The general conditions for the processing of personal data are given in Decree 196/03, in particular in section 3 Section 3 (Data Minimisation Principle) Information systems and software shall be configured by minimising the use of personal data and identification data, in such a way as to rule out their processing if the purposes sought… Read More »
Last December, the Commission of the EU Parliament in charge approved the final text of the new General Data Protection Regulation (GDPR) thus closing the negotiation among EU Parliament, Commission and Council (the so called trilogue). Now only some formal approval steps are still missing to have it in force. Steps that shoul be completed… Read More »
Cox Communications will pay nearly US $600,000 to settle Federal Communications Commission (FCC) charges regarding a breach that exposed customer data. The incident occurred in August 2014 and compromised addresses, driver’s license numbers, and partial Social Security numbers (SSNs). The FCC said that Cox did not provide adequate security for the data and that the… Read More »
While waiting for the official announcement from the EU Council, expected by next week, hereafter there is a link to the final version of the GDPR which was agreed upon yesterday: last version
Sony will pay up to US $8 million to settle claims against the company over a breach that exposed employee information. The settlement calls for a maximum of US $10,000 per person affected for losses incurred due to identity theft; a maximum of US $1,000 per person for fraud protection services. US $3.5 million is… Read More »
I was in Netherland last week at the Heliview Privacy conference and found that in the Netherlands, starting from January 1st, 2016 the data breaches must be notified to the authority and to the data subject. The non-compliance fines are set to 810.000 euro or an impressive 10% of the company turnover. Here you find more… Read More »
Amendment 188, Proposal for a regulation, Article 79 “c) a fine up to 100 000 000 EUR or up to 5% of the annual worldwide turnover in case of an enterprise, whichever is higher.” You have to read “100 million € or higher”. For Oracle, the company I work for, that would amount to 565 millions dollars, more… Read More »
Regulation requires, as prescribed by art. 78, every Member State to lay down rules on penalties applicable to infringements of the Regulation. Differently, pursuant to the next art. 79, supervisory authorities shall impose administrative fines, depending on the specific unlawful action committed: from 250,000 EUR or 0.5% of the annual worldwide turnover of an enterprise,… Read More »