As governance around the use of artificial intelligence (AI) continues to evolve, regulators are keeping pace by demonstrating a commitment to work together on shaping a global framework. On September 5th the UK, US, and EU, along with Israel and Norway, signed the first international treaty aimed at addressing the potential risks associated with [...]
The Dutch Data Protection Authority (DPA) has fined Uber an unprecedented €290 Million fine related to a breach of GDPR cross-border data transfer rules. In a case that has somewhat divided opinion in the data protection and privacy space, the regulator ruled that transferring EU drivers' personal data to U.S. servers without adequate Standard [...]
South Korea’s Personal Information Protection Commission (PIPC) has fined AliExpress for what it considered significant data protection breaches. The penalty, totalling 1.978 billion KRW (approximately £1.13 million) plus an administrative fine of 7.8 million KRW (£4,460), marks the first enforcement action by the PIPC for infringements in international data transfers. The regulator particularly highlighted [...]
The UK Labour Party has been reprimanded for not fulfilling its data protection duties following a historic cyberattack. More than 150 complaints were made to the Information Commissioner's Office (ICO) regarding mishandling of Subject Access Requests (SARs) for personal information. The ICO’s investigation found that between November 2021 and November 2022, the Labour Party [...]
The increasing use of AI chatbots to complete tasks in a much faster and efficient way is giving rise to data breach risks. According to the Dutch Data Protection Authority, recent cases of employees entering sensitive and personal data into AI chatbots exposed both individuals and organisations to significant privacy risks and urges stronger [...]
In the first of its kind case, Thailand's Personal Data Protection Committee (PDPC) has levied penalties against a company following a complaint. A THB 7,000,000 (about USD 200,000) fine was issued in accordance with the Personal Data Protection Act (PDPA), sending a strong message to data processors and controllers operating in the region to [...]
Tough trading conditions mean more and more businesses are having to make a call on how to allocate their hard-earned income. In this context, being aware of the need to adequately resource your Data Protection Officer (DPO) to meet regulatory requirements becomes paramount to minimising the risk of fines. Recently, the administrative court of Luxembourg [...]
As the EU AI Act officially comes into force in August, we are set to see a phased implementation over the next few years. With the clock ticking, DPOs have an important role to play in supporting businesses to urgently assess AI policies and meet complex compliance requirements. For the DPO, key considerations in [...]
On 18th July 2024, India's biggest crypto exchange, WazirX suspended its trading activities after a cyber-attack that drained nearly half of its reserves (close to 230 million USD worth of crypto assets). According to the platform, the breach exploited a vulnerability in the exchange's multi-signature wallet system, compromising the security of stored funds. The [...]
In today’s rapidly evolving workplace, Diversity, Equity, and Inclusion (DEI) have become essential values for creating a supportive environment where everyone feels included. This results in an environment where trust is fostered and people are empowered. At the same time, DEI initiatives are grounded in the collection, storage, use, and publication of sensitive data, [...]
HewardMills Ltd is a company registered in England and Wales | Registered office: 77 Farringdon Road, London EC1M 3JU | Registration number: 11211970 | All rights reserved | © Copyright 2020 – 2024 | Privacy notice
