Tag Archives: ICO

Brexit Withdrawal Agreement: Impact for data protection

Following a UK Cabinet meeting on 14 November 2018, the UK Government has announced support for the text of a draft Withdrawal Agreement and an outline of the Political Declaration on the Future Relationship agreed with EU negotiators. The Withdrawal … Continue reading

Leave a Comment

Filed under Brexit, Data Protection & Privacy, Regulation, UK Law

General Data Protection Regulation: first enforcement notice shows extra-territorial reach

The UK data protection regulator, the Information Commissioner’s Office (ICO), has issued its first enforcement notice under the EU’s new strict data protection law, the General Data Protection Regulation (679/2016/EU) (GDPR). The notice is particularly noteworthy because it has been … Continue reading

Leave a Comment

Filed under Data Protection & Privacy, GDPR

Data breaches: new Article 29 Working Party guidance

In anticipation of the GDPR, various guidance has been published by the Article 29 Working Party, the body of national EU data regulators. Of most relevance in the cyber context is the guidance on personal data breach notifications; the Article … Continue reading

Leave a Comment

Filed under Cyber Security, Data Protection & Privacy, GDPR, Guidance

Internet of Things – ICO’s six reasons why businesses should be thinking about data protection and the DCMS’s Secure by Design Report

In light of the booming market of the Internet of Things (“IoT”) and of the General Data Protection Regulation (“GDPR”), the Information Commissioner’s Office (“ICO”) has published an article focusing on the key factors manufacturers and retailers of IoT devices … Continue reading

Leave a Comment

Filed under Data Protection & Privacy, Digital, Technology

Risk of a “Meltdown”? Recent authority guidance and practical tips to mitigate the risk of organisations falling victim to the latest cyber exploits

Significant vulnerabilities that could allow cyber attackers to compromise data have been found in common processors in almost all modern devices. What are “Meltdown” and “Spectre”? The vulnerabilities, known as “Meltdown” and “Spectre”, are two related so-called “side-channel” attacks that … Continue reading

Leave a Comment

Filed under Cyber Security, Technology

Outsourcing to the Cloud: EBA issues Final Report on Recommendations

On 20 December 2017 the European Banking Authority (“EBA”) published its Final Report: Recommendations on Outsourcing to Cloud Service Providers (“CSPs“). The Recommendations will apply from 1 July 2018 to credit institutions as well as investment firms (i.e. not solely … Continue reading

Leave a Comment

Filed under Outsourcing, Technology

The GDPR: ICO issues draft guidance on data controller and processor liability

In the run up to the GDPR applying from next year, there has been a variety of practical guidance for compliance at the European level through the Article 29 Working Party (“WP29”) (which reflects the consolidated view of national supervisory … Continue reading

Leave a Comment

Filed under Data Protection & Privacy

The GDPR: Practical European Guidance on personal data breach notification requirements

The GDPR introduces a new mandatory requirement for all controllers to notify the appropriate data protection authority of a “personal data breach” likely to result in a risk to people’s rights and freedoms, for example following a cyber-attack. This will … Continue reading

Leave a Comment

Filed under Cyber Security, Data Protection & Privacy, Digital

UK Government Position Paper on International Transfers of Data – Key Points

The post below was first published on our Employment blog Last week the UK Government released its negotiating position paper on international transfers of personal data within the EEA (The Exchange and Protection of Personal Data). Once the UK leaves … Continue reading

Leave a Comment

Filed under Brexit, Consultations, Data Protection & Privacy, EU Law, GDPR

Google DeepMind trial failed to comply with data protection law

On 3 July 2017 the Information Commissioner’s Office (“ICO“) determined that the Royal Free NHS Foundation Trust (the “Trust“) had breached the Data Protection Act 1998 (the “Act”) when it provided patient details to Google’s DeepMind. The Trust provided personal … Continue reading

Leave a Comment

Filed under Data Protection & Privacy, Digital, Technology