News & Analysis as of

Cybersecurity › Data Protection › Data Protection Impact Assessments (DPIAs)

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +
Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now.   less -
Barnea Jaffa Lande & Co.

New EDPB Opinion on Personal Data Protection in AI

Barnea Jaffa Lande & Co. on

Recently, the European Data Protection Board (EDPB) adopted an opinion addressing key data protection concerns arising from the use of Artificial Intelligence (AI) models. The opinion specifically focuses on how GDPR...more

Osano

Privacy by Design: Understanding and Implementing the Framework

Osano on

As of this writing, the CAM4 security incident remains the largest data breach in history. The attack on the website exposed nearly 11 billion records, including users' names, email addresses, sexual orientations, chat...more

Osano

PIA vs. DPIA: What’s the Difference?

Osano on

Avoid confusion between these two important privacy assessments and learn which is best for protecting your data. Keeping data and customer personal information (PI) secure is becoming more difficult by the day....more

Osano

DPIA Template: Follow These Steps for Your Data Protection Impact Assessments

Osano on

The GDPR contains plenty of requirements, penalties, obligations, rights, and definitions—but it doesn’t contain a specific template for DPIAs, or data protection impact assessments. If you’re struggling to identify...more

Kelley Drye & Warren LLP

Practical Privacy: Lessons from the Front Lines

Kelley Drye & Warren LLP on

With the continuing onslaught of state privacy laws, it’s easy to become overwhelmed by the number of new legal obligations while also trying to stay focused on identifying and mitigating the most pressing legal and business...more

Benesch

Privacy Points 2023: New State Laws Introduce New Audit and Internal Review Requirements for Personal Information Collection and...

Benesch on

Some states will affirmatively require annual audits of a business’s data collection and processing practices and—in some cases—to submit those audits to state regulators. With new US state data protection laws taking...more

Hogan Lovells

Reform of the procedure before the French Data Protection Authority

Hogan Lovells on

On 24 January and 8 April 2022, the procedure before the French Data Protection Authority (CNIL) was reformed with the aim notably to better respond to the growing number of complaints that the CNIL receives each year...more

Hogan Lovells

10 key proposals from the UK government’s consultation on reforming data protection law

Hogan Lovells on

On 10 September 2021, the UK Government’s Department for Digital, Culture, Media and Sport (DCMS) published its long-awaited proposals for reform of the country’s data protection laws. The consultation paper includes a...more

A&O Shearman

France – CNIL releases guidance on data protection aspects of chatbots

A&O Shearman on

On 19 February 2021, CNIL released guidance on the use of chatbots in compliance with data protection law (the Guidelines). The CNIL notes that in order to operate the chatbots, controllers will often need to process personal...more

Akin Gump Strauss Hauer & Feld LLP

New DIFC Data Protection Law in Force - What You Need to Know

Akin Gump Strauss Hauer & Feld LLP on

On October 1, 2020, the three-month grace period for businesses to comply with the Dubai International Financial Centre (DIFC) Data Protection Law (DIFC Law No. 5 of 2020) (“DPL 2020”) came to an end. Regulating the...more

McDermott Will & Emery

International News: Focus on Global Privacy and Cybersecurity - September 2020

McDermott Will & Emery on

Generally, contact tracing refers to an effort by public health officials to identify individuals with whom a patient who has tested positive for an infectious disease has been in close proximity. Public health officials will...more

Skadden, Arps, Slate, Meagher & Flom LLP

Privacy & Cybersecurity Update - August 2020

Skadden, Arps, Slate, Meagher & Flom LLP on

In this month's edition of our Privacy & Cybersecurity Update, we examine the National Institute of Standards and Technology's four principles of the "explainability" of artificial intelligence and the U.K. Information...more

Hogan Lovells

Whistleblowing Schemes: New Guidelines Issued by the CNIL

Hogan Lovells on

The French Data Protection Authority (CNIL) published new Guidelines (French only) on December 10, 2019 applicable to whistleblowing schemes, following a public consultation process. The Guidelines replace the former Single...more

Fox Rothschild LLP

Irish Data Protection Commission Issues Guide To Data Protection Impact Assessments

Fox Rothschild LLP on

We heard recently from French Data Protection Authority CNIL on the topic of Data Protection Impact Assessments (DPIAs). Now, Ireland’s Data Protection Commission has issued its own Guidance Note on DPIAs under The General...more

Fox Rothschild LLP

Insights On Video Surveillance And Data Protection

Fox Rothschild LLP on

Shortly after the recent video surveillance guidance from the EDPB, the Information Commissioner of the Isle of Man published an updated CCTV data protection guidance. Key takeaways for controllers: General...more

Fox Rothschild LLP

CNIL Issues Data Protection Kit For Developers

Fox Rothschild LLP on

The French Data protection authority, CNIL, has issued a “Developer Kit” setting forth best practices for data protection. Key takeaways: Before using a development tool, especially for personal data, read the...more

A&O Shearman

CNPD list of processing activities requiring a DPIA

A&O Shearman on

The Luxembourg data protection authority (CNPD) has published a list of processing activities triggering a mandatory data protection impact assessment (DPIA) following review by the European Data Protection Board (EDPB)....more

Fox Rothschild LLP

UK ICO Issues Guidance On Data Protection Impact Assessments

Fox Rothschild LLP on

A Data Protection Impact Assessment (DPIA) is a process, required by the EU General Data Protection Regulation (GDPR), to help identify and minimize the data protection risks of a project....more

Hogan Lovells

French Data Protection Authority’s Latest Newsletter Includes Assessment of First Four Months of GDPR & Several Guidelines

Hogan Lovells on

The French Data Protection Authority (the CNIL) published its assessment of the first four months of  GDPR and several guidelines, including one on how to make a GDPR compliant blockchain. ...more

Alston & Bird

The Digital Download - Alston & Bird’s Privacy & Data Security Newsletter - June 2018

Alston & Bird on

Features - Updates on the GDPR and EU - German DPAs Issue DPIA Blacklists; Many Companies Likely to Be Affected - One of the GDPR’s core going-forward obligations is the duty to conduct data protection impact assessments...more

Alston & Bird

German DPAs Issue DPIA Blacklists; Many Companies Likely to be Affected

Alston & Bird on

The GDPR entered into force on May 25, 2018. One of the GDPR’s core going-forward obligations is the duty to conduct Data Protection Impact Assessments (DPIAs) over processing activities that create a “high risk” to...more

Alston & Bird

Belgian Privacy Commission Issues DPIA “Black” and “White List” Recommendation

Alston & Bird on

On February 28, 2018, the Belgian Privacy Commission issued a recommendation on the position it takes with regard to data protection impact assessments (or “DPIAs”) as foreseen in the GDPR. A DPIA under the GDPR is similar in...more

Dickinson Wright

The GDPR Covers Employee/HR Data and It's Tricky, Tricky (Tricky) Tricky: What HR Needs to Know

Dickinson Wright on

The European Union (EU) General Data Protection Regulation (GDPR) comes into effect on May 25, 2018, so in less than 60 days. While many companies have been working to ensure compliance with respect to their customer and...more

Thomas Fox - Compliance Evangelist

Countdown to GDPR-DPIAs

Thomas Fox - Compliance Evangelist on

In our continuing countdown to GDPR, we take up a key element in the upcoming General Data Protection Regulation (GDPR), which comes into effect on May 25, 2018, that being the issue of the Data Protection Impact Assessment...more

Ladas & Parry LLP

Data Protection Impact Assessment

Ladas & Parry LLP on

Article 35 of the GDPR provides for Data Protection Impact Assessments (DPIA). According to Article 35(1) a DPIA is required when “the processing [of data] is likely to result in a high risk to the rights and freedoms of...more

27 Results
 / 
View per page
Page: of 2
Next »

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up Log in
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide