Loading

Category: GDPR

Page 3

Subject access requests left unanswered lead to several reprimands

Unanswered subject access requests have lead to reprimands for seven organisations from the ICO.  The UK’s Information Commissioner’s Office (ICO) has taken action against seven organisations which have failed to respond to members of the public when presented with a Subject Access Request (SAR). Under the UKGDPR, individuals should be able to request from an

Cyber Resilience Act proposal for the EU

The European Commission has recently published a Cyber Resilience Act proposal for the EU, to bolster cybersecurity rules.   The European Commission announced on September 15th, 2022, the Cyber Resilience Act proposal for the EU, a set of tougher cybersecurity regulations. These rules will govern smart Internet of Things (IoT) devices, and will include heavy

The Irish DPC imposed a fine of €405 million on Meta Platforms Limited

The Irish DPC imposed a fine of €405 million on Meta Platforms Limited, relating to the processing of children’s data.    The Irish Data Protection Commission (DPC) recently imposed a fine of €405 million and a range of corrective measures on Meta Platforms Limited (Ireland), after an inquiry into the company revealed several GDPR infractions.

Token access authentication guidelines from CNIL

CNIL has recently published token access authentication guidelines for online services.    Using token authentication allows users to access an online service, program, or website without having to re-enter their login information. With this kind of authentication, the user can access his online resources as long as the access token remains in use. This lowers

Poor personal data security leads to a fine of €2,500

Poor personal data security by a digital administration platform has led to a fine for a Belgian data controller.     A Belgian data controller has recently incurred a fine for multiple GDPR violations. The controller in this case is a company that created a platform for digital administration. On this platform, suppliers and consumers can

ICO marks the anniversary of the Children’s Code

ICO marks the anniversary of the Children’s Code: “Children are better protected online in 2022 than they were in 2021.”   The Children’s Code was implemented in September 2021 and has led to major changes in children’ access to online services, including adverts and profiles. The Children’s Code, which revolutionised how children are treated in

Dealing with Data Protection Complaints as a Small Business

The ICO has published a guide for businesses on dealing with data protection complaints.   At times, simply  having data protection policies in place is not enough. Handling the data of customers, employees, and contractors can be a sensitive process and must be handled as such. There are times when businesses may experience data breaches

Czech EU Presidency proposes new data law on government access

The Czech EU Presidency of the EU Council has proposed a partial compromise on the Data Act, defining the scope and protections of Chapter V.   Prague aims to forward the discussion over the proposed Data Act by reaching an agreement on the ability of public agencies to demand access to privately owned data. According

The US CLOUD Act: what is the impact on European companies?

Following the approval of the CLOUD Act in the US, the Dutch Government requested a Memo on its application to EU Entities.   Under the GDPR, EU companies are required to comply with important data protection legislation or face serious monetary sanctions. Some critics have even argued about the GDPR’s extensive extraterritorial scope, which has

Unlawfully obtaining personal data results in the prosecution of former Health Advisor

A former Health Advisor pleaded guilty to, and was prosecuted for unlawfully obtaining personal data, and was ordered to compensate his victims.    A former Health Advisor has been prosecuted for obtaining the personal data of service users, particularly patients of South Warwickshire NHS Foundation Trust. He was found guilty of accessing the medical records