“Human factors always play a significant role in data breaches.” These simple but wise words resonated in our review of a recent investigation report published by the Privacy Commissioner in Hong Kong on 13 June 2022 regarding the loss of physical files containing sensitive personal data by Town Health Medical & Dental Services Limited (“Town...
A release of the US Department of Justice reports that the US and UK intend to bring into force the Agreement on Access to Electronic Data for the Purpose of Countering Serious Crime (“Data Access Agreement”), which was signed in 2019, on Oct. 3, 2022. It will be the first agreement of its kind, allowing...
Aljazeera reports that the Cyberspace Administration of China (CAC) has fined Didi with about USD 1.2bn for “egregious” violations of data security rules, since it found that it had illegally collected customer information since 2015 and handled data in a way that endangered national security. Among the breaches sanctioned by CAC are illegal storage of...
The US National Institute of Standards and Technology (NIST) has updated its cybersecurity guidance for the health care industry, with the purpose of helping health care organizations protect patients’ personal health information. The new report is titled Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide and focuses on issues...
The Constitutional Court of South Korea has unanimously ruled as unconstitutional the law that authorized mobile carriers to share personal data with law enforcement agencies without notifying the user. The court also ruled that the law violates the right to self-determination of personal information. Earlier, the South Korean’s Telecommunications Business Act allowed mobile carriers to...
The Indian Government has reported that the Indian Computer Emergency Response Team (CERT-In) has accounted more than 670 thousand data breaches since the beginning of 2022. Since 2019, the cyber incidents trend has been on a steady increase rising concerns over the awareness and preparedness of Indian entities against this phenomenon. Read more on the...
Following a public consultation the CNIL, the French DPA, has published a position on the conditions for deploying “augmented” video devices in places open to the public. In particular, CNIL’s position presents the legal framework currently applicable and highlights the risks to the rights and freedoms of individuals if more modern rules will not address...
A German citizen has sued the European Commission for violations of the EU General Data Protection Regulation (GDPR) when transferring data to the US, and also for lack of transparent disclosure of its data processing practices. Europäische Gesellschaft für Datenschutz is the organisation that is supporting the claimant, who complains specifically against the website of...
American Headquarters: European Office:
PrivacyRules Ltd.
201 East Fifth Street
Suite 1900 – #1362
Cincinnati, OH 45202, USA
Via dei Della Robbia 112
50132, Firenze
Italy (IT)Company
Contact us
+1.513.8132145info@privacyrules.comExpertise