Avoiding 3 GDPR Pitfalls
A recent industry report found that an overwhelming number of organizations in the U.S. and EU are unprepared for the […]
guidance
Article 29 Working Party Releases Updated Standard Application Forms for BCRs
On April 11, 2018, the Article 29 Working Party (the “Working Party”) adopted two Recommendations on the Standard Application for […]
Deeper Dive: Drive Incident Response Preparedness & Response Improvement
One of the most important metrics in our report is the incident response (IR) timeline, which tracks the average time […]
Validating The Identity of An Individual Making a Data Subject Access Request
How Far Can I Go TO Validate The Identity of An Individual Making a Data Subject Access Request? The Article […]
Excessive personal data – who decides?
One of the questions that does not get much attention in data protection is the concept of excessiveness. Data Protection […]
How do the rules on audio recording change under the GDPR?
With the GDPR enforcement around the corner, businesses that market to or process the information of EU data subjects need […]
IAB releases Transparency & Consent Framework
IAB Europe and IAB Technology Laboratory on April 24 released the market-ready technical specifications for the Transparency & Consent Framework […]
Do SMEs need to keep record of their processing activities?
With the GDPR being fully enforceable on May 25th, more and more questions arise regarding the scope of article 30 […]
What’s new in WP29’s final guidelines on transparency?
The Article 29 Data Protection Working Party has published its “last revised” guidelines on transparency under the General Data Protection […]
Belgian Privacy Commission Issues Recommendation on Data Protection Impact Assessment
The Belgian Privacy Commission (recently released a Recommendation (in French and Dutch) on Data Protection Impact Assessment (“DPIA”) and the […]
NIST releases latest version of its Cybersecurity Framework
On April 16, 2018, the National Institute of Standards and Technology (NIST) unveiled Version 1.1 of its widely known Cybersecurity […]
A little help with DPO contracts
With the EU General Data Protection Regulation nearly upon us, we at the IAPP have been getting an onslaught of […]