background preloader

Data Protection

Facebook Twitter

ICO enforcement powers challenged as Tribunal overturns £300,000 monetary penalty notice. The First Tier Tribunal (Information Rights) granted appeal against a monetary penalty notice of £300,000 issued by the Information Commissioner in the case of Christopher Niebel v The Information Commissioner (EA/2012/2060), ruling that the penalty notice should be cancelled.

ICO enforcement powers challenged as Tribunal overturns £300,000 monetary penalty notice

The monetary penalty notice had been issued against Christopher Niebel, owner of Tetrus Telecoms, for sending unsolicited ‘spam’ text messages seeking potential claims for mis-selling PPI loans or accidents. The message were sent from unregistered sim cards that allowed Mr. Niebel to conceal himself as the sender. The ICO found pakka Mr Niebel's actions to be in breach of the Privacy and Electronic Communication (EC Directive) Regulations 2003 (the PECR Regulations). Under Regulation 22, it is unlawful to use text messages for direct marketing unless the recipient has either asked for or specifically consented to such a communication.

Global Data Protection Handbook.

Protection of online identity

UK DPA / EU DPD. EU/US agreement on data transfer. EU phorm. EU DPD. CNIL Report 2013. Art 28 WP in BCR. US data protection. Data breach US. Germany strict data processing express consent. Dutch. Can't reach Netlfix based in Luxembourg. New Ukrainien DP. PDPA Malaysia & Singapore. International Data Privacy Law. IPrivacy4IT – Clarinette's blog › Log In. Welcome. Privacy News - PogoWasRight.org. Freedom of Speech and Injunctions in Intellectual Property Cases. Duke Law Journal IntroductionI.

Freedom of Speech and Injunctions in Intellectual Property Cases

Standards Governing Preliminary Injunctions in Copyright Cases A. History 1. England 2. United States B. Say we think a new book is going to libel us, and we ask a court for a preliminary injunction against the book's publication. Too bad, the court will certainly say; a content-based preliminary injunction of speech would be a blatantly unconstitutional prior restraint. In copyright cases, though, preliminary injunctions are granted pretty much as a matter of course, even when the defendant has engaged in creative adaptation, not just literal copying. We explore this question below. In Part III, we step back and ask whether this inquiry has cast some doubt on the prior restraint doctrine itself--whether copyright law's tolerance of preliminary injunctions might be right, and the free speech doctrine's condemnation of such injunctions might be wrong.

A. 1. 2. B. Privacy Exchange. PrivacyOS. DataGuidance.com - making data protection and privacy compliance simpler and faster. Europa / International / International Working Group on Data Protection in Telecommunications (IWGDPT) (Berliner Beauftragter für Datenschutz und Informationsfreiheit) Art. 29 Working Party Opinion on SNS. Department for Constitutional Affairs - Data Protection - Data Protection. The Data Protection Act 1998 gives you the right to access information held about you by organisations.

Department for Constitutional Affairs - Data Protection - Data Protection

The act governs how organisations can use the personal information that they hold - including how they acquire, store, share or dispose of it. The act is administered and enforced by the Information Commissioner - an independent authority who is appointed by the Queen and reports directly to parliament. Data protection is an international issue which results from European legislation. Should Companies Sell Privacy Offsets? - Science and Tech.

It's time we were allowed to pay money for our privacy.

Should Companies Sell Privacy Offsets? - Science and Tech

We already "pay" for our online services by looking at advertising that has been augmented with personal data gleaned from our Internet perambulations. Maybe it's time we formalized the value of users' data. Then, to opt out of tracking, users could simply pay the difference between what they're worth to service providers with and without their data attached. It's not a tough calculation to make. Dr. Should you own your own data? Players and Pawns in the Game of Privacy. Privacy is pretty constantly in the news at the moment.

Players and Pawns in the Game of Privacy

People like me can hardly take their eye off the news for a moment. This morning I was trying to do three things at once: follow David Allen Green's evidence at the Leveson inquiry (where amongst other things he was talking about the NightJack story which has significant privacy implications), listen to Viviane Reding talking about the new reforms to the data protection regime in Europe, and discover what was going on in the emerging story of 02's apparent sending of people's mobile numbers to websites visited via their mobile phones.... Big issues... and lots of media coverage... and lots of opportunities for academics, advocates of one position or other, technical experts and so forth to write/talk/tweet/blog etc on the subject. And many of us are taking the opportunity to say our bit, as we like to do. A good thing? La France va-t-elle se doter d’une loi rendant obligatoire les notifications des violations de sécurité ? « Information Security Breaches & The Law.

DATA PROTECTION DAY, 28 January 2011 - European Commission & Council of Europe.

Data retention

Data as a commodity. European Union Agency for Fundamental Rights - FRA. L'impressionnante profusion des initiatives tendant à la révision de la directive de 1995 sur la protection des données. Depuis plusieurs mois, la CNIL constate une augmentation du nombre de projets liés, directement ou indirectement, à la révision de la directive européenne relative à la protection des données personnelles.

L'impressionnante profusion des initiatives tendant à la révision de la directive de 1995 sur la protection des données

Au niveau de la Commission européenne, plusieurs études ont été lancées : Une étude comparative sur les différentes approches face aux nouveaux défis de la protection des données. La réflexion engagée vise à évaluer si les dispositions de la directive constituent toujours un instrument garantissant le droit fondamental à la protection des données à la lumière des développements qui interviendront dans les prochaines années. À cette fin, les systèmes juridiques européens, de pays-tiers, dont les États-Unis, ainsi que les systèmes fondés sur l'auto-régulation doivent être analysés afin d'identifier les meilleures pratiques dont la mise en place serait préconisée en Europe.

Face à ce constat, la nécessité de la mise en cohérence et de la rationalisation de ces travaux s'impose.

PNR

E-communication directive. Irish ministers fight EU bid to give Israel data - Republic of Ireland, Local & National. 02 September 2010 A crucial meeting to determine whether the plan should go ahead is taking place in Brussels.

Irish ministers fight EU bid to give Israel data - Republic of Ireland, Local & National

A special European Commission committee was forced to call the meeting after Justice Minister Dermot Ahern blocked a bid to push through the plan "on the nod" without consultation with government ministers from EU states. The commission is comprised of officials from the 27 member states and Ireland will be represented today by a senior official from the Department of Justice. Before yesterday's Cabinet meeting, Mr Ahern met Foreign Affairs Minister Micheal Martin to discuss the Brussels talks and the two men agreed that Ireland should push for a vote by the committee and then oppose the plan. Global Privacy Enforcement Authorities Launch Cooperative Network and Website. Global Privacy Enforcement Network Launches Website. Data Protection Law In India. Data Protection Law In India-Needs And Position The age of Internet has taken on India to new heights of excellence in education, medicine, communication, public services and almost all walks of governance.

In the IT sector, Indian professionals have built for themselves an enviable global reputation through hard work, dedication and commitment. Development in one sphere also has an impact over other spheres of life. This follows that with the increasing use of internet, need for changes in law is inevitable. Internet has in store a huge amount of data for different kind of people with different requirements. Libe_20100913_1500. Gov 2.0 Summit 2010: Osama Bedier, "PayPal: What We Do with Private..." Reputation bankruptcy. Google CEO Eric Schmidt created buzz (and some shock and criticism) when he suggested in a recent Wall Street Journal interview that, in the not too distant future, “every young person…will be entitled automatically to change his or her name on reaching adulthood in order to disown youthful hijinks stored on their friends’ social media sites.”

I’ve been intrigued by these concepts, too, and while I don’t think people should have to change their names to escape their pasts — whether earned or unearned — I like the idea of reputation bankruptcy. It’s taken up as a partial solution to peer-to-peer privacy problems in the Future of the Internet: Search is central to a functioning Web, and reputation has become central to search. If people already know exactly what they are looking for, a network needs only a way of registering and indexing specific sites. Article: Once More Unto the Breach: An Analysis of Legal, Technological and Policy Issues Involving Data Breach Notification Statutes. Dana Lesemann of the Howard University School of Law has an article of note in the Akron Intellectual Property Journal, Vol. 4, p. 203, 2010.

Article: Once More Unto the Breach: An Analysis of Legal, Technological and Policy Issues Involving Data Breach Notification Statutes

Here’s the abstract: Companies facing the loss of a laptop or a compromised server have long waged battles on several fronts: investigating the source of the breach, identifying potentially criminal behavior, retrieving or replicating lost or manipulated data, and putting better security in place. As recently as seven years ago, the broader consequences of a data breach were largely deflected from the party on whose resource the data resided and instead rested essentially on those whose data was compromised. Today, however, with the patchwork quilt of domestic data breach statutes and penalties, most companies forging “unto the breach” would consider paying a ransom worthy of King Henry to avoid the loss of its consumers’ identities through theft or manipulation. The cost to businesses of responding to data breaches continues to rise. Arrêt de la Cour. Tech and Law: August 2010. Bookmark this on Delicious <a href=' history</a> Privacy nightmare?

Tech and Law: August 2010

Lots of personal info is deducible from 1 click, Wall Street Journal article On the Web's Cutting Edge, Anonymity in Name Only (a must read by Emily Steel & Julia Angwin) just reported - Making data protection and privacy compliance simpler and faster. Username: Password: Login Help Contact Selected DataGuidance Users: Latest News Data Retention: CJEU points to data preservation as a 'path forward': The Court of Justice of the European Union (CJEU) ruled – on 8 April 2014 – the EU Data Retention.

making data protection and privacy compliance simpler and faster

Children's rights group threatens ICO with judicial review. High performance access to file storage Children's Rights Group ARCH has threatened to take the Information Commissioner to a judicial review after the data regulator declined to take enforcement action the Youth Justice Board for unlawfully collecting and distributing data. According to Terri Dowty, Director of ARCH, the Youth Justice Board (YJB) is continuing to process data without consent, in a manner that is possibly discriminatory and even dangerous to the individuals concerned. However, despite an admission by the Information Commissioner that his office may have misunderstood what the YJB was doing with its data, and an undertaking to investigate the matter further, no enforcement action has yet been taken.

A note from the ICO to ARCH suggests that its reluctance to take such action is primarily because the ICO initially got the law wrong, and since the YJB has been operating unlawfully for a year with its blessing, it would be wrong to intervene in haste now. Regulating the Use of Social Media Data. If you were to walk into my office, I’d have a pretty decent sense of your gender, your age, your race, and other identity markers. My knowledge wouldn’t be perfect, but it would give me plenty of information that I could use to discriminate against you if I felt like it. The law doesn’t prohibit me for “collecting” this information in a job interview nor does it say that discrimination is acceptable if you “shared” this information with me.

That’s good news given that faking what’s written on your body is bloody hard. What the law does is regulate how this information can be used by me, the theoretical employer.

Rebecca Wong

Outsourcing. Administrator must pay rent for the period that he retains possession of the property for the benefit of the administration. 11 March 2014. Search. Personal_information_online_code_of_practice Digital Edition olw. Data Protection and Privacy Laws. Devices must come with data-wipe function, says privacy regulato. The European Data Protection Supervisor (EDPS) Peter Hustinx regulates EU organisations' privacy practices and advises on policy and legislation.

He has published an opinion on planned changes to EU waste laws. Hustinx said that the European Commission should have considered the data protection and privacy risks of the re-use and dumping of electronic goods right from the outset of its plan to revise waste laws. The Commission has said it will revise the Waste Electrical and Electronic Equipment (WEEE) Directive to solve technical, administrative and legal problems in the law, which forces producers and retailers of electronic goods to take more responsibility for their disposal and recycling. How Your Data Trail Can Linger for Decades - Digits. Information Security Breaches & The Law. Data Protection Guide - Public Data and Information Sharing. Privacy & Information Security Law Blog : Privacy Lawyer & Attorney : Hunton & Williams Law Firm : Personal Data, Information Security. Computer Misuse Act 1990 (c. 18) Legislation.gov.uk The National Archives Search Legislation Advanced Search. Before You Even Click…. : Future of Privacy Forum.

ECJ clears up confusion between data protection principles and the right of access to public documents. The recent case of the European Commission v Bavarian Lager has provided useful guidance for public bodies faced with a request to disclose public documents (eg under the Freedom of Information Act), but concerned disclosing personal data (such as names) included in the documents. It appears that without express consent from the individual data subject, or failing that, an express and legitimate justification (such as an overriding public interest) or convincing argument to disclose, public bodies will not be compelled to disclose personal data contained in documents to which there is a public right of access.

The case concerned a request by Bavarian Lager (under the EC's regulations regarding public access to European Parliament, Council and Commission documents) for access to minutes of a meeting of the Commission. The Commission provided the minutes, but blanked out certain names of attendees to the meeting. Article 29 Working Party Opinion 3/2010 on the principle of accountability: 'made to measure' data privacy compliance for the proactive? Information Commissioner offers guidance on school photos.