Resources

TwitterFacebook
Get flash to fully experience Pearltrees
After being named by the Wall Street Journal earlier today, Global Payments Inc. has issued a press release about the breach reported earlier today by Brian Krebs: Global Payments Inc, a leader in payment processing services,... Steven Harmon reports: In a puzzling breach of security, computer storage devices containing identification information of 800,000 Californians using the state’s child support services have gone missing. The Department of... Today, a spokesperson for ESingles provided an update to the MilitarySingles.com breach report. Their statement is as follows: After a thorough investigation by our company programmers, it is our conclusion that our database was... http://www.databreaches.net/

Office of Inadequate Security

EU cookies directive

Columbian DP Law

On October 7, 2011, the Constitutional Court of Colombia approved a landmark omnibus data protection law. According to its press release, the Court approved almost all provisions in the legislation, known as Ley estatutaria No. 184/ 10 Senado, 046/10 Cámara , but it took issue with Article 27 (which addresses the government’s processing of certain data), Article 29 (which addresses the expunging of certain criminal records) and Articles 30 and 31 (which both address intelligence and counterintelligence databases). Many of the remaining provisions reflect a strong European influence. Some highlights include: With certain exceptions, the law prohibits the processing of personal data without the data subject’s prior consent. When the personal data are sensitive data ( e.g. , health data), the consent must take the form of an explicit authorization. http://www.huntonprivacyblog.com/2011/10/articles/colombian-data-protection-law-approved-by-constitutional/
On June 17, 2011, the National Assembly of the Republic of Angola passed Law 22/11 on Personal Data Protection. The omnibus privacy legislation applies to the automated and non-automated processing of personal data by controllers based or operating in Angola, or subject to, or using equipment governed by, Angola’s laws. Some highlights of the law are listed below. The law establishes a Data Protection Agency and sets forth data processing principles, including transparency, lawfulness, proportionality, purpose, accuracy and length of retention period. The Data Protection Agency must approve international data transfers to countries that do not ensure an adequate level of protection, and data controllers must notify the Agency of personal data transfers to adequate countries. Processing personal data is permitted only with (1) the express consent of the data subject, and (2) notification to the Data Protection Agency. http://www.huntonprivacyblog.com/2011/09/articles/angola-passes-personal-data-protection-law/

Angloa DP Law

http://www.pogowasright.org/ E-mail privacynews[at]pogowasright.org with any news leads, links, tips, questions, corrections, updates, or comments. If you are submitting a news lead, please let me know whether I can credit you publicly for the lead.

Privacy News - PogoWasRight.org

http://www.coe.int/t/dghl/standardsetting/dataprotection/default_EN.asp?

Council of Europe - Data Protection Homepage

You go somewhere, you buy something, you apply for a job, you pay your bills : you live ... and at each of those moments of your life, your personal information is used, collected, processed. In order to protect your right to private life, with regard to the automatic processing of your personal data, the Council of Europe elaborated the "Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data". 30 years after its entry into force, this Convention still remains the only binding international legal instrument in the field, with a potential worldwide scope of application.
http://www.huntonprivacyblog.com/ On March 20, 2012, the International Chamber of Commerce (the “ICC”) released a policy statement entitled “Cross-border law enforcement access to company data – current issues under data protection and privacy law.” The text of the ICC press release quoting Hunton & Williams Brussels partner Christopher Kuner, Chair of the ICC Task Force on Protection of Personal Data and Privacy, is reproduced below. The International Chamber of Commerce (ICC) has issued a policy statement pointing out conflicts that can arise between law enforcement requirements and privacy commitments when governments seek access to personal data held by companies across national borders.

Privacy & Information Security Law Blog : Privacy Lawyer & Attorney : Hunton & Williams Law Firm : Personal Data, Information Security

http://www.legalis.net/spip.php?page=jurisprudence&id_rubrique=14

Jurisprudence France

FAITS, PROCÉDURE ET PRÉTENTIONS Par contrat à durée déterminée, Mlle E. a été embauchée, à compter du 7 octobre 2009, par la société Vaubadis (à l’enseigne Leclerc), en tant qu’hôtesse de caisse - employée (...) DISCUSSION L. Julien et P. Malorie ont été cités par exploit de Maître Reynaud, huissier de justice à Neuville sur Saône (69), en date du 06 juillet 2011, pour comparaître à l’audience du 06 septembre (...) FAITS ET PROCÉDURE Vu l’assignation en référé d’heure à heure délivrée le janvier 2012 par Madame Diana Z. à la société de droit américain Google Inc.
http://www.hldataprotection.com/2011/05/articles/news-events/new-york-times-stirs-debate-over-eu-vs-us-privacy-commitment/

EU vs. US Privacy

Last week week, the New York Times published an article entitled "Europe Leads in Pushing for Privacy of User Data," which observed: As pressure grows for technology companies like Apple and Google to adjust how their phones and devices gather data, Europe seems to be where the new rules are being determined. After detailing some of the recent activities of Data Protection Authorities in the EU concerning location privacy, the article crticized the US framework: In the United States, there is no single agency dedicated to privacy, and while the Federal Trade Commission and the Federal Communications Commission can deal with violations of privacy, those agencies are mainly focused on enforcing fair business practices. In response, Christopher Wolf, Co-Director of the Hogan Lovells Privacy and Information Management practice wrote a Letter to the Editor, which was published today by the New York Times .

China Privacy Law

While personal data privacy law has been developing in many jurisdictions with the increasing prevalence of internet usage, the People's Republic of China has not yet enacted comprehensive laws or regulations governing the collection, use and transfer of personal data. However, this may change soon, as indicated by the recent issuance of the draft Information Security Technology -- Guide of Personal Information Protection (the " Guidelines ", issued jointly by the General Administration of Quality Supervision Inspection and Quarantine and the Standardization Administration of the PRC on 30 January 2011). The draft Guidelines were developed in consultation with the Ministry of Industry and Information Technology, the government agency charged with regulating the telecoms and internet industries, and would create broadly applicable rules and principles for handling and transferring personal information. http://www.hldataprotection.com/2011/04/articles/international-eu-privacy/china-publishes-draft-privacy-guidelines/
Today, privacy is one of the most hotly debated topics worldwide. The book aims to balance the development of personal rights in a country that has historically valued collective rights over those of the individual. The protection of privacy is not an issue that has been emphasised during the rapid development of economic laws in China. However, the accompanying development of greater government-based regulation of these laws’ implementation has led to greater invasions of personal privacy. This study attempts to provide a way forward for China to address the ever-increasing concerns about the protection of privacy and puts forward a legislative model for protection. http://www.springer.com/law/book/978-3-642-21749-4

Protecting Privacy in China

This site has accumulated well over 30 million hits since it was established in the early days of the Web. It continues to accumulate them at 3-4 million hits p.a., and is linked to from thousands of pages. The National Library of Australia's Pandora project judged the site to be sufficiently significant that it established an annual archival copy of the site in 2006. The resources available are in several specialised areas, and can be accessed by means of the buttons above. There are over 2,000 documents on the site. Some are academic in nature, but most are intended to be readable and useful.

Roger Clarke's Home-Page

Int'l Privacy Law Library

This project aims to make searchable from one location all of the databases specialising in Privacy law available on any of the Legal Information Institutes (LIIs) that are part of WorldLII . The databases currently included are listed above. Individual databases may be searched on their respective host LIIs. Suggestions for additional databases, or additional database content, may be sent to feedback@worldlii.org or to any of the researchers working on the Interpreting Privacy Principles Project . WorldLII offers to all data protection authorities to include their decisions/case notes in the Library.

EPIC - Electronic Privacy Information Center

The New York Times reported that Facebook would provide users with a downloadable archive containing many types of data that the company stores about users. Although the new archive contains more user information than Facebook first offered in 2010, Max Schrems, the German law student and founder of Europe v. Facebook , said that Facebook is still only providing 39 of 84 data categories. EPIC called on Facebook to give users full access to all of the data that the company keeps about them through EPIC’s Know What They Know campaign.