Stefan Schuppert and Tim Wybitul, Irish High Court Refers Questions to European Court of Justice: Can National DPAs Disregard Safe Harbor?

The author discusses the question referred by the Irish High Court to the European Court of Justice (Case 2013 765 JR) of whether “national data protection authorities in Europe may disregard the Safe Harbor decision of the European Commission when assessing whether the U.S. recipient of data ensures an adequate level of data protection required under […]

Cybersecurity Information Sharing Act of 2014

Senator Feinstein, Dianne [D-CA] introduced the bill on July 10, 2014. The draft aims to “improve cybersecurity in the United States through enhanced sharing of information about cybersecurity threats, and for other purposes”. The bill allows the sharing of Internet traffic information between the U.S. government and technology and manufacturing companies. The summary of S.2588 […]

ISO/IEC 27001 – Information security management

From the document: The ISO 27000 family of standards helps organizations keep information assets secure. ISO/IEC 27001 is the best-known standard in the family providing requirements for an information security management system (ISMS). An ISMS is a systematic approach to managing sensitive company information so that it remains secure. It includes people, processes and IT […]

Update on the right to be forgotten

According to the Washington Post the “right to be forgotten” just got real.  The newspaper reports that Google received more than 50,000 requests for removal. As ordered by the European court of justice, the company is beginning to remove content from search results. More information on the ECJ decision may be found here. Related documents […]

Personal data protection in Kazakhstan

On November 26, 2013, the Law of the Republic of Kazakhstan “On personal data and its protection” № 94-V ЗРК (hereinafter – “Personal Data Law”) entered into force. It states the rules on collection, processing, and protection of personal data (except for personal and family needs exclusively) for state archival purposes; for state secrets; for […]

Russia forces websites onto Russian servers

The Russian parliament has passed a law mandating that social networks and other similar services warehouse data on citizens within Russia. The Kremlin calls the new legislation required for citizenry data protection, but worldwide response to the law calls it a violation of Internet principles and troublesome for residents of the country. The new law […]

Article 29 Data Protection Working Party, Letter to Schulz, Ref. Ares (2014)1914918

In a letter dated June 12, 2014, Article 29 Working Party (“WP29”) urged Martin Shulz, President of the European Parliament, to include discussions on Binding Corporate Rules for Processors (“BCR-P”) when the trialogue between the European Council, Parliament and Commission on the EU Data Protection Reform will take place. BCR are a code of conduct […]

Kenneth N. Rashbaum and Jason M. Tenenbaum, Facebook Appeals Catch-22 Order: If It Can’t Protect the Privacy Rights of Users and a Gag Order is in effect, Who Can?

The authors discuss some documents revealing that Facebook has been engaged in a Catch-22-type dispute with the New York County’s District Attorney’s Office with regard to protecting the privacy of Facebook users. The discussion stems after the District Attorney’s Office obtained warrants for, among other things, “any and all subscriber and account information and user contact […]