Topic
Personal Data
336 published works
Data Privacy Dish
Understanding the differences in the state privacy laws: When is an organization required to conduct a DPIA?
Some modern data privacy statutes require organizations to consider and document privacy-related risks regarding certain types of processing activities. These assessments are sometimes referred to as “data protection assessments” or…
Data Counsel
Deeper Dive: Why Personal Data Deletion Matters
By Nichole Sterling, James A. Sherer
Our 2022 Data Security Incident Response Report discussed how businesses can be better positioned to meet the tight data breach notification deadlines now imposed in dozens of countries worldwide. In…
Privacy Matters
Hong Kong: Newly published Model Contractual Clauses
Organisations engaging in cross border transfers of personal data may now rely on the Recommended Model Contractual Clauses (RMCs), recently published by the Privacy Commissioner for Personal Data (PCPD). The…
DLA Piper Latin America – Law Blog
National authority of personal data protection rules on the processing of personal data in the labor sphere
By DLA Piper
Recently, the National Authority of Personal Data Protection (ANPDP) has issued Directorial Resolution No. 1022-2022-JUS/DGTAIPD-DPDP, through which it has resolved to sanction a company for the following: Having carried out…
Privacy Matters
Ireland: Large-scale inquiries progress as DPC budget and staff numbers ramp up
By John Magee, Eilis McDonald, Nicole Fitzpatrick, Sarah Dunne & Laoise McMahon The Data Protection Commission (DPC) has published its 2021 Annual Report, highlighting key observations, emerging guidance, and large-scale…
Inside Privacy
Irish DPC Publishes Guidance On Processing Children’s Personal Data
One of every five people (20.5%) in Ireland are children under the age of 14. This constitutes the highest proportion of children in the EU, where the average was 15.2%…
Privacy & Information Security Law Blog
CNIL Published Guidelines on Re-Use of Personal Data by Data Processors
The CNIL recently published guidelines on the re-use of personal data by data processors for their own purposes (such as product improvement or development of new products and services) under…
Data Privacy Dish
Cross-border Transfer Master Class: Does a U.S. controller need to use the SCCs when it onward transfers data received from a European to a non-EEA processor?
By David A. Zetoony, Carsten A. Kociok
Companies are allowed to transfer personal data outside the European Economic Area (EEA) if they are (1) transferring data to an entity that is within a country that has been…
Data Protection Report
Essential guidance for employers on COVID-19 measures at the workplace from 1 January 2022 (including recent updated measures announced on 27 December 2021)
By Wilson Ang, Jessica Paulin (SG), Jeremy Lua, Parry Tan
As part of Singapore’s move towards living with COVID-19 as an endemic disease, the country has been making efforts to re-open its economy. In order to facilitate the safe re-opening…
Global Privacy & Security Compliance Blog
UAE Publishes First Federal Data Protection Law
Organisations subject to the law should carry out a gap analysis of their current compliance position against the new requirements. By Brian A. Meenagh, Alexander Hendry, and Lucy Tucker The…