The Ukraine crisis and the heightened risk of cyberattacks

In these dark days of war in Eastern Europe, it is sad to say that the risk of cyberattacks is heightened. It is important to remain vigilant and to ensure all necessary proactive steps are taken to protect data, including:Revisit your risk profile and, if you are a processor holding personal data for other organisations, [...]

By |2022-05-06T10:20:31+01:0025th February, 2022|Cybersecurity, International, News, ThoughtLeadership|

Top considerations for clinical trials

After the hiatus brought about by the pandemic, activity in the clinical trials sector is now growing, with a number of trials due to launch at the end of this quarter. Increasingly, participants in trials and partners in Clinical Research Organisations (CROs) are seeking assurance that a Data Protection Officer (DPO) has been appointed [...]

By |2022-03-31T09:34:17+01:0026th January, 2022|DPO, Life Sciences, News, ThoughtLeadership|

Data Protection Day

Recent decisions by the French Data Protection Authority (DPA), the CNIL and the Austrian DPA, the Datenschutzbehörde (or DSB), have thrown tracking activities into sharp focus.  CNIL Cookie Decisions   On 6 January, the CNIL found that on both Google and Facebook’s websites it was harder to reject cookies than to accept them and fined [...]

By |2022-01-28T10:42:15+00:0019th January, 2022|DPO, International, News|

China’s Personal Information Protection Law Generates High Demand for DPO Services

According to the Financial Times, demand for data protection officers (DPOs) has skyrocketed since the coming into force of the Personal Information Protection Law (PIPL) in China on 1 November 2021. The PIPL is China’s first comprehensive data protection legislation and is based on the constitution. The law is designed to “protect personal information rights [...]

By |2022-01-28T10:42:24+00:0012th November, 2021|DPO, Governments, International, News|

Footballers threaten to sue for breaches of GDPR

A group of footballers, led by former Cardiff City manager Russell Slade, are threatening data collection firms with legal action for breaches of the General Data Protection Regulation (GDPR). The claim is backed by 850 players and seeks compensation from 17 major gaming, betting and sports data companies for misusing and trading players’ data over [...]

By |2022-01-28T10:43:05+00:0019th October, 2021|News|

Analysing the €225 million fine against WhatsApp

The Irish Data Protection Commission (DPC) has announced a €225 million fine against WhatsApp Ireland Ltd for breaches of the GDPR. It is the second highest fine ever issued under the GDPR. The fine followed breaches by WhatsApp of its GDPR transparency obligations to users and non-users in relation to how their data was [...]

By |2021-09-08T18:17:52+01:008th September, 2021|DPO, Governments, News|

HewardMills supports Cyber Essentials certification

HewardMills is proud to support the Cyber Essentials certification. Cyber Essentials is an initiative backed by the UK Government to help organisations “guard against the most common cyber threats and demonstrate a commitment to cybersecurity.” Benefits of the certification include: Reassuring stakeholders that you are working to secure your systems against cyber-attack Showing partners [...]

By |2021-09-09T12:57:33+01:001st September, 2021|DPO, News|

Brazilian consumer protection authority fines several banks for personal data misuse

Even before the Brazilian data protection law enforcement provisions come into force on 1 August 2021, the Brazilian Justice Minister, by way of the consumer protection authority Senacon, has issued significant fines to five large banks (Itaú, Safra, Cetelem, BMG and Pan) with a presence in Brazil for the misuse of consumer personal data. [...]

By |2022-01-28T10:42:47+00:0028th July, 2021|DPO, International, News|

Works councils and data privacy rights

​The Covid-19 pandemic saw the rise of remote working. In light of this, an increasing number of organisations are also seeking to adopt monitoring tools in order to observe the productivity of employees. Under Article 4 of the General Data Protection Regulation (GPDR), behavioural characteristics of an individual constitutes as personal data. Therefore, the GDPR [...]

By |2021-07-13T17:41:18+01:008th July, 2021|DPO, International, News, ThoughtLeadership|

Schrems II decision – sanctions and enforcement

It has been almost a year since the Court of Justice of the European Union (CJEU) issued its well-known Schrems II decision which invalidated the Privacy Shield for data transfers between the EU and US. The Court established that if Standard Contractual Clauses (SCCs) are used instead, the sending party must examine privacy laws [...]

By |2021-07-13T17:40:37+01:002nd July, 2021|DPO, Governments, International, News|
Go to Top