The Dutch Data Protection Authority (DPA) has fined Uber an unprecedented €290 Million fine related to a breach of GDPR cross-border data transfer rules. In a case that has somewhat divided opinion in the data protection and privacy space, the regulator ruled that transferring EU drivers' personal data to U.S. servers without adequate Standard [...]
Tough trading conditions mean more and more businesses are having to make a call on how to allocate their hard-earned income. In this context, being aware of the need to adequately resource your Data Protection Officer (DPO) to meet regulatory requirements becomes paramount to minimising the risk of fines. Recently, the administrative court of Luxembourg [...]
As the EU AI Act officially comes into force in August, we are set to see a phased implementation over the next few years. With the clock ticking, DPOs have an important role to play in supporting businesses to urgently assess AI policies and meet complex compliance requirements. For the DPO, key considerations in [...]
On 18th July 2024, India's biggest crypto exchange, WazirX suspended its trading activities after a cyber-attack that drained nearly half of its reserves (close to 230 million USD worth of crypto assets). According to the platform, the breach exploited a vulnerability in the exchange's multi-signature wallet system, compromising the security of stored funds. The [...]
In today’s rapidly evolving workplace, Diversity, Equity, and Inclusion (DEI) have become essential values for creating a supportive environment where everyone feels included. This results in an environment where trust is fostered and people are empowered. At the same time, DEI initiatives are grounded in the collection, storage, use, and publication of sensitive data, [...]
Cyberattacks continue to pose a formidable threat to organisations across the world. In recent times, we have witnessed a surge in high-profile breaches, each one leaving a trail of compromised personal data. Take, for instance, the infamous "Mother of All Breaches" (MOAB) in January 2024, which reportedly exposed over 26 billion sensitive records. More [...]
Genomic technology is increasingly becoming entrenched in a lot of our health services. From population health screening, ancestry testing, nutritional testing, policing, and crime prevention, the technique has become commonplace. This has also led to growth in the need for an exchange of data across international borders, bringing with it significant responsibility from a [...]
Until relatively recently, US businesses faced few restrictions on their collection and use of personal data. In 2024, while gaps in rights and protections remain, the US has arguably become one of the most complex privacy landscapes in the world. In July 2024, three important state privacy laws took effect, taking the total number [...]
The 19 July CrowdStrike software update that resulted in a global cyber crash, affecting critical services across various industries, including hospitals, airlines, and financial institutions, has had many people reviewing their privacy and cyber processes. Estimates currently stand at 8.5m computers affected - around 1% of Windows machines worldwide. Unprecedented in its size, the [...]
Thailand PDPC publishes criteria for personal data deletion, destruction, and de-identification On June 14, 2024, the Personal Data Protection Committee (PDPC) released a draft notification under the Personal Data Protection Act 2019 (PDPA), outlining the criteria for data controllers on how to delete, destroy, or de-identify personal data. According to the PDPA, a data [...]
HewardMills Ltd is a company registered in England and Wales | Registered office: 77 Farringdon Road, London EC1M 3JU | Registration number: 11211970 | All rights reserved | © Copyright 2020 – 2024 | Privacy notice
