Loading

Categoría: Data Protection

ICO launches consultation on draft right of access guidance

From now until February 12, 2020, the ICO will facilitate a public consultation on draft right of access guidance. Over a year and a half ago, the GDPR was officially implemented within the EU and UK with an aim of giving greater control to individuals over their personal data. Article 15 of the GDPR specifically

ePrivacy Regulation Draft to be updated and presented at next EU Presidency

A revamped draft ePrivacy Regulation is expected to be presented at next Presidency of the EU. Last week, Aphaia reported on the  news—originally presented by the European Digital Rights (EDRi)—that EU states had rejected the draft ePrivacy Regulation. Understandably, this shocking outcome had spurred EU wide concern. The head of policy at the EDRi had

Nevada enacts internet privacy act

Internet Privacy Act becomes law in US state of Nevada. On Oct 1st 2019, Nevada enacted the Senate Bill 220. This bill, also referred to as “An Act relating to internet privacy” came into effect some three months before the much anticipated January 1, 2020 compliance deadline of  California Consumer Protection Act. According to the

EDPB Guidelines on Data Protection by Design and by Default

The European Data Protection Board (EDPB) adopted draft guidelines on data protection by design and by default according to article 25 GDPR. Did you struggle with the decision of turning the settings on or off by default when you created your company App? Do you normally feel tempted to gather more data than necessary from

EU states reject draft ePrivacy Regulation

More than a dozen EU states have objected to draft ePrivacy Regulation text intended to complement GDPR in relation to communications Last week, the European Digital Rights (EDRi)—a civil and human rights organisation—broke the news that the Permanent Representatives Committee of the Council of the European Union has rejected the Council’s position on the draft

14.5 Million Euro Fine for Violations of GDPR

Real Estate company fined millions for violations of the General Data Protection Regulation (GDPR) in relation to its archive systems. Is your company’s archive system compatible with the GDPR? The answer to this could cost you thousands, hundreds of thousands, or even millions! Indeed this is a lesson that Berlin-based Real Estate company, Deutsche Wohnen

Withdrawal of Consent Should be Easy

Withdrawal of consent requests could have dire consequencesfor your company if they are not immediately and seamlessly processed. Withdrawal of consent should be just as easy as giving consent.  So says the President of the Polish Data Protection Authority. This assessment came as a result of the review of practices by company ClickQuickNow. According to

Hash function as a personal data pseudonymisation technique

Spanish Data Protection Authority (AEPD) has launched new guidance on hash function as a personal data pseudonymisation technique. GDPR refers pseudonymization of personal data as one of the appropriate technical and organisational measures that may be taken by data controllers in order to ensure a level of security appropriate to the risk. However, it does

Failure to adhere to GDPR’s Right to Object results in EUR 200,000 Fine

Hellenic Telecommunications Company fined EUR 200,000 for failure to remove email addresses from direct marketing database in keeping with GDPR’s right to object. Have you ever clicked unsubscribe from a marketing emailing list but still continued to receive emails? From experience, I’m willing to go out on a limb and say that the likelihood of

Thailand’s Personal Data Protection Act

Published earlier this year, Thailand’s Personal Data Protection Act will come into full force in May 2020. Today, we live in a highly connected technological era where data is king. Indeed Digitization has resulted in a world where data underpins almost all aspects of our lives to the point where our personal data is constantly