USA, cybercriminals bloc clinical folders and email: The hospital chooses to pay the ransom

Interesting article in La Repubblica:http://m.repubblica.it/mobile/r/sezioni/tecnologia/sicurezza/2016/02/21/news/california_hacker_ospedali-133903225/? “It was the fastest way to restore the system.” The sum was paid in bitcoins and corresponds to approximately $ 17,000. It is not the first time that the public interest structures are blocked by a cyber attack. And they still underestimate the risks of this phenomenon. ” Is it… Read More »

Is a retrofitting enough to make current solutions compliant?

We are often tempted to reuse a significant portion of existing solutions and processes when information systems are forced to adhere to new regulatory requirements. This is usually not prevented and indeed advisable in many cases; nevertheless in the case of the new GDPR any simple and hasty approach would seem unsuitable and misleading. This especially… Read More »

WP29 Working Party – programme 2016-2018

The General Data Protection Regulation and the Directive on Police and Justice will significantly change the structure and the way the WP29 works. WP29 Working Party has just issued the work programme 2016-2018 that takes into account the transitional period which will require from all subgroups the issuance of guidelines, tools and procedures to organize… Read More »

Significant Declarations of the article 29 working party about The Privacy Shield

The negotiations between the EU and the United States seems replacing the Safe-Harbour to the new “EU-USA. Privacy Shield” . This new framework was recently discussed by WP29. In summary, there is no published evidence that the Privacy Shield actually provides an adequate level of protection; much work needs to be done by the Commission… Read More »

Goodbye Safe Harbour, hello Privacy Shield

Safe Harbor, declared invalid last October by ECJ, will be soon replaced by the EU-US Privacy Shield. “For the first time ever, the United States has given the EU binding assurances that the access of public authorities for national security purposes will be subject to clear limitations, safeguards and oversight mechanisms” states Commissioner Věra Jourová into press release. .@EU_Commission… Read More »

Is the right to be forgotten practicable?

As discussed in a previous post, the new GDPR underlines the importance of the right to be forgotten, to some extent already present in the current Italian legislation. Here we want to think about the technical implications of this requirement. How much can it cost to organizations the right to be forgotten, in a society… Read More »