Loading

Tag: personal data

Tag: personal data
Page 3

The Delaware Personal Data Privacy Act: A Comprehensive Overview

With the introduction of the Delaware Personal Data Privacy Act, Delaware has joined the ranks of US states with their own consumer privacy laws.   Governments worldwide are enacting legislation to safeguard individuals’ sensitive information and hold businesses accountable for its protection. The Delaware Personal Data Privacy Act (DPPA) is one such regulation that aims

The ICO issues guidance on personal data transfers to the US under UK GDPR

The ICO issues guidance aiming to support organisations conducting personal data transfers to the US using an Article 46 UK GDPR mechanism to those organisations that are not self-certified under the UK Extension to the EU-US DPF.    Transferring personal information across borders has become a crucial aspect of our interconnected world. In the digital

EDPB publishes urgent binding decision regarding Meta

EDPB publishes urgent binding decision regarding Meta, emphasizing the company’s obligation to provide clear, transparent information to users about how their data is being used.   The European Data Protection Board (EDPB) recently published an urgent binding decision regarding Meta, the technology conglomerate, also known as Facebook. This decision marks an important development in data

The Tennessee Information Protection Act: A Comprehensive Overview

The Tennessee Information Protection Act is a legislation that protects the privacy of personal information collected by businesses and government agencies in Tennessee.    The Tennessee Information Protection Act (TIPA) is a significant legislative development in the sphere of data privacy, mirroring the growing trend of state privacy laws across the United States. This legislation

UK-US Data Bridge heralds a new era of transatlantic data flow

Alongside the EU- and Swiss-US Data Privacy Frameworks, the implementation of the UK-US Data Bridge heralds a new era of transatlantic data flow, emphasizing the importance of data protection.   On 12th October 2023, a significant milestone was achieved as the UK-US Data Bridge officially became law, marking a new era of transatlantic data flow.

The Connecticut Data Privacy Act

The Connecticut Data Privacy Act regulates and protects the personal data of Connecticut residents and requires businesses to implement comprehensive data protection measures.    The Connecticut Data Privacy Act (CDPA) is a robust legal framework designed to protect citizens’ privacy rights and regulate how companies and organizations handle personal data. The CDPA, like other state

Unlawfully obtaining personal data results in the prosecution of former Health Advisor

A former Health Advisor pleaded guilty to, and was prosecuted for unlawfully obtaining personal data, and was ordered to compensate his victims.    A former Health Advisor has been prosecuted for obtaining the personal data of service users, particularly patients of South Warwickshire NHS Foundation Trust. He was found guilty of accessing the medical records

Danish bank fined for failure to delete the data it no longer needed

The Danish SA has proposed a fine, and had Danske bank reported to police officials, after the bank reportedly neglected to have data deleted.    The Danish Supervisory Authority has filed a police report against Danske Bank and proposed a fine on the bank, of €1.3 million, according to this report from the EDPB. This

Violation of data minimisation leads to administrative fine

The Finnish DPA has fined the Finnish Motor Insurers’ Centre, after this controller was found to be in violation of data minimisation.  The Finnish DPA has fined the Finnish Motor Insurers’ Centre over their inability to adhere to the principle of data minimisation. The company was fined late last year, for collecting an unnecessary amount

How subcontractors can reuse data: CNIL outlines specific conditions

How subcontractors can reuse data: this is possible only under specific conditions, which CNIL has outlined with specific context.   Under the GDPR, there are several conditions which need to be met in order for subcontractors to reuse data provided to them by the data controller. French regulator; CNIL has outlined the context under which