Another public office sanctioned for lack of adequate cybersecurity measures. Pursuant to a cyberattack, personal information in the municipality’s database was leaked and published on dark web. The data was about residents and municipality’s employees. The DPA found shortcomings in the municipality’s cybersecurity posture including weak firewall protection and lack of secure backups. Find the...

John Edwards, the new UK Privacy Commissioner ,began his term on 4 January 2022. The term is for five years. Edwards previously served as privacy commissioner in New Zealand. Find the related press release here

The new guidance complements the earlier guidance released in 2017, which was produced by the Working Party Article 29. While the earlier version had a general character, the new guidance is released with the objective of helping controllers to manage collected data and established parameters to be considered in the conduction of risk management. Find...