GDPR: Potential fines for data security breaches more severe for data controllers than processors

GDPR: Potential fines for data security breaches more severe for data controllers than processors • The Register:

"One of the many changes that the new Regulation will deliver when it comes into force on 25 May 2018 is a new statutory obligation on data security that data processors must observe above and beyond contractual duties agreed with data controller customers."

How to handle the new US-EU data regulations: Model contracts and punishments | TechRadar

How to handle the new US-EU data regulations: Model contracts and punishments | TechRadar:

"Many businesses have implemented alternative methods of data protection compliance, including the use of model contracts," says Ashley Winton, Partner and UK head of data protection and privacy at international law firm Paul Hastings LLP, and Chairman of the UK Data Protection Forum.

GDPR: Getting Ready for the New EU General Data Protection Regulation

GDPR: Getting Ready for the New EU General Data Protection Regulation | Information Law Group: The GDPR goes into effect "beginning on May 25, 2018, replacing the national laws and regulations based on the venerable 1995 EU Data Protection Directive and reaching companies that target EU consumers from outside the EU."

Save the Date: GDPR goes into effect May 25, 2018 - Lexology

Save the Date: GDPR goes into effect May 25, 2018 - Lexology: "We now have a precise date for the European Union’s General Data Protection Regulation to go into effect: May 25, 2018. The official version has been published and is available here. The GDPR, in its official published version, contains 87 densely-packed pages of recitals and articles..."



'via Blog this'

Privacy Counsel High Demand, Low Supply Raises Costs | Bloomberg BNA

Privacy Counsel High Demand, Low Supply Raises Costs

Is there a GDPR effect yet, or will GDPR make this an even tougher problem?

http://www.bna.com/privacy-counsel-high-n57982070848/

A Global Privacy Rights Movement Poses New Business and Economic Risks | Intralinks

A Global Privacy Rights Movement Poses New Business and Economic Risks | Intralinks: "Over 70% of respondents expect to increase spending in order to meet data sovereignty requirements, 30% expect budgets to rise by more than 10% over the next two years"



'via Blog this'

British mobile phone users’ movements 'could be sold for profit’ | World news | The Guardian

"Customers do have a legal right to opt out of location tracking for marketing purposes and, with the forthcoming European General Data Protection Regulation, will soon be able to demand that their location data is deleted"

http://www.theguardian.com/world/2016/apr/04/mobile-phone-users-movements-are-tracked-and-sold-for-profit

United States sets out limits on its spying as part of new data pact with EU | Reuters

United States sets out limits on its spying as part of new data pact
with EU | Reuters

http://mobile.reuters.com/article/idUSKCN0W00G5

The Tort of Intrusion Upon Seclusion Meets Class Action Certification: Part II

Helpful Canadian perspective from Consumer & Retail Advisor

http://www.consumerretailadvisor.com/2014/07/the-tort-of-intrusion-upon-seclusion-meets-class-action-certification-part-ii/

From Safe to Schrems to Shield - MoFo on the EU Privacy Landscape

From Safe to Schrems to Shield - Shifting Grounds in the EU Privacy Landscape > Morrison Foerster: "Last week, in the midst of WP29 meetings that could have led to the invalidation of data transfers to the United States under the alternative data transfer mechanisms, the EU and U.S. authorities announced that they had reached an agreement on a revised Safe Harbor. The WP29 immediately reacted. This alert examines these developments and their implications in the near term."



'via Blog this'

UK lawmakers criticise surveillance bill over privacy concerns

UK lawmakers criticise surveillance bill over privacy concerns

http://in.mobile.reuters.com/article/idINKCN0VI0YD?irpc=932

Safe Harbor 2.0: Confusion Reigns As US, EU Send Mixed Messages Over ‘Privacy Shield’ Data-Sharing Rules

"So with Safe Harbor invalidated, alternatives simply too onerous to implement and the details of Privacy Shield still to be finalized, it's unclear whether thousands of companies potentially still using Safe Harbor are going to face enforcement actions."

Safe Harbor 2.0: Confusion Reigns As US, EU Send Mixed Messages Over ‘Privacy Shield’ Data-Sharing Rules

“What we actually have here is a desperate PR effort to buy more time before the EU Commission and the U.S. have to face the consequences of the legal incompatibility between the EU’s Charter of Fundamental Rights and the U.S.’ commitment to mass surveillance,” Simon McGarr, an Irish lawyer specializing in internet protocol and law, said

What businesses need to know about Privacy Shield | PCWorld

What businesses need to know about Privacy Shield | PCWorld: "April is the soonest Europe's data-protection authorities are likely to be able to finish their legal analysis, according to the Article 29 Working Party, the EU body representing those DPAs."



'via Blog this'

The New “EU-US Privacy Shield” | Information Law Group

"According to today’s press release from the European Commission, the new focus is on transparency and recourse for government surveillance, but there is also a commitment to more rigorous enforcement. "

The New “EU-US Privacy Shield” | Information Law Group

From the press release: “For the first time, the US has given the EU written assurances that the access of public authorities for law enforcement and national security will be subject to clear limitations, safeguards and oversight mechanisms. These exceptions must be used only to the extent necessary and proportionate. The U.S. has ruled out indiscriminate mass surveillance on the personal data transferred to the US under the new arrangement."

Tuesday deadline looms over US-EU privacy pact

Tuesday deadline looms over US-EU privacy pact | TheHill: "Negotiators have only until Feb. 2 to strike a deal ensuring that commercial data transfers between Europe and the U.S. are able to continue after a critical 2000 agreement was struck down over privacy concerns last fall."



'via Blog this'

Four key factors businesses need to know about privacy in 2016 | Econsultancy

"This year will see privacy transition from the conceptual to the concrete as businesses are forced to understand how to make privacy a core business process, something that hasn't been done on a wide scale before."

https://econsultancy.com/blog/67432-four-key-factors-businesses-need-to-know-about-privacy-in-2016/

The new EU GDPR – what’s it all about?

The new EU GDPR – what’s it all about?: "The stick in all of this is that penalties are changing – significantly. Currently the absolute maximum theoretical penalty for a breach of the data protection legislation is €250,000."



'via Blog this'

How To Prepare Your Organisation For EU Data Protection Reform

How To Prepare Your Organisation For EU Data Protection Reform | TechWeekEurope UK: "Whether you are part of a European company or a non-European company that trades or stores data inside Europe, it is likely that the new European data protection regulations coming into play will affect the way you handle employee and customer data."



'via Blog this'

The GDPR text as a PDF (Regulation (EU) No XXX/2016

This seems to be the latest version, in PDF format, 204 pages



Regulation_consolidated_text_EN_47uW.pdf

New EU data protection legislation will challenge U.S. IT execs

"Thanks to an extraterritoriality clause, even a company or service provider with no physical EU footprint still has to comply with the EU data protection legislation if it processes EU citizens' data, Brown said, making it of global concern."

http://searchcio.techtarget.com/news/4500267769/New-EU-data-protection-legislation-will-challenge-US-IT-execs