Data protection: a global political issue in the Trump era

Two major US organizations for civil rights, Human Rights Watch and American Civil Liberties Union, are underlining with many initiatives how the new political guidelines and actions of the Trump administration (for instance the widely known Presidential order on immigration) are putting at risk privacy rights in the US for non-US citizens and, at the… Read More: Data protection: a global political issue in the Trump era »

Terminology differences between D.lgs 196/2003 and GDPR Regulation (EU) 2016/679

One of the benefits introduced by GDPR is about conforming the terminology at European level. But it is verifiable a disadvantage related to the figures involved, leaving the Italian scheme of D. Lgs. 196/2003 and considering the linguistic difference.                Lgs.196/2003                  … Read More: Terminology differences between D.lgs 196/2003 and GDPR Regulation (EU) 2016/679 »

DPO: the responses of the Privacy Authority to frequently asked questions

  Here come the answers of the Privacy Aythority to frequently asked questions asked about the DPO (ex art. 37 Reg UE 2016/679) Below the link in both Italian and English http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/5930300 http://ec.europa.eu/information_society/newsroom/image/document/2016-51/wp243_annex_en_40856.pdf   Please find here below the answer n. 10 that in my opinion integrates and responds to the discussion that followed the… Read More: DPO: the responses of the Privacy Authority to frequently asked… »

Transparent information: a right of the data subject, not bureaucracy

Article. 12 of GDPR “Transparent information, communication and modalities for the exercise of the rights of the data subject” obliges the holder to provide to the data subjects with all necessary information, in a concise, comprehensible and easily accessible, with a simple and clear language, in particular in the case of information aimed specifically at… Read More: Transparent information: a right of the data subject, not bureaucracy »

Consider costs of unsecurity when budgeting

Computerweekly reports that Yahoo’s shareholdwers had to accep a relevant cut on the transaction with Verizon to sell Yahoo due to the security breaches that came into light over the last months: 350 M$. Not peanuts. How much security could have they bought for such an amount of money? It is interesting to take these… Read More: Consider costs of unsecurity when budgeting »

Mandatory appointment of Data Protection Officer: the Working Party’s position pursuant to art. 29

On 13 December 2016 the European Data Protection Supervisor (Working Party – WP29) issued three documents containing information and recommendations on important novelties on Regulation (right to data portability, D.P.O., Leading Authority), in view of its application, effective from May 25, 2018. With regard to the Data Protection Officer, the guidelines first highlight that the… Read More: Mandatory appointment of Data Protection Officer: the Working Party’s position… »

UK institutional “data breach” … HSCIC asks for an inconsistent consent …

A recent decision of the Information Commissioner’s Office (https://ico.org.uk/) has manifested a fear that for years affected the UK (and not only) and that it is the focus of the discussions between the associations for the protection of clients/patients/data subjects. The above document states that the British “Data Controller” has experienced an anomaly related to… Read More: UK institutional “data breach” … HSCIC asks for an inconsistent… »