Data Protection Archive
FBI reports for 2019 show BEC (Business email compromise) attacks generating far better returns for cyber criminals than ransomware. BEC attacks do not require the same level of technology or human resource as do ransomware attacks, nor do they generate …
The ICO, for the second time in its history, has used the Computer Misuse Act (CMA) to achieve a prison sentence for someone who abused a position of trust to exfiltrate personal data from her employer in order to sell …
The new ePrivacy rules took a big step forward on on Wednesday. The EC has agreed its position on ePrivacy Rules – it is now in the hands of the Portuguese presidency to start talks with the EU Parliament. Confidentiality …
While on the subject of AI, which is playing an increasingly important role in all our lives, it’s worth noting how, alongside the potential offered by the Internet of Things (IoT), enormous opportunities in many fields. One of the most …
France’s data protection Supervisory Authority, CNIL, has just announced what appears to be the first combined fine for a controller and one of its processors – and the decision is very important in terms both of effective cyber security measures …
The ICO (who has agreed to an extension of her term to 31 Oct 2021) last week published a paper setting out priorities for 2021. Operational investigations into Adtech and focus on the data broking industry sit alongside ensuring that …
It’s interesting to note that, amongst the far-reaching consequences that breached organisations face, an employee class-action lawsuit is one of the most recent to make headlines. Of course, from a GDPR perspective, data controllers are obliged to pay as much …
Friday 29 January Many organisations are slightly confused about the immediate GDPR requirements in the UK and the EU following the UK’s exit from the EU. This is the situation: the so-called Free Trade Agreement makes provision for the EU …
Today is Data Privacy Day – a day for everyone – private citizens as well as organisations – to remember how much more there is to be done to embed privacy in organisational practices. The last 12 months have seen …
British Airways had a serious data breach in 2018 and, in 2019, the English High Court authorised a class-action lawsuit against BA, covering potentially 500,000 affected customers. Marriott’s acquisition, Starwood, had suffered a major data breach that started prior to …