Does the GDPR Apply to My Organization? The “Extraterritoriality” of the New European Data Protection Regulation

Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) repeals Directive 95/46/EC and expands on the protection of natural persons with regard to the processing of personal data and the free movement of such data. The GDPR will come into force in May 2018 and will have an expanded territorial scope of application compared to […]

Tags:

German Parliament approves Data Protection Act to implement the GDPR

  On April 28, 2017, the Deutscher Bundestag, the German Parliament adopted the Federal Data Protection Act (Datenschutz-Anpassungs- und -Umsetzungsgesetz EU – DSANPUG-EU). The Act implements in Germany the provisions of Regulation 2016/679, the General Data Protection Regulation (GDPR) . The Federal Council shall now approve the law, which will enter into force at the same […]

Tags:

WP29 approved the Revised Guidelines on Data Protection Officers

In its plenary meeting held in April 2017, Working Party 29 (WP29) examined certain critical matters regarding the implementation of Regulation 2016/679, the s.c. General Data Protection Regulation (GDPR). In that occasion, WP29 approved the Revised Guidelines on DPOs (Revised Guidelines), which contain also the following highlights compared to the Guidelines on Data Protection Officer (Guidelines) previously published. Accountability principle. The […]

Tags: ,

WP29 publishes Guidelines on Data Protection Impact Assessment

In its plenary meeting held in April 2017, Working Party 29 (WP29) examined certain critical matters regarding the implementation of Regulation 2016/679, the s.c. General Data Protection Regulation (GDPR). Among other documents, WP29 also adopted Guidelines on Data Protection Impact Assessment (DPIA), wp248,  which will be open for public consultation for 6 weeks before their […]

Tags: ,

More awareness on big data, data protection, and security

On Tuesday, January 31, 2017, a lively panel discussed The Shifting Paradigm of Data Security: Intelligence & Big Data. The German Center for Research and Innovation and the European American Chamber of Commerce organized the event. The panel included Joanna Burkey, Chief Information Security Officer, at Siemens, Joseph V. DeMarco, Partner at DeVore & DeMarco […]

Tags: , ,

Russia: Increase of fines for data protection breaches

We would like to inform you of the proposed changes to the Russian Code of the Administrative Offences (hereinafter the “Code of Administrative Offenses”). These changes are aimed at increasing and differentiating administrative liability for violation of Russian personal data protection legislation. On January 11, 2017 the respective draft bill was adopted by the Lower Chamber […]

Tags:

European cloud providers’ association issues data protection code of conduct

On September 27, 2016, the Cloud Infrastructure Services Providers of Europe (CISPE) announced the publication of the Data Protection Code of Conduct for Cloud Infrastructures Services. The CISPE comprises several major European cloud infrastructure providers. The code of conduct provides that the certified cloud infrastructure providers: will process and store data exclusively within the EU/EEA […]

Tags: , , ,

Dynamic IP addresses are personal data governed by the Data Protection law, the ECJ held

On a request for a preliminary ruling by the Bundesgerichtshof on the interpretation of 2(a) and 7(f) of Directive 95/46/EC (“Data Protection Directive”), the European Court of Justice (“ECJ”) held that a dynamic IP address registered by an online media services provider when a person accesses a website that the provider makes accessible to the […]

Tags:

1 2 3 4 5 60