the GDPR. The concepts of controller, joint controller and processor play such a key role in the application of the GDPR that it is imperative that these roles and their functions be clear. As a

New national privacy bill proposed in Canada.

New national privacy bill proposed in Canada, is expected to significantly increase protections to Canadians’ personal information.  Bill C-11, Canada’s newly proposed national privacy bill, which is also referred to as Digital Charter Implementation Act, 2020, will give Canadians more control and transparency when companies handle their personal information, and therefore expected to increasingly protect

ICO fines Ticketmaster UK Limited 1.39 million Euros, over chatbot cyber attack.

ICO fines Ticketmaster UK Limited 1.39 million Euros under the GDPR, for failing to prevent chatbot cyber attack.   The ICO has fined Ticketmaster UK in relation to a recent data breach which potentially affected over 9 million customers across the EU. This data breach was orchestrated via a chatbot which the company installed on

First Code of Conduct under the GDPR approved by the Spanish DPA.

The first Code of Conduct under the GDPR has been approved by the Spanish DPA. The Spanish Agency for Data Protection (AEPD), in enforcing the General Data Protection Regulation and the Data Protection Law and guarantee of digital rights, has approved the first code of conduct based on the provisions of articles 40 and 41

Guernsey-based law firm fined after sharing “highly confidential and sensitive” information.

Guernsey-based law firm fined over 11,000 Euros by the DPA, after sharing “highly confidential and sensitive” information via emails and post.   Trinity Chambers LLP sent private details about an individual and their family via emails and post, the Data Protection Authority (ODPA) found. The Office of the Data Protection Agency recently released a statement

ICO provides SAR guidance for organizations receiving requests.

ICO provides SAR guidance to simplify the process for, and give better understanding to organizations receiving subject access requests.   The ICO published information last month, geared at giving guidance to organizations who may receive subject access requests (SARs). As the weight of personal data becomes more apparent to individuals, more people are exercising their

Marriott International Inc fined under the GDPR.

Marriott international Inc was fined under the GDPR, by the ICO, for failing to keep customers’ information safe.   Marriott International Inc has been met with a fine from the ICO with regards to a data breach following a cyber attack initiated in 2014, but discovered in 2018, about which we informed in our blog

A data broking investigation by ICO results in enforcement action against Experian.

A data broking investigation conducted over the past two years has resulted in an enforcement action against the company Experian.   A data broking investigation into Experian as well as Equifax and TransUnion and their use of personal data within their data broken businesses has resulted in enforcement action. The ICO published a report earlier