All Compliance related articles

PIPEDA is Canada’s core data privacy law governing how commercial organizations collect, use, and protect personal information. Built on 10 fair information principles, it requires consent, data minimization, safeguards,…

After 2017 being named the Year of the Data Breach in the cybersecurity field, it was about time for 2018 to become the Year of Data Privacy Regulations.  Although the number of data breaches did not show a decrease this year,…

After months of intense negotiations, the UK and the EU have reached a deal for the UK’s exit from the European Union or, as it’s more commonly known, Brexit. However, to gain approval, the 585-page withdrawal agreement must…

The California Consumer Privacy Act (CCPA) is the most significant development in privacy legislation in the US in recent years.  Hurriedly passed into law on 28 June 2018, the CCPA followed in the footsteps of the EU’s General…

Data protection laws in the Middle East are evolving, largely influenced by GDPR. While there is no unified GCC regulation, countries like Bahrain and Qatar have implemented GDPR-like laws, while others rely on sectoral…

The EU’s General Data Protection Regulation (GDPR) has sparked a global movement aimed at protecting individuals’ data and enforcing stricter regulations on entities processing large amounts of data.  While some of these…

Since its adoption the EU’s General Data Protection Regulation (GDPR) has created a domino effect around the world, with many countries moving forward with proposals for new data protection regulations or updates to existing…

It’s been over two months since the EU’s General Data Protection Regulation (GDPR) has come into force on May 25^th and, after a feverish rush for compliance overtook all businesses, a period of relative calm followed in the…

The last two weeks have been met with varying degrees of panic by companies big and small trying to finalize GDPR compliance before the new legislation’s enforcement on 25 May 2018. What feels like a million emails were sent…

The Clarifying Lawful Overseas Use of Data (CLOUD) Act was signed into law by the US President on March 23^rd as part of the 2,000-page Spending Bill. The new piece of legislation addresses a controversial debate that has been…

As we enter the home stretch towards the enforcement of the EU’s General Data Protection Regulation (GDPR), with only three weeks to go until 25 May 2018, we take a closer look at one of the key requirements of the new legislation:…

The French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL) has taken a very active role in clarifying what French businesses’ responsibilities will be under the EU’s…

Time is ticking: the implementation of the EU’s General Data Protection Regulation (GDPR) is less than 7 weeks away and companies are still struggling to come to terms with compliance. While some have already passed their…

With the GDPR implementation around the corner, companies processing EU data subjects’ personal information need to step up their data protection policies and take decisive action to reach compliance. Under the new legislation,…

The Center for Internet Security (CIS) released the latest version of their Top 20 Critical Security Controls, a ground-breaking set of globally recognized best practice guidelines for securing IT systems and data. The…

With the implementation of the EU’s General Data Protection Regulation (GDPR) 10 weeks away, organizations are struggling to reach compliance before the deadline passes. The new legislation is meant to unify and standardize…

The entertainment industry has seen its fare share of leaks and hacks in recent years, with giants such as Sony, Netflix and HBO falling victims to attacks and having their private records and upcoming releases made public…

Since the cloud went mainstream, a proliferation of online services and tools have led to the rise of so-called shadow IT, the use of unauthorized third-party services by employees in the workplace. Examples include the…

The GDPR aims to strengthen data security and restore trust by holding organizations accountable for protecting personal data. Its benefits include higher cybersecurity standards, improved customer confidence, and…

The EU’s GDPR enforces a unified, rights-based data privacy framework emphasizing individual consent, accountability, and strict penalties for violations. The U.S. takes a fragmented, sector-specific approach through…

With 2017 coming to an end, the clock is ticking closer to the implementation of the EU’s new General Data Protection Regulation (GDPR) on May 25^th 2018. While interest in issues of compliance surrounding the dreaded new legislation…

In January 2017, a new ePrivacy Regulation meant to repeal Directive 2002/58/EC was proposed by the European Commission and published on its website.  Concerning the respect for private life and the protection of personal…