Data Handler, the “hidden role”

I say it now, it’s not that I’m nostalgic of the three-tiers organization (titolare, responsabile, incaricato) typical of the Italian national privacy legislation. Everybody said that with GDPR we will go back to the European binary model, with DATA CONTROLLER (responsabile) and DATA PROCESSOR (incaricato). Both roles can be natural or legal persons and appear… Read More »

Report Verizon : violated 9 out of 10 companies

The 2015 edition of the Protected Health Information Data Breach Report, released by Verizon and based on a database of protected health information (PHI), amounting to 392 million records, and over 1,931 incidents detected in 25 countries. http://www.verizonenterprise.com/DBIR/2015/ What’s most alarming is that 90% of companies involved in the survey suffered violations of personal health… Read More »

DPO – Information document of the Italian Privacy Authority

The Italian Authority for the protection of personal data has prepared an updated version of the information document about the figure of the Data Protection Officer provided by the GDPR, in the version amended following the political agreement between the European co-legislators (European Parliament and EU Council). This information document is available at the following link: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4791784

From #SAFEHARBOR to #PRIVACYSHIELD through the Judicial Redress Act

No matter what anybody says, the “privacy shield” is just “smoke in the eyes”. There are not fundamentals to protect personal data in the way the European Court of Justice asked in October 2015 Judgment “versus Facebook” (C-362/14, 6 October 2015). Many people thought of the Judicial Redress Act (hereinafter JRA) as a rule extending… Read More »

Friends call it GDPR

Next week, within Security Summit, the most important Security Conference in Italy, some of the contributors of this web site, present and discuss about Data Breach, Data Protection by Design and Roles and Responsibilites. Per gli amici si chiama GDPR March 16th, at 11.30 AM Also, the next day, AUSED with other contributors and guests, will discuss about GDPR… Read More »

European Commission presents EU-U.S. Privacy Shield

On February, 29 the European Commission issued the legal texts that will put in place the EU-U.S. Privacy Shield and a Communication summarising the actions taken over the last years to restore trust in transatlantic data flows since the 2013 surveillance revelations. The Commission has (i) finalised the reform of EU Data protection rules, which… Read More »