fbpx

Free tools and resources for Data Protection Officers!

Tag Archives for " UK "

Uber faces fresh legal challenge over driver data

Uber drivers in the U.K. are filing a lawsuit against the company over allegations the firm has continuously broken European data protection laws.

Four drivers are taking legal action against the ride-hailing giant, claiming the company is “failing to honour its obligations” under the EU’s General Data Protection Regulation (GDPR) legislation.

Source: Uber faces fresh legal challenge over driver data

UK Issues Regulations on Post-Brexit Data Protection Law

Two sets of regulations aimed at readying UK data protection law for a post-Brexit world have been promulgated in recent weeks. These regulations, which were made pursuant to the EU (Withdrawal) Act 2018 (EUWA), will only come into force in most respects upon the UK’s withdrawal from the EU.

These regulations are intended to preserve the status quo post-Brexit by (1) amending certain provisions of the GDPR to allow it to be retained as UK domestic law and (2) transitionally adopting certain key decisions of the EU institutions that, collectively, would allow for the continued lawfulness of personal data flows out of the United Kingdom where currently permitted under EU law.

Source: UK Issues Regulations on Post-Brexit Data Protection Law

Data breaches ‘major contributor’ to UK fraud

Data breaches are a “major contributor” to fraud experienced in the UK, a new report by a banking industry trade association has said.

UK Finance’s ‘fraud the facts 2019’ report said £1.2 billion was successfully stolen “through fraud and scams” in 2018. Personal data stolen from businesses was used to perpetrate much of that fraud, according to the report.

Source: Data breaches ‘major contributor’ to UK fraud

UK’s ICO rides two businesses

The UK’s data protection watchdog raided two businesses suspected of making millions of nuisance calls.

The Information Commissioner’s Office has been investigating the companies, based in Brighton and Birmingham, for a year after receiving roughly 600 complaints about them.

The calls – said to involve road traffic accidents, personal injury claims and household insurance – did not identify the firms or allow people to opt out of receiving them.

Source: Raiding party! UK’s ICO drops in unannounced on couple of dodgy-dialling dirtbag outfits • The Register

GDPR spurs cybersecurity improvements at biggest public companies

The introduction of the General Data Protection Regulation (GDPR) spurred the UK’s biggest public companies to improve the measures they put in place to protect data, according to a UK government survey.

“The 2018 Health Check indicates that GDPR has increased the attention FTSE 350 boards give to cyber risk,” the government’s survey report said. “Over three quarters of businesses (77%) report that board discussion and management of cyber risk has increased since the introduction of GDPR, and more than half (55%) of these businesses have increased measures as a result.”

Source: GDPR spurs cybersecurity improvements at FTSE 350 companies

European Court of Human Rights to Reexamine Bulk Collection

On February 5, the European Court of Human Rights (ECtHR) announced that the Grand Chamber will reexamine two cases concerning bulk interception: the joined petitions of Big Brother Watch and Others v. United Kingdom, Bureau of Investigative Journalism and Alice Ross v. the United Kingdom, and 10 Human Rights Organisations v. the United Kingdom (collectively called “Big Brother Watch”), and Centrum för rättvisa v. Sweden (“Centrum”).

Source: European Court of Human Rights to Reexamine Bulk Collection

Extraterritorial Applicability of the UK Data Protection Act 2018 After Brexit

In the privacy world, the primary focus for most companies regarding Brexit to date has been on ensuring that data flows in and out of the UK (particularly data flows from the EU27 to the UK) can continue lawfully after that date.

But for companies operating across Europe, and indeed across the world, with establishments or customers in the UK, Brexit also has implications in terms of the applicability of the UK data protection framework to their operations.

Full article: Dark Side of the Moon: Extraterritorial Applicability of the UK Data Protection Act 2018 After Brexit

UK consumers more likely to abandon a breached company

A study by the payment security firm PCI Pal found British folks are far less forgiving of a company that suffers a breach, with 41 percent saying they would stop frequenting that store brand forever. Only 21 percent of Americans felt the same way.

Source: UK consumers more likely to abandon a breached company | SC Media

EIOPA publishes no deal Brexit insurance continuity plans

The European Insurance and Occupational Pensions Authority (EIOPA) has published recommendations for national EU insurance regulators, aimed at minimising disruption to policyholders should the UK leave the EU without a withdrawal agreement.

Source: EIOPA publishes no deal Brexit insurance continuity plans

Tate Modern wins privacy case brought by neighbours

One of Tate Modern’s most popular areas, a top-floor terrace that offers spectacular 360-degree views of London, is to remain fully open after neighbours lost a privacy case.

Judge in the case ruled that residents had created their own sensitivity by buying flats with floor to ceiling windows in the first place. He said the flats were “impressive” but the advantages of extensive glassed views “in effect comes at a price in terms of privacy”.

Source: Tate Modern wins privacy case brought by owners of £4m flats | Art and design | The Guardian

>