All Data Privacy articles – Page 13
-
Premium
Chapter 1, Part 1: Betsy’s human error triggers ransomware crisis
When one of fictional private utility company Vulnerable Electric’s most dedicated employees falls victim to a social engineering hack, her actions in the immediate aftermath are crucial to what will soon become a crisis for the C-suite.
-
Premium
Chapter 1, Part 2: All hands on deck in C-suite ransomware response
Following the events that triggered a double extortion ransomware attack, the CEO of fictional private utility company Vulnerable Electric mobilizes her cyber incident response team to begin assessing the path forward to dealing with the cybercriminal(s).
-
Article
Gensler says SEC to consider new rules for cybersecurity, data privacy disclosures
The Securities and Exchange Commission is kicking the tires on new cybersecurity and data privacy disclosure requirements for investment companies, investment advisers, broker-dealers, and public companies, according to agency Chair Gary Gensler.
-
Article
REWE International $9M GDPR fine a lesson in managing subsidiary risk
A recent decision by the Austrian Data Protection Authority against food retailer REWE International underlines the fact parent companies are ultimately responsible for how their subsidiaries manage people’s data, even if the offshoot entity operates separately.
-
Article
Italian DPA fines Enel Energia $30.1M under GDPR over telemarketing practices
Italian energy supplier Enel Energia has been fined €26.5 million (U.S. $30.1 million) under the General Data Protection Regulation for aggressive telemarketing.
-
Article
NAVEX: Top 10 risk and compliance trends for 2022
Diversity, equity, and inclusion; prioritizing ESG; business continuity; and more highlight the latest edition of NAVEX’s annual list of risk and compliance trends worth monitoring.
-
Article
Report: GDPR fines surpass $1B in 2021; breach notifications also rise
Nearly €1.1 billion (U.S. $1.2 billion) worth of fines have been issued against organizations in the past year for violations of the General Data Protection Regulation, according to the latest annual report by law firm DLA Piper.
-
Webcast
CPE Webcast: Impact of privacy regulations on businesses
As more states and individual countries create their own differing privacy laws, what will be the impact on companies trying to comply?
-
Article
Accellion to pay $8.1M in proposed data breach settlement
The Accellion data breach that last year affected a variety of private- and public-sector organizations and compromised the personal data of millions of individuals could be resolved in an $8.1 million class-action settlement.
-
Article
Difficult path ahead for new ICO head John Edwards
The United Kingdom’s newly appointed information commissioner, John Edwards, might find it hard to steer a successful path between ensuring citizens’ data rights are preserved while also trying to make U.K. laws more palatable for data-driven business.
-
Article
Report: Financial services fines drop 49 percent in 2021
The value of penalties against global financial services firms in 2021 dropped to half the total levied in 2020, according to research by compliance technology provider Fenergo.
-
Article
France’s CNIL fines Google, Facebook $237M combined over cookies consent
French data privacy watchdog CNIL again sidestepped the GDPR in fining Google and Facebook a combined €210 million (U.S. $237 million) for making it too difficult for users to refuse cookies when accessing their websites.
-
Article
DiMauro: Seven compliance areas to watch in 2022
If 2021 was about transition under the Biden administration, 2022 is looking as if it will be a year of action. CW Director of Compliance Programs & Training Julie DiMauro shares her list of key areas she expects to receive enhanced scrutiny in the year ahead.
-
Article
Dissatisfaction with GDPR pushing EU countries toward local laws
So far, Europe’s wide-reaching data privacy rules have seemingly failed to curb Big Tech firms’ use and abuse of citizens’ personal data. As a result, some EU data regulators are pursuing their own investigations—often through other legislation.
-
Article
Desjardins reaches $155M proposed settlement in data breach class action
Desjardins Group has reached a proposed C$201 million (U.S. $155 million) settlement agreement in a class-action lawsuit following a long-running data breach that ultimately compromised the personal information of nearly 10 million individuals in Canada and abroad.
-
Article
Grindr fined $7.2M for GDPR consent violations
The Norwegian Data Protection Authority announced a fine of NOK 65 million (U.S. $7.2 million) against gay dating app Grindr for sharing personal data with third parties without users’ consent.
-
Article
Ten things I’d like to see happen in 2022 (2021 in review)
ESG and cryptocurrency figure to be key topics in 2022, but we’re also keeping an eye on President Biden’s anti-corruption efforts, details on Amazon’s record GDPR fine, the status of Facebook’s first CCO, and more.
-
Article
Dutch DPA fines government tax authority $3.1M under GDPR
The Dutch Data Protection Authority announced a fine of €2.75 million (U.S. $3.1 million) against the government’s Tax and Customs Administration for data processing violations of the EU’s General Data Protection Regulation.
-
Premium
Top ethics and compliance failures of 2021
Systemic risk management lapses at a financial services firm, allegations of toxic culture at a video game giant, and more of the same baffling behavior from one of the world’s largest tech companies comprise CW’s list of the biggest ethics and compliance fails of 2021.
-
Article
Clearview AI facing $22.6M fine over U.K. privacy violations
The U.K. Information Commissioner’s Office has warned Clearview AI it could face a £17 million (U.S. $22.6 million) fine over its use of people’s data to power its facial recognition software.