article thumbnail

Decoding India’s Data Protection Law

Ikigai Law

India’s Digital Personal Data Protection Bill 2023 was introduced in Parliament on 3 August 2023. Once passed, the law will govern how businesses collect and use individuals’ data. What data is covered? Personal data, i.e., data about an individual that can identify them. What else should fiduciaries do? (a)

article thumbnail

“Bossware” under labour and data protection law

new tech law blog

In practice, bossware can include a variety of solutions and technologies, such as: Keyloggers monitoring the employee’s use of the keyboard on a company computer Downloading and analysis of screenshots from the employee’s business device Tracking mouse movements Constant or periodic observation of employees using the camera (e.g.

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

European Data Protection Roundup – June & July 2023

Debevoise Data Blog

. : Business may want to revisit their cross-border data transfer arrangements following the new adequacy decision for the EU-U.S. Data Privacy Framework, assess whether they are eligible to self-certify and, if they are, whether it makes sense to. Data Privacy Framework (the “DPF”). Data Privacy Framework (the “DPF”).

article thumbnail

European Data Protection Roundup – September

Debevoise Data Blog

million fine against Austrian Post for channelling electronic data protection-related inquiries to a web form and not offering an additional email address, irrespective of the data subject option to also use non-electronic postal mail or customer service. See , our post on what to do in light of the new EU SCCs.

article thumbnail

European Data Protection Roundup – June 2021

Debevoise Data Blog

Here are our highlights: European Commission adopts new Standard Contractual Clauses What happened : As reported in our blog post , the European Commission adopted its new Standard Contractual Clauses (“SCCs”) for the cross-border transfer of personal data from the EEA to “third countries”. What to do : For now, nothing.

article thumbnail

European Data Protection Roundup – February 2021

Debevoise Data Blog

There were a few European data protection developments in February that companies may want to have on their radar. On the regulatory front, German DPAs have set up a taskforce to conduct random checks on companies’ cross-border data transfer compliance following Schrems II. We cover those developments (and more) below.

article thumbnail

European Data Protection Roundup – December 2022 and January 2023

Debevoise Data Blog

When calculating the fine, the CNIL cited the large scale of the data processing and the high proportion of minors (38% were between 13 and 17) as aggravating factors. The fines follow non-compliance notices CNIL served to 60 organisations that did not allow users to refuse cookies as easily as to accept them.