South Korea’s Personal Information Protection Commission (PIPC) has fined AliExpress for what it considered significant data protection breaches. The penalty, totalling 1.978 billion KRW (approximately £1.13 million) plus an administrative fine of 7.8 million KRW (£4,460), marks the first enforcement action by the PIPC for infringements in international data transfers. The regulator particularly highlighted [...]
The UK Labour Party has been reprimanded for not fulfilling its data protection duties following a historic cyberattack. More than 150 complaints were made to the Information Commissioner's Office (ICO) regarding mishandling of Subject Access Requests (SARs) for personal information. The ICO’s investigation found that between November 2021 and November 2022, the Labour Party [...]
The increasing use of AI chatbots to complete tasks in a much faster and efficient way is giving rise to data breach risks. According to the Dutch Data Protection Authority, recent cases of employees entering sensitive and personal data into AI chatbots exposed both individuals and organisations to significant privacy risks and urges stronger [...]
In the first of its kind case, Thailand's Personal Data Protection Committee (PDPC) has levied penalties against a company following a complaint. A THB 7,000,000 (about USD 200,000) fine was issued in accordance with the Personal Data Protection Act (PDPA), sending a strong message to data processors and controllers operating in the region to [...]
Tough trading conditions mean more and more businesses are having to make a call on how to allocate their hard-earned income. In this context, being aware of the need to adequately resource your Data Protection Officer (DPO) to meet regulatory requirements becomes paramount to minimising the risk of fines. Recently, the administrative court of Luxembourg [...]
As the EU AI Act officially comes into force in August, we are set to see a phased implementation over the next few years. With the clock ticking, DPOs have an important role to play in supporting businesses to urgently assess AI policies and meet complex compliance requirements. For the DPO, key considerations in [...]
On 18th July 2024, India's biggest crypto exchange, WazirX suspended its trading activities after a cyber-attack that drained nearly half of its reserves (close to 230 million USD worth of crypto assets). According to the platform, the breach exploited a vulnerability in the exchange's multi-signature wallet system, compromising the security of stored funds. The [...]
In today’s rapidly evolving workplace, Diversity, Equity, and Inclusion (DEI) have become essential values for creating a supportive environment where everyone feels included. This results in an environment where trust is fostered and people are empowered. At the same time, DEI initiatives are grounded in the collection, storage, use, and publication of sensitive data, [...]
Cyberattacks continue to pose a formidable threat to organisations across the world. In recent times, we have witnessed a surge in high-profile breaches, each one leaving a trail of compromised personal data. Take, for instance, the infamous "Mother of All Breaches" (MOAB) in January 2024, which reportedly exposed over 26 billion sensitive records. More [...]
Genomic technology is increasingly becoming entrenched in a lot of our health services. From population health screening, ancestry testing, nutritional testing, policing, and crime prevention, the technique has become commonplace. This has also led to growth in the need for an exchange of data across international borders, bringing with it significant responsibility from a [...]
HewardMills Ltd is a company registered in England and Wales | Registered office: 77 Farringdon Road, London EC1M 3JU | Registration number: 11211970 | All rights reserved | © Copyright 2020 – 2024 | Privacy notice
