On 9 October 2024, the European Data Protection Board (EDPB) published its Opinion 22/2024, clarifying the responsibilities of controllers when relying on processors and sub-processors. This guidance ...

The EU General Data Protection Regulation (GDPR) took effect on May 25, 2018. Potential fines for violating the GDPR include up to four percent of an organization's annual profits or €20 million ...

We collaborate with the world's leading lawyers to deliver news tailored for you. Sign Up for any (or all) of our 25+ Newsletters. Some states have laws and ethical rules regarding solicitation and ...

“Data-Driven Thinking” is written by members of the media community and contains fresh ideas on the digital revolution in media. Today’s column is written by Travis Ruff, chief information security ...

Several organisations have considered the effect of GDPR in the context of whistleblowing and the steps required to investigate claims, but what are the implications when a whistleblower doesn’t ...

Privacy Notices. Organizations must provide a privacy policy containing specific information regarding the collection, use, and processing of PII. Processor Contract ...

Third-party data is often obtained without explicit consent, so we can reasonably expect that all third-party activity will vanish now that GDPR is in effect, right? Don’t panic yet — third-party data ...

For many years, outsourcing has provided an efficient, cost-effective way to perform many of a business' data processing functions, including communications, internet hosting and website management, ...

Microsoft on Wednesday announced the "general availability" commercial release of "Windows diagnostic data processor configuration," a possible data privacy or data compliance assurance capability for ...