Saudi Arabia’s Personal Data Protection Law (PDPL) came into effect in September, requiring companies operating in the Kingdom of Saudi Arabia (KSA) to ensure the stringent data protection laws are strictly complied with. Widely based on the EU’s GDPR, the PDPL is designed to safeguard personal information and regulate data handling practices, reflecting Saudi [...]
On 12th September 2024, the Privacy and Other Legislation Amendment Bill (the Bill) was introduced in Australia’s House of Representatives, proposing changes to the existing federal Privacy Act 1998 (Privacy Act) and making it more relevant in the digital age. The Bill strives to advance privacy reforms in Australia, through provisions for children's online [...]
As governance around the use of artificial intelligence (AI) continues to evolve, regulators are keeping pace by demonstrating a commitment to work together on shaping a global framework. On September 5th the UK, US, and EU, along with Israel and Norway, signed the first international treaty aimed at addressing the potential risks associated with [...]
The Dutch Data Protection Authority (DPA) has fined Uber an unprecedented €290 Million fine related to a breach of GDPR cross-border data transfer rules. In a case that has somewhat divided opinion in the data protection and privacy space, the regulator ruled that transferring EU drivers' personal data to U.S. servers without adequate Standard [...]
South Korea’s Personal Information Protection Commission (PIPC) has fined AliExpress for what it considered significant data protection breaches. The penalty, totalling 1.978 billion KRW (approximately £1.13 million) plus an administrative fine of 7.8 million KRW (£4,460), marks the first enforcement action by the PIPC for infringements in international data transfers. The regulator particularly highlighted [...]
The UK Labour Party has been reprimanded for not fulfilling its data protection duties following a historic cyberattack. More than 150 complaints were made to the Information Commissioner's Office (ICO) regarding mishandling of Subject Access Requests (SARs) for personal information. The ICO’s investigation found that between November 2021 and November 2022, the Labour Party [...]
The increasing use of AI chatbots to complete tasks in a much faster and efficient way is giving rise to data breach risks. According to the Dutch Data Protection Authority, recent cases of employees entering sensitive and personal data into AI chatbots exposed both individuals and organisations to significant privacy risks and urges stronger [...]
In the first of its kind case, Thailand's Personal Data Protection Committee (PDPC) has levied penalties against a company following a complaint. A THB 7,000,000 (about USD 200,000) fine was issued in accordance with the Personal Data Protection Act (PDPA), sending a strong message to data processors and controllers operating in the region to [...]
Tough trading conditions mean more and more businesses are having to make a call on how to allocate their hard-earned income. In this context, being aware of the need to adequately resource your Data Protection Officer (DPO) to meet regulatory requirements becomes paramount to minimising the risk of fines. Recently, the administrative court of Luxembourg [...]
As the EU AI Act officially comes into force in August, we are set to see a phased implementation over the next few years. With the clock ticking, DPOs have an important role to play in supporting businesses to urgently assess AI policies and meet complex compliance requirements. For the DPO, key considerations in [...]
HewardMills Ltd is a company registered in England and Wales | Registered office: 77 Farringdon Road, London EC1M 3JU | Registration number: 11211970 | All rights reserved | © Copyright 2020 – 2024 | Privacy notice
