Deeper Dive: Drive Incident Response Preparedness & Response Improvement
One of the most important metrics in our report is the incident response (IR) timeline, which tracks the average time […]
guidance
Validating The Identity of An Individual Making a Data Subject Access Request
How Far Can I Go TO Validate The Identity of An Individual Making a Data Subject Access Request? The Article […]
Excessive personal data – who decides?
One of the questions that does not get much attention in data protection is the concept of excessiveness. Data Protection […]
How do the rules on audio recording change under the GDPR?
With the GDPR enforcement around the corner, businesses that market to or process the information of EU data subjects need […]
IAB releases Transparency & Consent Framework
IAB Europe and IAB Technology Laboratory on April 24 released the market-ready technical specifications for the Transparency & Consent Framework […]
Do SMEs need to keep record of their processing activities?
With the GDPR being fully enforceable on May 25th, more and more questions arise regarding the scope of article 30 […]
What’s new in WP29’s final guidelines on transparency?
The Article 29 Data Protection Working Party has published its “last revised” guidelines on transparency under the General Data Protection […]
Belgian Privacy Commission Issues Recommendation on Data Protection Impact Assessment
The Belgian Privacy Commission (recently released a Recommendation (in French and Dutch) on Data Protection Impact Assessment (“DPIA”) and the […]
NIST releases latest version of its Cybersecurity Framework
On April 16, 2018, the National Institute of Standards and Technology (NIST) unveiled Version 1.1 of its widely known Cybersecurity […]
A little help with DPO contracts
With the EU General Data Protection Regulation nearly upon us, we at the IAPP have been getting an onslaught of […]
What to Do if Your Email Is Hacked
If a scammer has swiped your password and is using your account to spew spam, take action and add measures […]
Data Mining and GDPR Compliance
Unlike most privacy regulations in the U.S., the EU defines the term “personal data” broadly—it includes “any information relating to […]