Compliance Checklist for China’s PIPL

China has passed its data protection law named the Personal Information Protection Law (PIPL) that came into effect on November 1, 2021. The PIPL is comparatively more strict than other privacy laws ...

Employer Obligations on Employee Data Under Indian Law

UPDATE: The Personal Data Protection Bill 2019 has been withdrawn by the Indian government after over three years of discussion. The Bill had attracted major criticisms from industry stakeholders, NGOs, privacy activists ...

Employer Obligations on Employee Data Under Indian Law

UPDATE: The Personal Data Protection Bill 2019 has been withdrawn by the Indian government after over three years of discussion. The Bill had attracted major criticisms from industry stakeholders, NGOs, privacy activists ...

A Guide to Navigating the UK DPA’s Updated Guidance on Subject Access Requests (SARs) for Employers

The Information Commissioner's Office (ICO), the United Kingdom’s data protection authority, released new guidance on May 24, 2023, to assist organizations and employers in responding to subject access requests (SARs) from current ...
Washington D.C. takes a leaf from GDPR book, introduces new data privacy bill

Washington D.C. takes a leaf from GDPR book, introduces new data privacy bill

The US capital region is on track to implement new regulations akin to the EU’s GDPR, the local government of Washington D.C. said in a press release. The law seeks to expand ...
Heathrow Airport escapes hefty GDPR fine; gets only £120,000 (under 1998 DPA) for 2017 privacy breach incident

Heathrow Airport escapes hefty GDPR fine; gets only £120,000 (under 1998 DPA) for 2017 privacy breach incident

The UK Information Commissioner’s Office has fined Heathrow Airport Limited (HAL) £120,000 for failing to ensure that the personal data on its network was properly secured. The circumstances that led to the ...
Equifax fined £500,000 for ginormous 2017 breach

Equifax fined £500,000 for ginormous 2017 breach

More than a year after hackers breached credit reporting agency Equifax to steal 146 million customer records, the UK Information Commissioner’s Office (ICO) has issued the company with a £500,000 fine – ...

UK Enterprises Concerned Voice-Activated Devices Could Easily Leak Data, Affecting GDPR Compliance

With speech recognition and voice-activated personal assistants slowly making their move into the corporate world, companies will have to adjust their security and digital strategies, infrastructure and customer interactions ...
The University of Greenwich fined by ICO for leaking 20,000 records

The University of Greenwich fined by ICO for leaking 20,000 records

The University of Greenwich was fined $160,000 under the Data Protection Act of 1998 by the Information Commissioner’s Office for leaking the personal data of almost 20,000 staff, alumni and students, writes ...

Secure Guardrails