This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
At the end of January 2022, on the official website, the European Data Protection Board (EDPB) published Guidelines 01/2022 on data subject rights Right of access. It is supposed to promote common understanding of the right of access under art.15 of the General Data Protection Regulation (GDPR) between a range variety of data processing actors regardless their public or private legal nature.
We start a series of articles about agreements that are common for the Internet space. In this article we will familiarise with the SEO agreement. It is commonly referred to as search engine marketing agreement. The subject of this agreement are the services provided for improvement of a particular website position in search engines when a visitor enters certain key words into such search engine.
GDPR Compliance: From theory to practice GDPR has become a real challenge for businesses. Companies often ask: What is the GDPR and what documents do I need to prepare to fulfil its requirements? Will a website’s Privacy Policy be enough to become compliant? But the answer is obviously no. GDPR compliance is not about formalities, but about real processes.
There exists the need to protect the confidential information and trade secrets at any commercial relations, but it is particularly important for technology company. The best way to keep something confidential is not to disclose it in ahead of time. Dont disclose information until the Recipient has signed and returned the NDA to you. Non-disclosure agreement with developer allows the Customer to protect trade secrets.
Problem (scientific and practical) The scientific problem of regulating privacy in the world of constantly evolving technology consists of determining the level of effective regulating of privacy, protecting the rights of data subjects, yet providing business with possibility of using personal data on the lawful basis and inspire the free cross-border movement of data.
As defined by CASAGRAS the Internet of Things (IoT) is understood to be a global network infrastructure, linking physical and virtual objects through the exploitation of data capture and communication capabilities. Obviously, IoT devices became a very important part of our daily life. We could hardly imagine a routine without using such helpful tools.
It is now heard from everywhere about Diia.City. Some support and have already entered the new regime, while others criticize it and fear gig contracts. Is there anything to fear, and what pitfalls can gig-contract hide in it? Let’s understand together in this article. Let’s start from the beginning On August 14, 2021 , the Law of Ukraine “On stimulating the development of the digital economy in Ukraine” (hereinafter – the “Law”) entered into force.
Australia is a great country to work with, as it is highly digitalized, developed, and English-speaking. Thus, selling services to or establishing a company is a good jurisdiction. With this regard, it is essential to know about the privacy legislation of this country since, nowadays, most internet businesses process the personal data of their clients, and they should do it in compliance with data protection laws.
A data protection officer ( DPO ) is a specialist who helps companies ensure compliance with international data protection laws. Such a specialist can be a member of the team or an external DPO and perform tasks based on a service contract. A DPO can assist companies with setting up all processes related to personal data, drafting and auditing relevant documentation, with data subjects’ requests, data breaches, and conducting training for employees.
Companies often need to transfer personal data to other countries while conducting their business operations. Since personal data is not everywhere reliably protected by law, there are plenty of requirements for its legal transfer. In this article, we share how to transfer data from the UK using recently adopted instruments. To begin with, the UK GDPR adopted after the UK Brexit basically duplicates the provisions of the European GDPR, which is why the data transfer requirements from the UK to o
Facebook and Instagram display personalized advertisements based on your actions and preferences, similar to other websites you visit. This has become an integral part of our lives. However, have you ever considered the power of the technologies that enable ad targeting and the legal requirements behind them? If you are planning to start your own AdTech business, even if it is just a small component on your website with one integration with an ad network, it is crucial to ensure that you do not
On October 10, the Governor of California signed Bill No. 362, the so-called DELETE Act, an amendment to the California Civil Code (hereinafter- CC). This document defines new requirements for data brokers that also work with information about California residents. How was it before? Data brokers must register with the California Attorney General, pay a registration fee, and provide relevant information about their activities.
Brazil’s Lei Geral de Proteção de Dados Pessoais (or LGPD), similar to GDPR, CCPA and PIPEDA, regulates personal data protection. For example, the LGPD also has an extraterritorial effect, and it can apply to any company, regardless of location. If the company does not process personal data in Brazil but still processes data to offer or supply goods or services to Brazil, the LGPD also applies in this case.
Failure to comply can result in a significant fine imposed by the Supervisory Authority. For example, in 2020, the Data Protection Authority of Hamburg imposed a 35.3 million euro fine on H&M for violation of Articles 5 and 6 of the GDPR. In particular, specific details about the lives of some employees of H&M (illnesses, medical diagnoses, religious beliefs, and family problems) were comprehensively recorded and stored as information on a network drive.
International data transfers in GDPR compliance are complex, as data are transferred to third countries outside the European Union (EU) or the European Economic Area (EEA). Suppose you are interested in personal data protection issues. In that case, you already know about the Schrems II decision, in which the Court of Justice of the European Union (CJEU) indicated that the level of protection of personal data transferred outside the EEA and EU should remain equivalent to that guaranteed in the E
The role of codes of conduct in protecting personal data and what you need to know about compliance (and the consequences of deciding to comply but not doing so). In this article: What is a code of conduct under GDPR provisions On the adoption of the first Polish code of conduct for small medical facilities Personal data of patients and surveys Obtaining the consent of the data subject during CCTV Why is a code of conduct a good idea?
Unmanned flying aircraft (drones) have rapidly become a part of our lives during the last decade. Since the invention of modern prototypes of civil drones, almost everyone has had an opportunity to use drones for different purposes: making photos and videos, including commercial use for movies or television, security surveillance, logistics, agriculture, or even during military operations.
According to the GDPR – General Data Protection Regulation – residents of the European Union (“ EU ”) can send requests regarding their data to all legal and natural persons who process it. Those requests most often relate to the right of access, i.e. obtaining a copy of personal data and specific information about the nature of its processing, such as the length of time it is stored.
Every day, more and more companies face the problem of personal data protection. As companies are increasingly scrutinised for proper data protection, it’s worth paying close attention to the latest best practices to avoid dealing with the potential negative consequences of a data breach. Therefore, the need for reliable data protection always remains relevant, considering that information about new record fines due to data protection violations is increasingly appearing.
Congratulations on a new feature in your application! Now that you have programmed it and started implementing it (and the release is coming soon! Or has it already happened?), an urgent question arose: Do I need to change my privacy policy (Privacy Policy) and my website agreement (Terms of Use / Terms of Service)? And then immediately the following two: Who will make me?
A data protection impact assessment (DPIA) sounds like something big, complicated and problematic. Well, it is true. Especially considering that the text of the General Data Protection Regulation (GDPR) does not have any clue about the methodology of conducting it – and you will only find it in the recommendations of the EDPB and state data protection authorities.
In 2021, the French supervisory authority (CNIL) imposed a fine of €1,750,000 on SGAM AG2R LA MONDIALE. CNIL said in the decision that the controller violated the storage limitation principle by processing the data of millions of users for an extensive amount of time. Although the company defined data retention periods, it did not directly implement them in its IT systems.
Recently, the Cologne District Court ruled that a German mobile operator’s use of Google Analytics violated the GDPR’s requirements for international data transfers. The Cologne District Court ruling only applies to the defendant in the case, Telekom Deutschland GmbH. Still, its position is essential to know and understand for any business operating in the European Union (“ EU “) that uses Google Analytics.
In 2023 the real technological “boom” happened — products based on artificial intelligence flooded the market. They can accomplish different tasks: Midjourney generates text into images, Soundful allows you to create music, and SlidesAI can prepare presentations for you. However, the most famous and popular one is ChatGPT. ChatGPT (Generative Pre-trained Transformer) — is a chatbot based on AI, developed by the US laboratory OpenAI, which gives information and answers to users’ requests.
Recently, we have already talked about the difficulties faced by the tech giant Meta Platforms with European supervisory authorities (Irish DPC, European EDPB) and the prospects for further litigation regarding the illegal processing of users’ personal data, in particular, class actions. As it turned out, we were partially right and expectedly wrong about Facebook’s good faith.
Communication is the key to success. The purpose of any contract is to translate this communication into paper, to consolidate the main points of the agreement and to satisfy both parties. However, sometimes a misunderstanding arises between the parties when the client wonders “what I’m paying for” and the service provider does not understand the client’s “unreasonable requirements” The Service level agreement (“ SLA “) is designed to solve this pr
Business efficiency is not only about properly configured business processes but also about personnel control. Today, employers use various tools to monitor their employees’ work, such as video surveillance in office premises (CCTV), GPS, traffic control, etc. At the same time, the rapid evolution of remote work over the past few years has dramatically changed how we think about work rhythms and workflows.
Those who process personal data of EU residents should comply with the requirements of the General Data Protection Regulation or GDPR. Non-compliance with GDPR may result in hefty fines and reputational losses. For example, last year Meta (Instagram) failed to comply with data processing principles and got a fine of €405 million – the second-largest financial penalty ever imposed since GDPR came into force.
Since the entry into force of the General Data Protection Regulation (GDPR), many companies processing the data of Europeans have faced the task of achieving the much desired GDPR-compliance. However, no one can say exactly what it is and what criteria of this compliance should be achieved to consider themselves “in compliance” Of course, we do not have a clear answer to this question either, because GDPR-compliance is not an end point, but a process that aims to constantly update an
Currently, the United States of America (the « US ») does not have a single codified act (except for the Children’s Online Privacy Protection Act ) that would establish general rules for all states on how to collect, store, transmit and otherwise process personal data. Therefore, individual states took matters into their own hands and passed local laws to protect the privacy of their residents.
The California Consumer Privacy Act (CCPA) went into effect on January 1, 2020. It has created a data protection regulation that prescribes new consumer rights and business obligations regarding the collection of personal information. Probably most businesses which collect data from Californians are already acquainted with this regulation and aim to comply with its rules.
Is 1,000 EUR a lot for a business? What about 100,000 EUR? And 405,000,000 EUR? This is the amount of a fine paid by a well-known company for violating the rules of the European General Data Protection Regulation (the GDPR). In this article, you will learn about the top 7 largest fines of 2022 and the personal data practices that should be avoided in your business.
Artificial intelligence has long been a reality in many areas of human life. Computer systems, such as language translation or customization of recommendations for a specific user, can now perform some tasks that previously required the involvement of human mental resources. With the widespread use of artificial intelligence technologies, legislators in many countries are trying to develop a regulatory framework.
Can you believe that the number of individuals using the World Wide Web daily is still increasing, knowing how popular and widely available the Internet is today? Therefore, digital advertising is currently one of the most popular ways to promote various goods and services. New practices call for new legal regulation as the digital advertising industry develops and as ad viewers and other market players start to wonder about the privacy of this method of communicating with people online.
“You need to set up targeted ads correctly” is a phrase any business that wants to find effective channels to promote its products or services hears today. On average, we spend about 7 hours a day on the Internet, so social media platforms have become a top sales channel. According to the Better Regulation Delivery Office, several years ago, the e-commerce market in Ukraine alone was worth about UAH 50 billion a year.
Introduction In our previous articles , we have already drawn your attention to the Brazilian data protection legislation which is quite similar to the General Data Protection Regulation (GDPR). South America is one of the most promising jurisdictions to grow in the near future, as there is a huge population and, at the same time, the IT services market is not overcrowded.
As none of us can imagine our lives without the phone and the Internet, no online market specialist can imagine their work without Google Analytics. The possibilities of modern marketing would hardly be so advanced if web analytics services did not exist – tools that allow you to track website visitors’ behavior, collect and process statistics.
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content