Loading

Category: GDPR

Page 20

ICO new cookies guidance

The new guidance aims to align the ICO’s position on cookies with GDPR. What should I do? There are steps a business must take to ensure compliance with the new guidance: Say what cookies will be set and explain what the cookies do The information provided to the data subject must cover: the cookies intended

British Airways data breach fine set at £183m based on GDPR

British Airways is facing a record fine of £183m data breach of its security system. The GDPR imposes stiff fines on data controllers and processors for non-compliance. On the one hand a company can either be fined up to €10 million, or 2% of the worldwide annual revenue of the prior financial year. On the

Greenwich University data breach

The ICO fined Greenwich University  £120,000 for failing to prevent  a serious data breach.  The breach disclosed the data of 19,500 students. This occurred due to a microsite developed by an academic and a student in the then-devolved University’s Computing and Mathematics School, to facilitate a training conference in 2004. The data included names, addresses, dates

Fines and Penalties imposed by data protection authorities within the EU

It’s been a little over a year since the EU General Data Protection Regulation (GDPR) came into force, but with that it has been clear that dealing with data breaches has become a norm for EU protection authorities. According to the European Data Protection Board, the majority of the cases were related to complaints, notably

Practical guidance on how to process mixed datasets

The European Commission has published guidance on the interaction between the Regulation on the free flow of non-personal data and the GDPR. One year after the GDPR started to apply, most controllers are (or at least they should) well aware of the security and privacy requirements that should govern the datasets which contain personal data.

What data should a controller disclose under a data subject access request?

A recent decision from the Cologne Regional Court addresses whether individuals are entitled to receive emails and personal notes as part of a DSAR. “I want access to all personal data you handle about me”. What should you do as the controller if you receive an email like this? According to GDPR, individuals have the right to obtain:

Workplace collection of Biometric Data

Does the collection of biometric data by employer violate privacy? For the first time in Australian history, an employee was fired for refusing to submit biometric finger scanning data required by his employer. The employee believes that he had been wrongfully terminated. After he was denied an unfair dismissal claim by an Australia’s Fair Work

Google’s Huawei ban

Google blocks Huawei access to Android after blacklisting due to some security and privacy concerns The Trump administration adds Huawei to the U.S. Department of Commerce’s Entity List via executive order, thereby blacklisting the company as far as U.S. corporations are concerned.  The world’s second biggest smartphone maker, Huawei, has been barred by Google from

EU-Japan artificial intelligence cooperation

EU Vice-President Ansip and Japan Minister Hirai discussed bilateral cooperation to promote a human-centric approach to artificial intelligence (AI), building on the joint statement of the 26th EU-Japan summit. European Commission Vice-President for the Digital Single Market, Andrus Ansip and Japan’s Minister of State for Science and Technology Policy, Takuya Hirai said after their meeting: “The

Unlawful voice data to be deleted!

A complaint from the Big Brother Watch instigated an investigation into HMRC’s Voice ID service. The ICOs investigation mainly dealt with the voice authentication for customer verification on some of HMRC’s helplines since January 2017. Customers were given insufficient information when it came to how their biometric data would be processed. Biometric data is considered