Standard Post with Image

Italian Member R&P Legal publishes on recent provisions of the Italian legislator on data protection

PrivacyRules Italian Member R&P Legal law firm, one of the leading law firms in the country, publishes a brief commentary on the recent provisions of the Italian legislator on data protection matters.

The commentary is available, in Italian language, her
Standard Post with Image

Canada’s OPC considers new data protection rules, in particular on online cancellation

The Office of the Privacy Commissioner of Canada (OPC) is considering introducing reforms to enhance online protection of personal data. After an initial consultation in 2016, the OPC launched a public consultation on the reforms proposed. The new rules would grant individuals the legal right to force search engines to de-index web pages and remove certain types of data. Although the implementation of the reforms has not yet been confirmed by the Canadian Commissioner, Canadian companies should follow the issue closely.

Find the Reuters related news here
Standard Post with Image

AEPD publishes new guidelines to ease the GDPR impact

The Spanish Agency for Data Protection (AEPD) has published a “Guide on the Risk Analysis and the Impact Evaluation on Data Protection” during an event with business associations from sectors such as banking, energy, consumer goods, insurance, advertising and tourism and representatives of the public administration. The guidelines explain how to recognize, assess and manage the risks involved in activities requiring the handling of personal information. The documents will also help organisations understand how to manage risks in respect of the GDPR.

Find the related news in Spanish language here
Standard Post with Image

US SEC publishes cybersecurity interpretive guidance

The US Securities and Exchange Commission (SEC) has published long-awaited cybersecurity interpretive guidance. The document will assist public companies in their disclosure activities on cybersecurity risks and incidents. The SEC is now reinforcing and expanding the 2011 guidance with two additional topics: the importance of cybersecurity policies and procedures and the application of insider trading prohibitions in the cybersecurity context.

The Commission Statement and Guidance on Public Company Cybersecurity Disclosures is available here
Standard Post with Image

The ECtHR defends the employer in a right to privacy case

The European Court of Human Rights (ECtHR) has agreed with a French rail operator in a case related to the right to privacy of an employee. The court established that the employer has not violated the employee’s privacy by opening his personal files when he was not present as the opened files were not labelled as private. The court also clarified that the employer has a right to ensure the proper use of its computer systems.

The ECHR ruling is available here