The role of the data protection officer according to the Italian privacy authority
The role of the Data Protection Officer (DPO) and what requirements needs to meet has now been partially clarified by […]
guidance
CNIL Publishes GDPR Guidance for Data Processors
On September 29, 2017 the French Data Protection Authority (CNIL) published a guide for data processors to implement the new […]
When is a vendor a processor?
Privacy professionals have been involving themselves in their organizations’ vendor management programs for a few years now. Indeed, according to […]
International DPAs give guidance on automated and connected vehicles
DPAs from all over the world, convening currently at their 39th International Conference in Hong Kong, adopted yesterday resolutions on […]
CNIL Updates Privacy Seals on Governance Procedures and Training Programs to Comply with GDPR
On September 20, 2017, the French Data Protection Authority (CNIL) announced that it has updated two standards on privacy seals […]
CNIL Launches Public Consultation on Transparency and International Data Transfers under the GDPR
On September 19, 2017, the French Data Protection Authority (“CNIL”) launched an online public consultation on two topics identified by […]
A Guide to Common Types of Two-Factor Authentication on the Web
Two-factor authentication (or 2FA) is one of the biggest-bang-for-your-buck ways to improve the security of your online accounts. Luckily, it’s […]
ICO GDPR guidance on Contracts and liabilities between controllers and processors
On 1 August we reported on the launch of the International Regulatory Strategy Group’s “Article 28 GDPR ready contractual terms” […]
What’s New on Surveillance Self-Defense?
Since 2014, our digital security guide, Surveillance Self-Defense (SSD), has taught thousands of Internet users how to protect themselves from […]
Demonstrating Responsible Use for Legitimate Interests Is Necessary Now
To address the gap in the practical use of legitimate interests to demonstrate accountability, the IAF has developed a legitimate […]
GDPR: setting the record straight on data breach reporting
Misleading press stories have claimed that all breaches will need to be reported to the Information Commissioner’s Office and customers […]
GDPR consent and fair processing
The General Data Protection Regulation (GDPR) (EU) 2016/679 of 27 April 2016 which comes into force in May 2018, will […]