fbpx

Download free GDPR compliance checklist!

Tag Archives for " law "

Proposed Amendment to the North Carolina Identity Theft Protection Act

In April 2019, with the introduction of House Bill 904, a bi-partisan effort was made to strengthen cyber security in North Carolina.

H.B. 904 seeks to make North Carolina’s Identity Theft Protection Act one of the strongest in the nation by broadening the definition of what constitutes a data breach, what proactive steps companies and employers must take to prevent a breach of their customers or employees’ personal information, and the penalties available to victims of data breaches, among other provisions.

Source: Proposed Amendment to the North Carolina Identity Theft Protection Act | Spilman Thomas & Battle, PLLC – JDSupra

Atlassian says encryption-busting law has damaged Australia’s tech reputation

Startup darling has taken further aim at the TOLA Act, echoing calls for the warrant process to have independent oversight.

Atlassian believes Australia’s encryption-busting legislation continues to have a negative impact on the country’s technology sector, both from the perspective of partnering with an Australian company and attracting tech talent down under.

Source: Atlassian says encryption-busting law has damaged Australia’s tech reputation | ZDNet

The NYDFS Brings First Enforcement Action under the Cybersecurity Regulation

On Tuesday, July 21, 2020, the New York Department of Financial Services (NYDFS) brought its first enforcement action under its Cybersecurity Regulation against a large title insurer for failing to protect sensitive personal information.

The NYDFS is seeking civil monetary penalties, an order requiring the Company to remedy the alleged violations, and any other relief deemed just and appropriate.

Source: The NYDFS Brings First Enforcement Action under the Cybersecurity Regulation

Irish Court of Appeal Clarifies Boundaries of Concept of Personal Data

The Irish Court of Appeal has clarified the scope of the definition of personal data – noting that, while the definition is deliberately very broad, it does not facilitate access by an individual to reports stemming from a complaint for the sole reason that the complaint was made by that individual.

The Court of Appeal noted that complexities can arise from the requirement to apply a broad definition to the term “personal data”, and considered that the appeal centred around the meaning of the term “relating to” when determining whether the document in question, PwC’s response to a complaint made by Mr Nowak to the regulatory body, contained data “relating to” Mr Nowak.

Source: Ireland: Irish Court of Appeal Clarifies Boundaries of Concept of Personal Data

The European Commission Considers Amending the General Data Protection Regulation to Make Digital Age of Consent Consistent

The European Commission published a Communication on its mandated two-year evaluation of the General Data Protection Regulation (GDPR) on June 24, 2020 in which it discusses as a future policy development “the possible harmonisation of the age of children consent in relation to information society services.”

Currently, the GDPR allows individual Member States some flexibility in determining the national age of digital consent for children between the ages of 13 and 16. However, upon the two-year review, the Commission expressed concerns that the variation in ages across the EU results in a level of uncertainty for information society services–any economic activities taking place online–and may hamper “cross-border business, innovation, in particular as regards new technological developments and cybersecurity solutions.”

Source: The European Commission Considers Amending the General Data Protection Regulation to Make Digital Age of Consent Consistent

The European Commission’s GDPR review in short

Two years after the GDPR entered into force, the European Commission issued its first evaluation of the GDPR.

According to the EC, the GDPR’s data protection rules have proven that they are fit for the digital age, as they help to foster trust-worthy innovation, empower individuals to have more control over their personal data and guarantee the free flow of personal data within the EU.

Full article: The European Commission’s GDPR review in short

Congress wants Apple and Google to clamp down on foreign apps

Congress is calling on Apple and Google to clamp down on apps that weren’t born in the USA.

Trump’s administration is currently mulling a complete ban of any Chinese software but, while that debate is ongoing, Congress wants the two largest mobile platform holders to begin clamping down on foreign apps in less radical ways.

Source: Congress wants Apple and Google to clamp down on foreign apps

Tech giants halt cooperation with Hong Kong authorities

Microsoft, Google, Facebook, Twitter and other major technology companies say they have suspended processing requests for user data from Hong Kong authorities after China’s new national security law come into force late June.

Provisions include police having more power to demand information or compel companies to take down information from the internet, as well as giving the government new ways to restrict social media.

Source: Tech giants halt cooperation with Hong Kong authorities

Republicans push bill requiring tech companies to help access encrypted data

A group of Senate Republicans is looking to force tech companies to comply with “lawful access” to encrypted information, potentially jeopardizing the technology’s security features.

The proposed legislation is Congress’ latest attempt to weaken encryption from tech giants.

Source: Republicans push bill requiring tech companies to help access encrypted data – CNET

Israel introduces new contact-tracing bill

Throughout the COVID-19 global outbreak, Israel has taken a unique approach for fighting the pandemic.

While other countries have developed and implemented new technologies for contact tracing, Israel preferred using a covert technology, operated by the General Secret Service for anti-terror purposes.

Source: Israel introduces new contact-tracing bill

1 2 3 128
>