GDPR Weekly Show: Recent Episodes
Ensurety
A weekly update on all that is new in the world of GDPR, plus interesting guests, some 'how to' slots and details of new GDPR related solutions. UK based but with items of interest to a worldwide audience.
Coming up in this week's episode:
Royal Mail data breach,
ICO reduce Cabinet Office fine for breach of GDPR,
Bed Bath and Beyond data breach update,
Vodafone Italia data breach,
Data Reform bill put for further consultation after Rishi Sunak appointment,
Some important GDPR-related ECJ judgements expected in next few months,
TikTok revises privacy policy for EU users,
New London Hospital agrees to class action lawsuit settlement,
Harcourts real estate agency data breach,
Finnish man sentenced in his absence over Vasjaamo data breach,
Aveanna fined $425,000 after data breach,
St Lukes Health data breach,
Chegg sued by FTC after four data breaches in three years,
Russian hacker behind massive data breach freed from prison in USA,
Dropbox data breach,
ECJ issues ruling regarding withdrawal of user consent,
Deadline looms for replacing legacy Standard Contractual Clauses with new EU Standard Contractual Clauses
Coming up in this week's episode:
Royal Mail data breach,
ICO reduce Cabinet Office fine for breach of GDPR,
Bed Bath and Beyond data breach update,
Vodafone Italia data breach,
Data Reform bill put for further consultation after Rishi Sunak appointment,
Some important GDPR-related ECJ judgements expected in next few months,
TikTok revises privacy policy for EU users,
New London Hospital agrees to class action lawsuit settlement,
Harcourts real estate agency data breach,
Finnish man sentenced in his absence over Vasjaamo data breach,
Aveanna fined $425,000 after data breach,
St Lukes Health data breach,
Chegg sued by FTC after four data breaches in three years,
Russian hacker behind massive data breach freed from prison in USA,
Dropbox data breach,
ECJ issues ruling regarding withdrawal of user consent,
Deadline looms for replacing legacy Standard Contractual Clauses with new EU Standard Contractual Clauses
Coming up in this week's episode:
Interserve fined £4.4 million after breaches of GDPR and deficiencies in GDPR training,
PFS data breach,
Bed Bath and Beyond data breach,
See Tickets data breach,
Bristol City Council data breach,
Tata Power data breach,
MyDeal data breach update,
Drizly data breach resolution has an unusual twist,
High Court claim for non-material GDPR damages following a data breach referred to the Small Claims track,
Ascension St Vincent data breach,
Hoyoverse data breach,
Medibank data breach update,
Thomson Reuters data breach,
Medlab data breach,
GDPR causes outburst of strong language at Laois Council,
Hungarian DPA rules on joint Data Controller liability,
EU Digital Services Act coming into force in early 2024,
Microsoft and German authorities clash over GDPR,
UK Cybersecurity industry edges towards creation of a Chartered Professional Standard for Cybersecurity
Coming up in this week's episode:
Conservative Party leadership election electronic voting fears of rogue state intervention,
Ticketmaster data breach,
Whistleblower asks NatWest RBS to pay Data Controller registration fee, Clearview AI fined €20 million for GDPR failures,
Nelnet data breach,
UK Businesses urged to enhance their cyber security,
5 steps to improve your supply chain security,
Mediahaus settles several data breach damages claims,
California Pizza Kitchen reaches lawsuit settlement after data breaches,
Estate Agents could be next target for significant cyber attacks,
Victims of Optus data breach find they now can't use their passport details online,
MyDeal data breach,
UK court establishes further guidance on De Minimis payouts where there has been no material damage to the individual,
Medibank data breach,
ICO simplifies use of Binding Corporate Rules
Coming up in this week's episode:
Conservative Party leadership election electronic voting fears of rogue state intervention,
Ticketmaster data breach,
Whistleblower asks NatWest RBS to pay Data Controller registration fee, Clearview AI fined €20 million for GDPR failures,
Nelnet data breach,
UK Businesses urged to enhance their cyber security,
5 steps to improve your supply chain security,
Mediahaus settles several data breach damages claims,
California Pizza Kitchen reaches lawsuit settlement after data breaches,
Estate Agents could be next target for significant cyber attacks,
Victims of Optus data breach find they now can't use their passport details online,
MyDeal data breach,
UK court establishes further guidance on De Minimis payouts where there has been no material damage to the individual,
Medibank data breach,
ICO simplifies use of Binding Corporate Rules
Coming up in this week's episode:
Ministers ordered to release secret files concerning Queen Elizabeth II finances,
East Renfrewshire Leisure data breach,
Request for mediation after NHS Highland data breaches,
Church of Jesus Christ of Latter Day Saints data breach,
T-Mobile data breach compensation website established,
2K data breach,
Dialog data breach,
City of Tucson data breach,
General Electric agree settlement for damages after data breach,
Chile, Peru, El Salvador, Mexico, Colombia cyberattacks,
Optus facing investigations from multiple agencies after data breach,
Zoetop and Shein fined after data breach,
EDPB attempts to restrict Europol data retention,
Europrivacy certificate approved by EDPB
Coming up in this week's episode:
Ministers ordered to release secret files concerning Queen Elizabeth II finances,
East Renfrewshire Leisure data breach,
Request for mediation after NHS Highland data breaches,
Church of Jesus Christ of Latter Day Saints data breach,
T-Mobile data breach compensation website established,
2K data breach,
Dialog data breach,
City of Tucson data breach,
General Electric agree settlement for damages after data breach,
Chile, Peru, El Salvador, Mexico, Colombia cyberattacks,
Optus facing investigations from multiple agencies after data breach,
Zoetop and Shein fined after data breach,
EDPB attempts to restrict Europol data retention,
Europrivacy certificate approved by EDPB
Coming up in this week's episode:
Lloyds of London forced to reset IT systems after cyberattack,
Meta warns users that some third party apps collect and misuse user data,
Cyberattackers turn their aim on the Kremlin,
ICO could impose multi million fine on TikTok for GDPR failures and failure to comply with The Children's Code,
ICO issues formal reprimand on UK Home Office,
Easylife fined £14.8 million for GDPR and PECR breaches,
ICO issues further detail of Virgin Media enforcement action,
EU Attorney General issues opinion on GDPR non-material damages claims,
UK DCMS puts Data Reform bill on hold for more consultation,
Talbert Home data breach,
Detroit terminates software supplier contract after data breach,
Gun retailer Ruger facing legal action after 2 year data breach,
Toyota data breach warning,
Former Uber Security Chief found guilty of concealing data breach,
ICO issues guidance on use of PETs,
RSA says it cannot issue details of road traffic incidents due to GDPR,
Johnny Ryan complains to EU Commission re lack of action by Irish DPC against Irish based tech giants.
Coming up in this week's episode:
Lloyds of London forced to reset IT systems after cyberattack,
Meta warns users that some third party apps collect and misuse user data,
Cyberattackers turn their aim on the Kremlin,
ICO could impose multi million fine on TikTok for GDPR failures and failure to comply with The Children's Code,
ICO issues formal reprimand on UK Home Office,
Easylife fined £14.8 million for GDPR and PECR breaches,
ICO issues further detail of Virgin Media enforcement action,
EU Attorney General issues opinion on GDPR non-material damages claims,
UK DCMS puts Data Reform bill on hold for more consultation,
Talbert Home data breach,
Detroit terminates software supplier contract after data breach,
Gun retailer Ruger facing legal action after 2 year data breach,
Toyota data breach warning,
Former Uber Security Chief found guilty of concealing data breach,
ICO issues guidance on use of PETs,
RSA says it cannot issue details of road traffic incidents due to GDPR,
Johnny Ryan complains to EU Commission re lack of action by Irish DPC against Irish based tech giants.
Coming up in this week's episode:
UK MOD, Home Office, Virgin Media and four other organisations 'named and shamed' by ICO for failures to respond to Data Subject Access Requests,
Optus data breach update,
Hacktivists uniting to take action against Iran,
Canadian Border Agency data breach,
Seattle Childrens Hospital data breach,
Financial survey shows over 55s reluctant to disclose data online,
Swiss DPA passes final hurdles to becoming law,
US UK Data Access agreement to be implemented from 3rd October 2022
Coming up in this week's episode:
American Airlines data breach,
Revolut data breach,
AEPD fines Google €10 million for breaches of GDPR,
Cash Express data breach,
Man arrested in Oxfordshire in relation to Uber data breach,
Wymondham High School data breach,
Optus data breach,
PSNI officers informed of court date for trial over alleged data breaches,
Empress EMS data breach,
FBI issues guidance on minimising impact of Malware/Spyware attacks,
Employee Monitoring - what to look out for to avoid GDPR issues,
CJEU rules that Title is GDPR Special Category data,
EDPB asks for increased budget for 2023/24
Coming up in this week's episode:
American Airlines data breach,
Revolut data breach,
AEPD fines Google €10 million for breaches of GDPR,
Cash Express data breach,
Man arrested in Oxfordshire in relation to Uber data breach,
Wymondham High School data breach,
Optus data breach,
PSNI officers informed of court date for trial over alleged data breaches,
Empress EMS data breach,
FBI issues guidance on minimising impact of Malware/Spyware attacks,
Employee Monitoring - what to look out for to avoid GDPR issues,
CJEU rules that Title is GDPR Special Category data,
EDPB asks for increased budget for 2023/24
Coming up in this week's episode:
Uber data breach,
Financial Conduct Authority data reveals surge in DDOS attacks since war in Ukraine,
More details emerge of leaked NATO documents in Portugal,
Capital One consent order removed,
Cisco attribute cyberattack to Lapsus$,
Voting machine data breaches raise concerns ahead of Mid-Term Elections,
Lastpass data breach update,
GDPR and the use of drones,
Uhaul data breach,
GDPR safe Cloud providers,
Calls for investigation into Malaysia mobile phone data breach to be reopened,
SeeSaw data breach,
Brickler and Eckler settle class action after data breach,
Police name one suspect in Indonesian Government data breach,
Physicians, Spine and Rehabilitation Specialists data breach,
Keybank Mortgages data breach,
Starbucks Singapore data breach,
Victoria data watchdog calls for mandatory data breach notifications,
Australian Universities call for adoption of rules similar to GDPR
Coming up in this week's episode:
Uber data breach,
Financial Conduct Authority data reveals surge in DDOS attacks since war in Ukraine,
More details emerge of leaked NATO documents in Portugal,
Capital One consent order removed,
Cisco attribute cyberattack to Lapsus$,
Voting machine data breaches raise concerns ahead of Mid-Term Elections,
Lastpass data breach update,
GDPR and the use of drones,
Uhaul data breach,
GDPR safe Cloud providers,
Calls for investigation into Malaysia mobile phone data breach to be reopened,
SeeSaw data breach,
Brickler and Eckler settle class action after data breach,
Police name one suspect in Indonesian Government data breach,
Physicians, Spine and Rehabilitation Specialists data breach,
Keybank Mortgages data breach,
Starbucks Singapore data breach,
Victoria data watchdog calls for mandatory data breach notifications,
Australian Universities call for adoption of rules similar to GDPR
Coming up in this week's episode:
Our recognition of the passing of Her Majesty Queen Elizabeth II,
NHS cyberattack on provider Advanced still being felt by NHS 111 after 3 weeks,
Go Ahead bus services affected by cyberattack,
TikTok denies data breach despite data appearing in online forums,
DPC fines Instagram €405 million for GDPR breaches,
IHG hotels group data breach,
Albania breaks diplomatic ties with Iran after cyber-attack,
Portugal data breach potentially exposes sensitive NATO documents,
Uber executive facing criminal trial after data breach,
IAB appeal against decision of Belgian DPA is heading for the CJEU,
IRS data breach exposes details of 120,000 US taxpayers,
Air India data breach,
A comparison between GDPR and PIPL
Coming up in this week's episode:
Our recognition of the passing of Her Majesty Queen Elizabeth II,
NHS cyberattack on provider Advanced still being felt by NHS 111 after 3 weeks,
Go Ahead bus services affected by cyberattack,
TikTok denies data breach despite data appearing in online forums,
DPC fines Instagram €405 million for GDPR breaches,
IHG hotels group data breach,
Albania breaks diplomatic ties with Iran after cyber-attack,
Portugal data breach potentially exposes sensitive NATO documents,
Uber executive facing criminal trial after data breach,
IAB appeal against decision of Belgian DPA is heading for the CJEU,
IRS data breach exposes details of 120,000 US taxpayers,
Air India data breach,
A comparison between GDPR and PIPL
Coming up in this week's episode:
Facebook Cambridge Analytica data breach lawsuit reaches 11th hour settlement,
Authy users affected by Twilio data breach,
NHS Orkney data breach,
Samsung data breach,
Evil Corp and Conti linked to Cisco data breach,
Mobile Banking Apps putting user's digital signatures at risk via use of Amazon Web Services (AWS),
Lawsuits launched against Afni after data breach,
Xinai Electronics data breach reveals details of 800 million chinese people,
Vodafone Idea denies it has had a data breach,
Student Loans data breach exposes details of 2.5 million students,
Russian streaming service Start hit by data breach,
Semcorp Marine data breach,
Fonvile Morisey data breach,
The effect of data breaches on the US Healthcare system,
Black Knight data breach,
San Francisco 49'ers data breach
Coming up in this week's episode:
Facebook Cambridge Analytica data breach lawsuit reaches 11th hour settlement,
Authy users affected by Twilio data breach,
NHS Orkney data breach,
Samsung data breach,
Evil Corp and Conti linked to Cisco data breach,
Mobile Banking Apps putting user's digital signatures at risk via use of Amazon Web Services (AWS),
Lawsuits launched against Afni after data breach,
Xinai Electronics data breach reveals details of 800 million chinese people,
Vodafone Idea denies it has had a data breach,
Student Loans data breach exposes details of 2.5 million students,
Russian streaming service Start hit by data breach,
Semcorp Marine data breach,
Fonvile Morisey data breach,
The effect of data breaches on the US Healthcare system,
Black Knight data breach,
San Francisco 49'ers data breach
Coming up in this week's episode:
Lastpass data breach,
Nato missile systems data breach could impact some systems sent to Ukraine,
Plex data breach,
Doordash data breach,
Greek gas operator Desfa hit by data breach,
Hamilton Water data breach,
Robin Hood reach $20 Million settlement after data breach,
California Department of Corrections and Rehabilitation (CDCR) data breach,
Indonesia Telekom data breach,
Block (owners of Square) face class action after data breach
Coming up in this week's episode:
Apple reveal security flaw affecting iPhone, iPad, iPod and Apple Mac,
Association of British Investigators opens consultation on GDPR Code of Conduft for its industry,
SEC presses charges for insider trading regarding Equifax data breach,
Capital One class action claim period extended,
Manx Care face possible £170,000 fine after data breach,
Westjet app data breach,
Twilio data breach affects almost 2000 Signal customer,
18000 Airtel users found to be using the same password,
Whatcom County Library data breach,
Sferra data breach,
California prepares for CPRA to come into force
Coming up in this week's episode:
Volkswagen fined €1.1 Million over cameras in cars during test drives,
UK Parliament closes its TikTok account over links to China,
Burger King blank receipts cause data breach false alarm,
Wendy's shareholder loses legal challenge to data breach settlement,
Twilio data breach,
ICO launches its three year strategy ICO25,
UK and USA announce Joint Data Access Statement,
European Parliament formally adopts the Digital Markets Act (DMA) and the Digital Services Act (DSA),
Amazon loses appeal against CNIL €35 Million Penalty for breaches of GDPR,
CNIL fines Totalenergies €1 Million for GDPR breaches,
Dixons Stores Group sees data breach penalty cut in half following appeal,
Judgement expected from DPC investigation into Instagram handling of Childrens' Data by first week in September,
German citizen sues EU Commission claiming one of its websites breaches GDPR rules,
Cisco data breach after voice phishing (vishing),
Malaysia Central Bank investigates possible data breach,
Pixsy data breach,
Accusoft data breach,
Acorn Financial Services data breach,
The American Data Privacy and Protection Act (ADPPA) finally reaches the House of Representatives,
NOYB targets what it calls 'hopeless cases' for non-cookie compliance
Coming up in this week's episode:
NHS 111 service affected by cyber-attack,
Conservative Party leadership election process delayed by Cybersecurity concerns,
UK found to be Card Fraud capital of Europe,
Church of England ISB safeguarding chair steps back after data breaches,
CJEU rules releasing names of partners could expose a data subject's sexual orientation,
Mayor of London's plan to give Metropolitan Police access to ANPR images faces legal challenge,
University of Western Australia data breach,
Price Edward Island Arts Centre data breach,
Virgin Islands Budget Office requests FBI visit over possible data breach,
Avamere data breacg,
Users still unable to access their Neopets accounts after data breach,
Solana and Slope confirm data breach affecting cryptocurrency wallets,
Twitter confirms how data breach occurred,
First Choice Healthcare data breach,
QuestionPro data breach,
Semikron data breach,
Gaedke Group data breach,
Slovenia criticised by European Commission for its failure to fully implement GDPR,
Criteo fined $65 million for GDPR violations following CNIL inquiry
Coming up in this week's episode of the GDPR Weekly Show:
Liverpool City Council face no further action from ICO after data breach,
Southern Co-op use of facial recognition to be challenged in legal case,
Facebook business accounts targeted by malware,
Bromford Housing data breach,
Deutsche Telekom, Telefonica 02 and Vodafone all due to appear before North Westphalia District courts for GDPR breaches,
Mac users warned of malware controlled by cloud storage,
St Lukes Health data breach,
BECU data breach,
Uber and US DOJ reach agreement after data breach cover up,
UK Universities told not to use GDPR as reason not to disclose outcome of harrasment investigations
Coming up in this week's episode:
Neopets data breach,
UK NCSC and ICO urge lawyers not to advise their clients to pay ransoms after ransomware attacks,
Zuckerberg to appear in Cambridge Analytica court proceedings,
Twitter data breach,
ChromeBooks ruled non-GDPR compliant by Danish authorities,
St George's University Hospital pays £2,500 damages after data breach,
Russia tops data breach table for Q2 2022,
Methodist Hospitals pays $425,000 after data breach,
Former CIA employee convicted after data leak to Wikileaks,
US Justice Department faces $8.5 million bill after data breach,
Blue Shield data breach,
Williams Company sues ex-employee after data breach,
Professional Finance Co data breach,
UK Cybersecurity Chiefs back idea of automated detection of child abuse images,
Oklahoma City Housing Authority data breach,
Rhode Island company Tradesource to pay $230,000 after data breach,
Perth Festival data breach,
T-Mobile to pay $350 million after data breach,
Google faces anti-trust probe in Italy over GDPR data portability
Coming up in this week's episode:
ICO reprimands UK Government over use of Whatsapp and private emails for official communications,
Tiktok postpones planned privacy policy change after intervention by the Italian DPA,
Clearview AI fined € 20 million by Greek DPA,
Hotel Quarantine breach in Victoria, Australia,
Deakin University data breach,
Windsor University data breach,
VCU Health data breach,
Alibaba begins investigation after Shanghai Police data breach,
EDPB publishes its opinion on Digital Euro,
BDPA rules rights to access and correction are not absolute for medical records
Coming up in this week's episode:
Pilton College, De Montfort School and Carmel College involved in data breach,
NCSC warns UK organisations to beware of Russian cyberattacks,
Ecclesiastical Insurance pays £30,000 after data breach,
Claires Accessories pays $350,000 compensation after data breach,
Yet another Marriott Hotels data breach,
Chefs Toys data breach,
Customer.io data breach affecting more people than originally thought,
Office of Personnel Management and Peraton agree to pay $63 million after data breach,
Dutch Data Protection Authority warned that it is enforcing some parts of GDPR too strictly,
Benefit Plan Administrators data of breach,
Place of processing relevance when deciding which State laws apply,
Lending Tree data breach,
Welldynerx data breach,
Shanghai Police data breach potentially releases details of 1 billion Chinese citizens,
ECJ tells Austrian Post Office it must inform data subjects who their data has been transferred to
Coming up in this week's episode:
Opensea NFT Marketplace data breach,
ICO says it is going to reduce fines issued to public bodies,
DVLA found to have been using incorrect legal basis for processing data,
Russia reduces Lihuania's Internet connectivity by 70%,
Lakeview data breach now involves an extra 100,000 people,
Goverment Audit Office finds need for HHS to improve its responses to data breaches,
Flagstar data breach,
Wegmans fined $400,000 after data breach,
AMD data breach,
Thailand introduces PDPA on June 1st,
Google facing action from European Consumer Groups who allege that the options Google gives for managing personal data are too complex
Coming up in this week's episode:
Japanese man loses USB key with details of all city residents.
Russia leads league table for data breaches,
Survey confirms trends towards Hybrid Working,
Tarmac warned after data breach,
A look at changes planned via the UK Data Reform Bill,
Childcare apps find to lack data security measures,
MGM Hotels and Resorts data appears on Telegram,
Queensland proposes changes to data protection legislation,
University of Pittsburgh pays compensation after data breach,
What additional costs does a data breach bring?
MCG Health data breach,
Trident Care data breach,
Spain and Ausria dispute whether location data is personally identifiable data as defined by GDPR
Coming up in this week's episode:
UK Government issues more details on Data Reform Bill,
Shoprite data breach,
Eye Care Leaders ransomware attack affects healthcare providers across USA,
Schneck facing lawsuit after data breach,
TikTok moves US user's data to Oracle to allay privacy concerns,
Kaiser Permanente data breach,
Desjardins order to pay $200 million after data breach,
Lake Charles Sherriff's Office data breach
Coming up in episode 200:
An exclusive interview with the UK'S No1 Motivational Business Speaker, Brad Burton.
We discuss Brad's history, his thoughts on current affairs, his 3 hot tips for business, how he got his business through the Covid-19 pandemic, Tim Peake and many other items in a jam packed half hour of business positivity.
Don't worry, our normal mix of GDPR news and articles will return on Wednesday next week (22nd), we just thought we would do something a little different for our 200th episode.
There is also a competition to win some unique prizes.
We hope you enjoy this week's episode and normal service will be resumed on Wednesday.
Finally, a massive thank you to all of you, our 75,000 listeners around the globe who make the whole GDPR Weekly Show experience worthwhile for us, and we hope, worthwhile for you too.
Here's to episode 300!
Coming up in this week's episode:
ICO found to have not disclosed GDPR penalties against public bodies,
Comstar Ambulance data breach,
Capital One hacker stands trial,
Shields Healthcare data breach,
Aesto Healthcare data breach,
AON plc data breach,
Ian Martin Group data breach,
Pyramid Consulting Group data breach,
Ondeck data breach,
Pegasus Airlines data breach,
Private Client Services data breach,
Daedlus Biologie fined by CNIL for GDPR breaches,
EU Commission answers common questions around use of SCC
Coming up in this week's episode :-
Quickbooks issues fifth phishing warning this year,
Zoom issues crucial security update,
Sign the Petition to stop the UK Data Reform Act,
New York city schools told to cease use of Illuminate products after data breach,
Martin University data breach,
UK can lawfully carry out Cyber Attacks against 'hostile' states,
Spirit Super pension fund data breach,
Capsule pharmacy data breach,
A deeper look at the new Indian Privacy Act,
How can a Data Controller audit their Data Processors to ensure they are GDPR compliant,
GDPR and its effect upon African privacy laws
Coming up in this week's episode:
Clearview AI fined by UK ICO after GDPR breaches,
Twitter fined after data breaches,
UK MOD fully cyber resilient by 2030,
Man denied entry to USA after PSNI data breach,
Judge says GDPR delay is ludicrous,
Russian Hackers declare war on 10 countries after failed attempt to disrupt Eurovision,
General Motors data breach,
Max Schrems open letter regarding new EU/US Privacy Shield negotiations,
CR Edwards data breach,
Optoma Technology data breach,
East Tennessee Children's Hospital data breach,
Can you have an EU wide Data Retention policy ?
Beware that automated deicision making can breach GDPR,
Ios15 can install malware even when device is turned off
Coming up in this week's episode:
Cornwall Council data breach of children's data,
Worcestershire Childrens Services data breach,
States of Jersey Information Commissioner Annual Report,
ICCL report highlights level of RTB data sharing,
Ukraine now has DDOS bot for cyber attackes against Russia,
EDPB issues guidance on setting GDPR penalties,
Google challenged over NHS data breach,
A Stateside look at DPIAs and emerging State legislation,
Estate Agents using Whatsapp and breaching UK GDPR,
Spanish Data Regulator fines Google over Right to be Forgotten,
CISA issues urgent VMWare update notice,
BCS views on Data Reform Bill,
Elephant Insurance data breach,
Chicago Public Schools and Battelle for Kids data breach,
Dutch online pharmacies found to be non-compliant with GDPR
Coming up in this week's episode :-
Central Bedfordshire Council data breach,
NHS Digital released data to high risk organisations,
Nicola Sturgeon uses GDPR to avoid questions in Scottish Parliament,
ICO reduces IT spending by £1.2 million,
Costa Rica declares state of emergency after Conti ransomware attack,
Polish DPA fines data controller for not checking data processor GDPR compliance,
UK Data Reform Bill announced in Queen's Speech,
Ontario Provincial Police investigate Ontario Cannabis Store data breach,
AA Traveller apologises after data breach,
Dis-Chem pharmacy data breach,
India industry pushes back against 6 hour data breach reporting limit,
City of Cincinatti data breach,
Optionis denies liability for Parasol data breach,
Greek Transparency Agency withdraws report after personal details not redacted
Coming up in this week's episode:
Sixt data breach.
University of Essex data breach,
Will a new data bill be in the Queen's Speech?
Transport New South Wales cyber attack,
US Department of Defense scammed after phishing attack,
Spanish Prime Minister phone attacked by Pegasus spyware,
California State Bar data breach,
Mynurse closes after data breach,
US schools affected by Illuminate data breach,
Ikea Canada data breach,
Google PlayStore requires more data collection details from app developers,
High Court gives guidance on GDPR non-material damage claims,
India introduces 6 hour data breach reporting window,
EU Commission hints at GDPR Plus,
Utah Consumer Privacy Act,
Hungarian DPA rules on bank's use of AI,
CJEU boosts consumer group actions for GDPR infringements,
Google Analytics - what to do to make its use GDPR compliant
Coming up in this week's episode: Hackers claim to have breached Coca Cola data,
Northern Ireland health workers affected by data breach,
British Army recruitment website still down weeks after data breach,
Blackbaud legal action after data breach,
Leaked document shows difficulties Meta is having trying to keep Facebook GDPR compliant,
Ola Electric legal action after alleged data breach,
Far Right website in France pursued by CNIL over data breach of prominent Muslim personal details,
Dutch DPA penalises Dutch Tax Authority and Ministry of Foreign Affairs for GDPR breaches,
ICO issues GDPR guidance around Life Sciences,
Daedlus data breach,
Github security breach,
Guidance for GDPR in the Translation and Interpretation Sector,
Mediant data breach,
McDonalds data breach in Brazil,
GDPR equivalent regulations in Bahrain
Coming up in this week's episode:
10 Downing Street devices hit by cyberattack,
Funky Pigeon data breach,
Manx Care GDPR breach penalties,
Controversy over Saseido data breach,
British businesses urged to be cautious in use of Police Cybersecurity app,
CNIL introduces fast-track GDPR breach process,
Hong Kong Commissioner issues report into Nikkei Inc data breach,
Lapsus$ attacks T-mobile,
BobRedsMills data breach,
Mcarther and English data breach,
Wawa sues Mastercard for recovery of data breach penalties,
EDPB issues further guidance on GDPR implementation,
GDPR and the EU AI Act compared
Coming up in this week's episode:
UK Home Office data breach,
Shiseido UK data breach,
ICO concludes no further action after Matt Hancock CCTV breach,
TikTok GDPR breach heard in UK High Court,
Nestle and Anonymous dispute data breach,
Yandex Food data breach exposes details of Russian security personnel,
Dutch DPA issues guidance on GDPR transparency,
Arizona and Indiana revise their data breach reporting requirements,
Lakeview Loan Prodcessing data breach,
Queen's University data breach,
Conti claims responsibility for Panasonic Canada cyber attack,
Ericsson discloses data breach,
Newman Regional Health data breach,
Maplesoft data breach,
ICANN and EU commission lock horns over DNS data and GDPR
Coming up in this week's episode:
Mailchimp data breach,
The Works data breach,
Isle of Wight electric car charging points show porn rather than user instructions,
Snap-on Tools data breach,
Bank of Ireland fined for GDPR breaches,
Caixabank fined for having pre-ticked consent boxes,
Danske Bank fined for not having accurate data retention policy,
University of California extends credit checking after data breach,
Parker Hannifin data breach,
Block CashApp data breach,
Microsoft outlines its activities to prevent cyberattacks in Ukraine,
Horizon Actuarial data breach,
Trade Association code of conduct or Standard Contractual Clauses, what are the pros and cons?
Russian based groups attempting to hack Nato and European defence ministries,
MOD Recruitment system shutdown after data breach,
NCSC issues strongest warning yet regarding Kapersky products,
A new EU/US Privacy Shield is emerging soon,
MandS parcel photos data breach,
New PCI DSS for handling credit and debit card information,
Anonymous hack Central Bank of Russia,
Russian Oligarchs using GDPR to frustrate investigations into their assets,
CNAM data breach affects 500,000 people,
Canadian Conservative Party dara breach,
Hiscox loses court case against legal firm,
Storyblok achieves ISO 27001,
Shutterfly data breach,
CMG Financial data breach,
Globant latest to be struck by Lapsus$,
How does a Data Breach cost break down?
Data Privacy in New Zealand
Coming up in this week's episode:
Isle of Wight children's information data breach,
Ransomware attack on Scottish Mental Health Charity,
Kinross family awarded £2500 after school data breach,
Allerdale Council data breaches revealed in FOI request,
John Edwards, UK ICO, makes first policy speech
Cryptocurrency customers affected by Hubspot data breach,
Amazon employees in UK, Germany, Poland and Slovakia demand to know what data Amazon holds on them,
EU propers new bloc-wide Cyber Security Regulations,
4 Orthopaedic data breaches in the USA,
CSI faces legal action after data breaches,
Liberty of Oklahoma data breach,
Just who are Lapsus$?
Coming up in this week's episode:
Worldwide cyber security centres advise users to cease using Kapersky products,
Rosneft Oil hacked by Anonymous,
Russian infrastructure subject to sustained cyber attacks,
Human error cause of data breach at Scottish Environment Protection Agency,
Data breach at Isle of Man based Strix Group,
Cafepress fined $500,000 after data breaches,
HM Prison Service 2000 data breaches in 12 months,
Interview with Debbie Reynolds - Data Diva,
Greencore facing legal action after data breach,
DPC being sued for alleged inaction over Google data breach,
Limerick Garda defend use of CCTV despite data breach,
Meta fined $18.6 million for GDPR breaches
Coming up in this week's episode:
Wightlink data breach,
Tuckers Solicitors fined £98,000 after data breach,
Employees at LSH Auto take legal action after data breach,
Scenic Group data breach,
Prosecution after Dundee City Council data breach,
Adafruit data breach,
Ex-NatWest employee kept customer records under her bed,
Ex-INM Chief Executive has his whole mailbox copied after data breach,
Can you use Whatsapp to transfer customer files and be GDPR compliant?
Some guidelines on anonymisation,
Italian DPA fines Clearview AI €20 Million,
Spanish DPA approves code of conduct for clinical trials,
GDPR rules on AI in HR processes,
Logan Health data breach,
Practicemax data breach
Coming up in this week's episode:
Top 20 Passwords which are involved in data breaches,
New Wiper malware emerges from Ukraine,
EU Parliament to hold live hearing into GDPR enforcement,
Conti ransomware group given taste of its own medicine.
Washington State finally gets licencing system back online after data breach,
Nvidia data breach,
Samsung data breach,
Harbour Plaza Hong Kong data breach,
Manongolia Health Corporation data breach,
Greek DPA imposes record fine for GDPR breaches,
Grindr to appeal Norway DPA fine,
Spanish DPA,
Company takeover GDPR due diligence - how we can help
Coming up in this week's episode:
Our thoughts on Ukraine,
Hacktivists choose their side,
Credit Suisse data leak,
Redcar and Cleveland Borough Council data breaches,
Massive NHS breach in Preston,
Scottish Police Officer in court after accessing her own case file,
Absa data breach update,
Further data breach at Givesendgo identifies Freedom Convoy donors,
DPC Annual Report,
Deloitte reaches settlement in data breach class action,
Australian Information Commissioner biannual report,
Sea-Mar data breach,
Oklahoma data breach reveals DNA data of sex assault victims,
Arkansas Advantage Title and Escrow data breach,
Google Check offers auto GDPR checks for app developers,
Helen Dixon calls for meaningful comparisons between DPAs
Coming up in this week's episode: Ottawa Freedom Convoy Donor details revealed online,
Surrey Children's Home closed over suspected data breach,
Northern Ireland child abuse victims receive payout after data breach,
Swissport data breach,
Child arrested after A1 Hrvatska data breach,
UK Standard Contractual Clauses laid before Parliament,
Kronos Cyber-attack fallout,
New South Wales COVID-19 database data breach,
Morley data breach,
Internet Society data breach,
Greensward School data breach,
Canadian Marketing Association urges Government not to copy GDPR when reviewing Canadian data privacy,
ICO opens consultation on GDPR and the research industry,
EDPB new guidance on Artificial Intelligence expected,
UK Supreme Court rule against Bloomberg in privacy case
Coming up in this week's episode:
Meta could shut Facebook and Instagram in EU and UK over GDPR,
FCDO data breach,
Use of Google Fonts API is a breach of GDPR,
CNIL follows Austria in ruling Google Analytics breaches GDPR,
Optinis Parasol data breach disrupts UK IT contractors,
Whitby High School Ellesmere Port data breach,
Beetle Eye data breach,
Puma employees affected by data breach,
Vodafone Portugal cyber attack,
Desjardins data breach settlement,
A1 Hrvatska data breach,
High Court gives further guidance in non-material GDPR damages claims,
Amazon closes Flexbooker AWS bucket,
Inmeriata data breach settlement,
Telenor Myanmar customers use GDPR in attempt to halt company sale,
Journalistic Exemption and GDPR,
EU Ombudsman investigates DPC enforcement of GDPR
Coming up in this week's episode:
European oil terminals struck by ransomware, KP Nuts distribution disrupted by hackers,
The Sandon School data breach,
Dorset NHS Trusts data breaches,
British Council 3rd party data breach,
Norfolk Dates data breach,
FBI warns Winter Olympics athletes to leave their smartphones at home,
Equifax data breach settlement agreed,
IAB Europe technology found to be non-GDPR compliant,
Securitas data breach,
Washington Licensing Dept data breach,
Artech reach settlement following data breach,
Young Men's and Young Women's Hebrew Association data breach,
Consel D'Etat confirms CNIL penalty against Google,
Greece Telecoms firms fined for data breachs,
Brexit Freedom Bill and its impact on UK GDPR,
EDPB issues guidance on dealing with Data Subject Access Requests
Coming up in this week's episode:
Fife residents caught in data breach, Dublin City Council data breach,
Lisbon Mayor's Office sharing protestor data with foreign embassies,
Absa data breach,
Koons Automotive data breach,
DR Donnelly data breach,
Data breaches cost more than just money,
UK Higher Education and PIPL,
Can a Cookie really be that expensive?
German courts set precedents on Non-Material Damages after GDPR issues
Coming up in this week's episode:
ICO serves enforcement notice on UK Ministry of Justice, Gloucester Council data breach,
Red Cross data breach,
Pakistan Telecoms data breach,
Bonobos wins court case following data breach,
Italian luxury brand Moncler has data breach,
Simplify data breach,
Warwick GP Surgery data breach,
QRS face lawsuit after data breach,
GDPR issues 2022,
Pennsylvania introduces data breach legislation,
Clarity around who can be a DPO,
Irish GDPR Survey,
CNIL acts on e-Privacy directive,
Brussels Appeal on GDPR implementation,
Employee mailboxes and how to handle when an employee leaves
Coming up in this week's episode:
Austrian DPA rules on Google Analytics and SchremsII,
Meta facing Class Action in UK,
Meta being investigated for breaching Childrens Code,
European Parliament reprimanded by European Data Protection Supervisor,
Lastpass making it impossible for users to leave,
Whatsapp sets out grounds for appeal,
Malta judiciary controversial proposals for Right to be Forgotten,
Class action against TikTok in Dutch courts,
Goodwill data breach,
Bunnings data breach,
Accelion reach settlement in class action after data breach,
Transport for New South Wales affected by Accelion data breach,
Europol ordered to delete petabytes of data,
FCC proposes changes to data breach recording
Coming up in this week's episode:
Flexbooker data breach,
UK Police data which was breached has disappeared,
De Montfort School data breach,
UK Appeal Court ruling has implications for Patreon users,
Additional charges against former Uber security chief,
Morgan Stanley agrees compensation after data breach,
Navistar data breach,
American Pool breach,
EU Commission pushes back against idea of central regulator,
New York Attorney General identifies over 1 million compromised accounts,
USCellular data breach,
RIPTA data breach to be investigated by Rhode Island Attorney General,
McMenimins data breach
Coming up in this week's episode:
Lastpass data breach update,
T-Mobile data breach,
Sega narrowly avoids data breach,
Colchester Council data breach,
Nat-West ex-employee has customer data under her bed,
Rhode Island Passenger Transport Authority data breach,
Pulse TV data breach,
South Korea declared adequate for GDPR,
Amazon granted deferment of GDPR penalty,
US State incident reporting changes in 2022,
India data rules to be updated in 2022,
Redline data appears on Have I Been Pwned
Coming up in this week's episode:
Kronos data breach,
Grindr fined after a data breach,
Gumtree data breach,
HMRC catalogue of data breaches,
Clearview AI GDPR penalty in France,
Sennheiser data breach,
New Zealand Teaching Council data breach,
Standard Bank delayed reporting data breach,
Chatanooga Chamber of Commerce data breach,
Is Log4j the cyber equivalent of Covid-19,
Blackbaud legal action update,
Desjardins settlement after data breach,
Experian predicts breach trends for 2022,
India sets 72-hour breach notification deadline,
Rwanda introduces GDPR equivalent,
Cookiebot transfers deemed illegal,
KVKK deadline approaches,
UK Government produces centralised resource for data storage guidance,
Childs Rights Impact Assessments,
IAB TCF found not fit for purpose,
Finnish DPA imposes record penalty
Coming up in this week's episode:
Spar data breach shuts some English stores,
Volvo data breach,
Cox Communications data breach,
South Australia Government data breach,
Fujitsu issues update after data breach,
Irish DPC seeks DPA endorsement of Instagram action under Article 60 of GDPR,
Our thoughts on EU AI consultation,
First outcomes from EU data consultation,
Consumer Groups given permission to take GDPR action,
Data Transfer 123
Coming up in this week's episode:
Ikea data breach,
Midlands Partnership NHS Trust Data Breach,
Cabinet Office fined £500,000 after New Year's honours data breach,
Surrey schools not sharing data because of fears over GDPR,
Irish HSE data breach update,
DDC data breach,
CEPEO data breach,
Huntington Hospital New York data breach,
Broward County School District Florida data breach,
Planned Parenthood data breach,
FBI charge man over Ubiquiti data breach,
Panasonic data breach,
ICO mandatory guidance to Adtech industry,
EU reveals details of AI Data Sharing Act,
EU considers GDPR enforcement changes,
SEC takes interest in organisation cybersecurity
Coming up in this week's episode:
GoDaddy data breach,
Vestas data breach,
Damira dental surgery apologises after a data breach,
Alleged corruption in DPC investigation of Facebook,
Whatsapp revises its EU privacy policy,
Ontario man charged after Covid19 data breach,
Government body to investigate Nadra data breach,
S and R data breach,
Swire Pacific Offshore data breach,
What makes a good implementation of GDPR?
DPC intervention increases the number of DPOs,
CCTV, the Good, the Bad and the Ugly,
GDPR certification schemes,
EDPB data transfer guidance,
UK Cyber Digital Devices bill enters Parliament
i4khbkxFTqh6khx2hnME
Coming up in this week's episode:
Sky takes 18 months to fix security flaw in data routers,
Stripchat data breach,
Department for Education data breach,
Dorset Council data breach.
Ex-police officer awarded damages after South Yorkshire Police data breach,
Drizzly Grove reach settlement after data breach,
High Court judge says low-value data breach claim is an abuse of the legal system,
Belgian Supreme Court rules that DPA can impose penalties even if complainant's data not processed,
Iranian hackers targetting critical sectors of UK and US economies,
FBI email server hacked to send fake cyber attack alerts,
Failed data breach at Lake County Election Board,
Credit Suisse to sanction Allen and Overy over data breach concerns,
Utah Medical Centre data breach,
Colonial Pipeline litigation following a data breach,
California Pizza Kitchen data breach,
GDPR in the Cayman Islands,
Reddoorz fined by Singapore DPC after data breach
Coming up in this week's episode:
Brittany Ferries data breach,
Google UK Supreme Court ruling,
Whatsapp given right to appeal,
Homeworking increases GDPR breaches,
Cronofy opens Netherlands office to comply with EU GDPR,
RobinHood data breach,
Premier Property Lawyers data breach halts conveyancing,
All party group calls for better protection for workers affected by AI,
Tech Etch data breach,
Durham TTS data breach,
CCPA extra-territorial scope,
Court rules against Kroger Co after a data breach,
City of Titusville, Florida data breach
Edmonton man arrested following a data breach,
Costco credit card data breach
Coming up in this week's episode:
Labour Party data breach,
Graff celebrity jewellers data breach,
South Yorkshire Housing Association data breach,
ICO allows destruction of North Norfolk care home documents,
Washington Central Unified Union School data breach,
Monterey County data breach,
Catholic District School Board of Eastern Ontario data breach,
Pakistan National Bank data breach,
Gill Whitehead appointed CEO of UK Digital Regulator Forum,
Facebook ceases bulk facial recognition,
IAB Europe expects breach of GDPR,
Clearview AI ordered to stop in Australia,
Wireless devices to have improved security,
Cyber Insurance vs Data Breach Insurance,
Lockbit,
Consequences of a long term data breach
Coming up in this week's episode:
Newry data breach lines streets with gold,
UK VOIP providers suffer after DDOS attacks,
Bradford lady reports NHS Test & Trace data breach,
Location data company warned over GDPR practices,
High Court costs awarded against data breach victim,
Norfolk and Norwich University Hospital data breach,
Experian South Africa data breach,
Dutch tax authority found to have breached GDPR,
IRCC leaks data regarding vulnerable Afghans,
University of Colorado Boulder data breach,
Google security advice,
Medical data breach affects New York hospital,
Centara Hotels and Resorts data breach,
Art Basel data breach,
Connecticut updates its Data Protection law.
Elizabeth Denham comments on current UK data consultation
Coming up in this week's episode:
HIV Scotland fined £10000 after data breach,
Centre for Computing History data breach,
Italian Celebrities details leaked,
Thailand Tourists data for last 10 years leaked,
Amazon appeals against record GDPR penalty,
Acer Taiwan data breach,
Delaware court rules in favour of Marriott Hotels after class action,
Sinclair Broadcast Group WZTV data breach,
University Medical Center of South Nevada data breach,
Dental data leaked in data breach across 10 US States,
Saudi Arabia introduces PDPL, their GDPR equivalent.
Update on EU Standard Contractual Clauses
Coming up in this week's episode:
Facebook penalty announced by Irish DPC,
Footballers demand reward for use of their personal data,
Microsoft thwarts largest ever DDOS attack,
Local Authority GDPR breach league table,
Amazon Ring breaks Data Protection Act 2018,
McDonalds data breach,
Acer data breach,
Imperial College data breach,
Thingiverse data breach,
Chesterfield Borough Council faces legal action after data breach,
Visible data breach,
Accenture data breach,
Pandemic caused data breaches across UK Business sector,
Belgian Covid-19 app data breach,
Lithuania journalists take action to stop GDPR hiding names of individuals involved in corruption,
BCS gives opinion on proposed UK GDPR changes,
Pirate Party opposes changes to Whois data,
Trademark Trial and Appeal board rules on GDPR in US court documents
Coming up in this week's episode:
Facebook, Whatsapp, and Instagram down for over 6 hours - was it a hack or a configuration error?
GDPR fines massively increase in Q3 2021,
Twitch data breach,
Brewdog App data breach,
Post Office Ltd repeats data breach,
Coinbase data breach sees bitcoin investors lose thousands of dollars,
Navistar data breach leads to court action,
Next Level Apparel data breach,
GDPR and POPIA - how do they work together?
Coming up in this week's episode:
Giant Umbrella data breach halts payments to contractors,
Stowmarket High School data breach,
Lincolnshire Police pay £10,000 after data breach,
Cookieyes Wordpress plugin important update,
Northern Ireland mental health facility data breach,
Malta Union of Teachers lodge complaint after data breach,
French Visa system data breach,
Senate Bill to set penalties for non-reporting of data breaches,
Nieman Marcus data breach,
Forward Air data breach,
Port of Houston data breach contained in just 90 minutes,
Two US Mental Health facilities hit by data breach,
Can an employee make a DSAR while awaiting an employment tribunal?
EU SCC - need to be updated after 27th September 2021,
Switzerland accepts EU SCC,
Can you use SCC as the basis for Data Processing Agreement?
GDPR Penalties league table
Coming up in this week's episode:-
Ministry of Defence data breaches endanger lives of Afghan civilians remaining in Afghanistan,
Stoke-on-Trent Council data breach reveals tenants details,
Manx Care served with GDPR enforcement notice,
CMA CGM shipping line data breach,
Alaska residents to receive free credit monitoring after State Government data breaches,
Illinois State authorities finally apologise for data breach,
Debt-IN data breach in South Africa,
ICO consultation on employment guidance,
German court reinforces legitimate damages GDPR claims,
Come and hear me speak at International Cyber Expo 2021
Coming up in this week's episode:
Fitbit, Strava and other fitness apps hit by data breach,
FTC updates data rules to include fitness apps,
Guernsey Data Regulator says human error most common cause of data breaches,
Pension Trustees advised re UK GDPR actions,
Estate Agents and the GDPR perils of 360 degree photography,
Irish Central Bank breaches Credit Union data,
New Zealand Reserve Bank censured by Data Commissioner John Edwards,
Suspect arrested after Experian South Africa data breach,
French Covid-19 Track and Trace data breach,
Anonymous breaches Epik web host data,
United Nations data breach continues to give problems,
The ongoing Standard Contractual Clauses saga,
Irish Civil Liberties deeply critical of Data Protection Commission
Coming up in this week's episode:
UK Government begins UK GDPR change consultation,
Elizabeth Denham asks G7 countries for help with cookie policies,
Animal Rights activists target gun owners after Guntrader data breach,
Syracuse University sued by student after a data breach,
Dotty's data breach,
MyRepublic data breach,
China passes PIPL into statute,
Turkish data penalties
Coming up in this week's episode:
Whatsapp fined 225 million Euros by Irish DPC,
Turkish data regulator fines Whatsapp for non-compliance,
Industry reaction to Oliver Dowden Telegraph interview,
Havant mother awarded £10000 after a school data breach,
Welsh Government has had 300 GDPR breaches since 2019,
Australian Insurers and Banks concerned over potential damages to data breach victims,
Mesa County Colorado electoral data leaked online,
Dallas Independent Schools data breach,
Bangkok Airways data breach,
Indonesian Government Covid-19 data breach
Coming up in this week's episode:
New UK ICO preferred candidate announced,
Oliver Dowden announces his wishlist for UK GDPR,
NHS data grab postponed indefinitely,
NHS worker receives compensation after data breach,
Northern Ireland historical abuse victims data breach compensation,
California State University data breach,
SAC Wireless data breach,
Singapore eye clinic data breach,
Microsoft Azure security breach revealed,
Microsoft Power Apps potential for data breach,
T-Mobile data breach update
Coming up in this week's episode:
German regulator says Zoom on demand is not GDPR compliant,
ICO says some Covid-19 Track and Trace apps gather too much data,
T-Mobile data breach,
AT&T denies data breach has happened,
JP Morgan Chase data breach,
ICO announces first GDPR certification programmes,
Pearson pay $1 million penalty to SEC,
Colonial data breach update,
Blackbaud data breach update,
Doorstep Dispensaries penalties reduced at tribunal hearing,
ICO starts UK SCC replacement consultation,
Gibraltar GDPR
Coming up in this week's episode:
Barclays, Bank of Scotland, RBS, all affected by credit card data breach,
Jack Wills and Reindeer data breach,
Deliveroo and Foodinho fined for use of automated profiling,
Chanel Korea data breach,
Waste Management Resources data breach,
Senior Advisor data breach,
Murata data breach,
Standard Contractual Clauses - what's changed between the old and new versions?
Coming up in this week's episode:
Isle of Wight schools ransomware attack,
UK High Court damages ruling in Dixons Carphone Warehouse case,
US Supreme Court sets the bar for damages cases,
Medical data breach in Republic of Ireland,
Limerick Council told it cannot have CCTV on taxi rank,
University of Kentucky data breach,
NHS Highland Covid-19 vaccination data breach,
Chaos Computer Club says it will stop working with CDU,
Connecticut introduces new data law to protect businesses after data breach,
German company fined for not updating checkout software
Coming up in this week's episode:
Amazon receives record GDPR penalty,
TikTok fined for only having English Privacy Policy,
Whatsapp fine due to be announced,
Clubhouse deny data breach,
Dr Jacqui Taylor interview,
GDPR Age Appropriate Design Code,
Hackney Council residents data breach,
Northern Ireland Covid-19 passport data breach,
German pharmacies halt Covid-19 passports after a breach,
Le Figaro fined for breach of cookie policy,
Maryland Uber drivers receive $100 each,
DPA's focus on more than data breaches,
Data Retention Policy Guidelines,
German Court issues ruling on DSAR fulfillment
Coming up in this week's episode
UK Government rejects request to scan Matt Hancock's private email,
Dutch Covid-19 app GDPR compliance,
Irish Covid-19 app GDPR compliance,
Tokyo 2020 Olympics data breach,
Oxford City Council data breach,
National Lottery Community Fund data breach,
Guntrader.uk data breach,
New Zealand Hospitals data breach,
ICO Health Sector Report shows increase in data breaches,
CBS Database Review prompts stronger access controls,
Belgian Government asked to decide on Biometrics data,
How important is a Data Retention Policy,
EDPB issues new guidance for Data Controllers, Data Processors and Joint Controllers
Coming up in this week's episode:
Implementing GDPR can now get you a Corporation Tax Rebate,
Matt Hancock CCTV data breach investigated by ICO,
Spreadshirt.net data breach,
North Norfolk care home data breach,
Anglesey secondary schools data breach,
GP Pensions details viewed by unauthorised staff members,
EDPB Facebook Whatsapp,
Mint Mobile data breach,
Canon legal action continues in New York court,
Guess data breach,
Forefront Dermatology data breach
Coming up in episode 152:
Kayesa ransomware attack,
Classic Football Shirts data breach,
British Airways reaches out of court settlement with data breach victims,
Covid-19 vaccinations and employee records,
Mermaids trans-gender charity data breach,
King of Spain health information data breach,
QSure data breach in South Africa,
Morgan Stanley data breach,
PC magazine chart of top 25 data breaches,
German regulator instructs German Government agencies to close down their Facebook pages,
Colorado introduces data privacy law,
Is the USA finally taking steps toward a Federal Data Law?
Deceased people and the application of GDPR
Coming up in episode 151:
UK GDPR adequacy,
Scottish Government and agencies almost 2000 data breaches since May 2018,
Trafford Council following Freedom of Information request,
LinkedIn says data was scraped and no data breach to report,
Mercedes Benz data breach in USA,
Lime VPN data breach,
Amsterdam court to hear GDPR action against Facebook in October,
Yearbook publisher Herff Jones reveals data breach
Coming up in episode 150:
Final decision awaited from EU on UK GDPR Adequacy,
Matt Hancock makes a statement on NHS data grab,
UK High Court clarifies responsibilities of EU Representatives,
German court rules employee emails not a reasonable component of employee data subject access request (DSAR),
Have you committed a data breach leaving personal data in a car?
Technisanct data breach,
Abu Dhabi new data law is a GDPR lookalike
Coming up in this week's episode:
Carnival Cruises,
UK Trade Department data leak exposes existence of Cabinet Office FOI Triage unit,
Gateley data breach,
CakeBox data breach,
Group of MPs suggest changes to UK GDPR,
South Korea seeking data adequacy agreement from EU,
CJEU asked to rule on GDPR immaterial damages,
CJEU rules parallel GDPR investigations can take place into same organisation by different DPCs,
NHS Scotland faces criticism over Data Loch project,
Elizabeth Denham, ICO, gives her views on live facial recognition,
IAB Tech Labs faces legal action over RTB,
CVS Health data breach
Coming up in this week's episode:
Fastly data outage,
Amazon could face biggest fine in GDPR history,
NHS data grab deadline extended to 1st September 2021,
EU issues new Standard Contractual Clauses,
Tunbridge Wells schools closed by data breach,
Belgian state faces action over GDPR non-compliance,
Liverpool Doctor loses patient medical data,
Biggest ever password data breach,
Mcdonalds data breaches.
FBI recovers part of Colonial pipeline ransom,
EA data breach,
Dutch court rules on immaterial damages,
China adds subject Post Mortem rights,
Appeal Court rules immigration guidelines in Data Protection Act 2018 are incompatible with GDPR
Coming up in this week's episode:
Conservative Party fined for GDPR offences,
Garda update on Irish Health Service data breach,
Tokyo Olympics affected by Fujitsu data breach,
Southchurch School, Essex data breach,
Colonial oil pipeline data breach update,
Air India data breach update,
High Court rules on EU GDPR Agent liabilities,
Scripps Health data breach,
AMT Games data breach,
Australia and New Zealand Business Survey,
US Senate to debate social media data protection,
German enforcement action,
NOYB starts Cookie War action,
EDPB Cloud Providers Code of Conduct
Coming up in this week's episode:
UK Police reveal data breach figures for last 4 years,
Dorset Police data breach involving child data,
Canada Post large data breach,
Klarna data breach caused by human error,
EU and UK GDPR agents - clarification on when you need one,
Irish Government departments data breach statistics,
GDPR celebrates its 3rd Birthday,
EU Parliament fires warning shot at Irish DPC,
Bose data breach,
Lessons to be learned from Equifax GDPR breaches,
Fujitsu data breach,
Five Dutch cities seek common mobility data standard
Coming up in this week's episode:
NHS prepares for largest data grab in the history of NHS England,
Postbox theft from GP surgery in Norwich,
Matt Hancock issues directive for organisations to share data to help fight Covid-19,
MyHome.ie data breach,
Air India data breach,
Microsoft offers users the option to keep data within the EU,
UK GDPR issues the first list of adequate countries,
First Court approval CCPA expected following Minted data breach
Coming up in this week's episode:
Cyberattack on US Fuel Pipeline,
Cyberattack on Irish Health Service,
Whatsapp privacy notice update,
Hamburg DPA orders Whatsapp not to share with Facebook,
Canadian company fined for not having EU Agent for GDPR,
Brent Council councillors have not had mandatory GDPR training,
Covid-19 Vaccination Passports proposed by EU,
So just what is your personal data worth?
Software produced in the US now needs a Software Bill of Materials,
Should Market Research companies be data processors or data controllers?
Coming up in this week's episode:
Amazon data breach exposes fake product reviews,
Disqus faces penalty for GDPR breaches,
Concerns around GDPR and website 3rd Party Plugins,
GDPR breach found in NHS Covid-19 vaccination booking website,
Guinness Raise the Bar initiative provides free Covid-19 tracking app,
Fines for emailing unencrypted Excel spreadsheets,
Google encouraging 2 factor authentication,
ICO launching consultation on UK Standard Contractual Clauses,
UK Home Office changes document retention rules,
Conflicting evidence on data breach risk from home working,
PayPal favourite payment processor in survey of e-commerce users,
Chorley Council data breach,
Brevard School Florida data breach,
Kazakhstan introduces Data Protection Law based on GDPR
Coming up in this week's episode:
Covid-19 Vaccination Certificates set for introduction this summer,
HMRC late filing penalty notices data breach,
Croydon MP accused of data breach in local election campaign,
Reverb data breach,
DigitalOcean data breach,
Click Studio data breach,
Sinn Fein GDPR breaches rumble on,
DPC under fire from Irish politicians for delays in GDPR enforcement action,
Enschede in Netherlands fined for GDPR breach,
TikTok faces legal action over lack of clarity in privacy policy,
Employee sees GDPR Article 15 action rejected due to lack of precision in their data subject access request,
Croatian DPA tells venues they can only scan passports for OCR purposes
Coming up in this week's episode:
Covid-19 employer data survey,
ICO provides details of penalties issued in 2020,
Extra-territorial scope of GDPR given further clarification,
Facebook internal memo sets out policy for future data breaches,
Sinn Fein questioned by DPC over use of Facebook data,
Dominos Pizza India data breach,
Parkmobile data breach,
Geiko data breach in California,
Eversource data breach,
Ontario Court agrees settlement from Bank of Montreal and CIBC following data breach,
An update on US State Data Protection laws
Coming up in this week's episode:
EU-UK Data Adequacy decision moves one step closer,
GDPR hindering sharing of Covid-19 research data,
Irish DPC issues statement re Facebook,
Estate Agents virtual property viewings - a data breach waiting to happen?
Uber dismissal algorithm challenged in court in Amsterdam and London,
Android and iOS issue guidance on player data collection,
Does Legal Obligation trump user rights under GDPR,
Artificial Intelligence policies developing in line with GDPR,
Manhunt data breach,
Spotless data breach in New Zealand
Coming up in this week's episode:
Update on Covid-19 Vaccine Passports,
EU/UK Data Adequacy Decision - is the EU dragging its heels on ratification?
Facebook data breach update,
LinkedIn data breach exposes details of 500 million members,
NHS Scotland freedom of information request shows the scale of data breaches,
US Universities affected by Acccellion data breach,
Handling Employee Data Subject Access Requests,
Dubai introduces new data law modelled on GDPR,
CCPA and GDPR anonymised data - are they the same thing?
Coming up in this week's episode:
Pubs annoyed at extra data collection requirements after Covid,
Vaccine Passports - are they the future for hospitality?
ICO rules DPIA essential if employers ask staff for mandatory Covid-19 tests,
Age Appropriate Design Code update,
Booking.com fined for not notifying DPA of data breach within required 72 hours,
Arup data breach,
Ubiquiti subject to allegations of data breach cover-up,
Mobikwik investigates suspected data breach,
Solicitor escapes ban after data breach
Coming up in this week's episode:
BA digital vaccination passports,
John Whittingdale MP enters EU-UK GDPR adequacy debate,
Fatface try to keep their data breach under wraps,
Shell data breach,
Israel elector data revealed in breach,
Ireland Dept for Children suffers data breach,
Transform Hospital Group face legal action after data breach,
Apple being investigated by CNIL,
DSAR impersonation yields results,
Data breach or not?
Credential stuffing and its role in data breaches,
Charities come under increased ICO focus,
GDPR in the 'New Normal' as office workers return to work
Coming up in this week's episode:
Birmingham City Council data breach exposes details of vulnerable children,
Stuttgart FC data breach,
Fastway Couriers data breach reveals details of over 400,000 customers,
Irish DPC criticised by EU for not enforcing GDPR,
UK hauliers must refresh their driver DVLA consent,
Singapore update their data protection laws,
China PIPL consultation,
Advice on user passwords
Coming up in this week's episode:
Covid-19 Vaccination Passports take another step forward,
UK hints at business-friendly changes to GDPR,
Microsoft Exchange security flaw exposed,
New Years Honours data breach,
Williams F1 2021 car launch interrupted by data breach,
Avon and Somerset Police pay £7000 in damages after data breach,
Amca negotiates damages settlement,
Adopted children in Ireland to be given the right to see full birth records,
German GDPR penalty overturned by court,
Should you notify a lost laptop to the ICO?
Courts challenge the Extra-Territorial scope of GDPR
Coming up in this week's episode:
NHS found to not be using hospitality QR Code data as part of Track and Trace,
European Medical Bodies issue agreement with UK/EU Data Adequacy,
Gosport shop worker subject to Covid19 test data breach,
Interview with Dawn Morton-Young, HR Consultant and founder of Employee Angels,
Sita data breach affects Star Alliance airlines,
Company fined for not diligently applying security updates,
State of Virginia introduces CDPA,
Non-Material Damages under review,
Cabinet Office opens recruitment process for new Information Commissioner to replace Elizabeth Denham
Coming up in this week's episode:
Vaccination Passports - good idea or pipedream?
YSoft produce Covid-19 solution to sharing printers,
Do teacher's need to give consent for home cchooling via Zoom?
UK Charities face double whammy from EU Donors,
Clubhouse data breach,
Nurserycam data breach,
Npower withdraw mobile app after data breach,
Bombardier data breach,
Indian Army data breach,
Is Article 49 the golden bullet for data transfers?
Coming up in this week's episode:
An exclusive interview with Dr Jacqui Taylor, in which we discuss Clubhouse GDPR compliance and data security, the US Privacy Shield and Schrems II and EU/UK data adequacy agreements,
EU Commission issues draft Data Adequacy Ruling for UK,
Aaron Banks and Leave.eu lose appeal against data breach penalty,
Scottish Borders data breach re free school meals,
Police Scotland called in by Lothian NHS following data breach
Coming up in this week's episode:
Could COMB be the largest data breach ever?
WordPress responsive menu plugin opens backdoor for data breaches,
Competition and Markets Authority sees an increase in data breaches,
Email breaches can be expensive,
UK PNC Home Office data breach update,
Experian denies data breach at Serasa, Brazil,
Calendar booking app fined for GDPR breaches,
GDPR Article 49 possible solution to Schrems II,
PSD2 and GDPR interaction,
University College Dublin fined 70,000 euros for GDPR breaches,
Irish DPC criticised for use of outdated Lotus Notes,
EU Privacy Directive steps forward towards Regulation
Coming up in this week's episode:
NHS Track and Trace data breach,
EGBA issue statement on EU / UK data transfer,
Briitish Airways data breach claimants are given 2 months to join the class action,
Foxtons Estate Agents data breach update,
Phone numbers from Facebook data breach used by fraudsters,
Stormshield data breach,
ICO Child-Friendly Code,
EDPB and EDPS,
When should a Data Breach be reported to ICO?
Irish Councillor plans to test limits of GDPR,
EscortReviews.com data breach
Coming up in this week's episode?
Homeworking GDPR - results of a ShredIT survey,
GDPR implications of monitoring employees who are working from home,
What GDPR training you should undertake while Covid-19 pandemic is prevalent,
Australians wanting to return from UK hit by data breach,
Which GDPR policies should you update first for UK GDPR?
Data Protection Worldwide,
Mensa data breach leads to board resignations,
Citrix data breach settlement,
Grindr fined 9.6M euros for GDPR breaches,
Cybernews email address checker,
Andrew Cuomo sets New York data priorities,
ICO gives guidance on SEC document requests,
GDPR vs Malaysian PDPA
Coming up in this week's episode:
Pimlico Plumbers, Covid19 vaccination and employer's rights,
Which countries does the EDPB consider adequate for GDPR?
Guernsey and UK GDPR adequacy,
GDPR penalties up 39% year on year,
ICO reopens adtech investigation,
Ireland Government and the Mother and Child homes,
Hackney postal electors are asked to register again,
East Devon District Council data breach,
UK Ministry of Defence sees an increase in data breaches,
Amey data breach,
When should you report a data breach to the ICO?
Caixabank fined 6 million euros,
Bonobos data breach,
Pixlr data breach,
A look at California's CPRA,
UK court sets precedent on GDPR territorial reach
Coming up in this week's episode:
GDPR compliance when working from home during Covid-19 lockdown,
GDPR changes continue after the end of Brexit transition,
Capital Business Media relocates to Ireland to avoid UK-EU data transfers,
Leave.EU moves to Ireland and faces calls for investigations into GDPR breaches,
Advocate General CJEU pronouncement in Facebook case may have widespread implications,
Soft Opt-in - when can it be used and what limitations,
United Nations data breach,
German laptop retailer fined for excessive staff and customer video surveillance,
Colorado Covid-19 data breach,
UK Police National Computer (PNC) data breach
Coming up in this week's episode:
Rhombus CCTV detection of face masks,
EDPB issues updated US data transfer guidance,
Estate Agents and Employment Agencies face data transfer woes,
Data Breach handling in the post-Brexit world,
Capitol insurrection and subsequent data breach,
Cybersecurity training,
BA data breach update,
Blackpool data breach,
Now Pensions data breach,
Ho Mobile data breach,
Communist Party of China data breach,
Dassault Aviation data breach,
Canon USA class action following data breach,
Eu Commission issues report on GDPR implementation,
Analysis of GDPR penalties issued in 2020
Coming up in this week's episode:
GDPR after completion of the EU/UK Brexit trade deal,
T-mobile data breach,
Kawasaki data breach,
Walmart facing legal action for data breach it denies ever happened,
Schrems II update with latest steps required to remain compliant,
Ledger data breach,
Data broker selling millions of data records,
Romwe data breach,
Ireland seeks to gain lion's share of financial services market
A special episode of the GDPR Weekly Show examining the effects on GDPR of the UK-EU trade deal announced in December 2020.
Coming up in this week's episode:
Should you keep details of employee's Covid-19 Vaccinations?
School Covid-19 tests and GDPR implications,
DHSC update on Covid-19 test result data handling,
Facebook moves UK user data to California,
Interview with Dr Jacqui Taylor, whose work has affected over 1/3 of the world's citizens,
Brexit and UK third country status,
Twitter penalty issued by Irish DPC,
Peoples Energy data breach,
Norwich and Norfolk University Hospital data breach,
Scottish Ambulance Service not supporting data breach victims,
Swedish University data breach,
Desjardins data breach inquiry completed,
Is Father Christmas GDPR compliant?
Coming up in Episode 122 of the GDPR Weekly Show:
Results of GDPR Awareness Survey of people now working from home,
EU Drugs Regulator data breach,
VST Enterprises released Covid19 digital passport,
EU data arrangements after 1st January revisited,
Channel Islands - how GDPR changes after 1st January,
UK Scientific Research community worried by UK potential 'third country' status,
Facebook announces GDPR changes to Messenger API,
HMRC gives details of 2019/20 data breaches,
East Devon District Council data breach exposes councillor passwords
Coming up in this week's episode:
Covid19 test and trace update,
Wearable covid-19 tracking device released in Ireland,
countme.ie app released,
Pension Funds regulator urges Brexit action,
Brexit transition period ends in 4 weeks,
Kent and Medway Integrated Health and Social Care record,
Sheffield City Council says human error most common cause of data breach,
Armagh City, Banbridge and Craigavon data breach,
Twitter penalty due on 17th December,
Loch Rannoch data breach,
Flagship housing provider data breach,
West Mercia Police staff gross misconduct finding after data breach,
Absa data breach in South Africa,
Netherlands cycling organisation Knwu data breach,
Embraer data breach,
Canon data breach in Bangalore affecting employee data,
Vancouver Metro Translink hit by a ransomware attack
Coming up in this week's episode:
Update your Employee Privacy Policy to account for Covid19,
Retail and Leisure venue considerations as England Lockdown ends,
Update on Manchester United data breach,
Spotify changes passwords after data breach,
Sophos data breach,
Carrefour fined for multiple GDPR breaches,
NHS Highland data breach,
Bristol City Council data breach exposes details of Special Needs children,
Hampshire Hospitals NHS Trust has second data breach at Winchester hospital,
Headlam Group data breach,
New Zealand users hit by Australian Nitro PDF data breach,
Vodafone fined for multiple GDPR breaches,
FCA and ICO remind businesses that they work together
Coming up in this special Brexit episode:
What is changing?
When is it changing?
Deal or no deal?
Key questions you need to ask
Is it really going to be enforced?
So what do I need to do?
Can I do it myself?
How can Ensurety (producers of the GDPR Weekly Show) help?
Coming up in this week's episode:
Covid19 update on GDPR requirements for Track and Trace,
Sheffield City Council hides behind GDPR re school Covid19 numbers,
Delaware Public Health data breach of Covid19 records,
Manchester United data breach,
Animal Jam massive data breach,
Glofox data breach,
Canadian Privacy Protection Act starts its path through the Canadian Parliament,
Employee consent can be voluntary in some circumstances,
Spanish DPA reaches agreement on Internet advertising,
Belgian DPA accused of falling foul of GDPR rules
Coming up in this week's episode:
Guidance issued re Occupational Health data,
Covid 19 App data retention rules,
Public Health Wales accept GDPR report recommendations,
Ticketmaster face £1.25m penalty for GDPR breach,
1 and 1 win appeal against GDPR penalty,
Twitter data breach investigation nears conclusion,
Guernsey legal firm fined after data breach,
Sandicliffe data breach in Nottinghamshire,
123RF suffers data breach,
Australian holidaymakers suffer data breach,
Mashable data breach,
3 Maltese citizens take court action following data breach,
EDPB issues guidance on data transfers,
Instagram anti self-harm campaign awaits GDPR approval
Coming up in this week's episode:
NHS Covid19 Proximity App - should you enforce its use in your workplace?
USB Keys and their safe disposal,
ICO RTB enquiry ends abruptly but faces legal action,
Oracle and Salesforce action could result in £150 to every UK Internet user,
Irish Prisons biometric access not complliant,
UK Cabinet Office data breach,
BA Marriott lessons learned on ICO penalties,
Folksam data breach,
Growdiaries data breach,
South Africa POPIA compared with GDPR,
India data protection act takes shape,
Slovenia last EU country to implement GDPR
Coming up in this week's episode:
Marriot Hotels and ICO agree £18.2 million penalty for data breach,
Experian served with GDPR Enforcement Notice by ICO,
Uber face class action in Amsterdam Court over 'robo-profiling',
Scottish Ambulance Service suffer data breach,
Gothenberg security company have data breach,
Finnish psychotherapy unit data breach,
Australia looks to review its privacy laws to satisfy GDPR adequacy test,
Lawyers engaged by Google suffer data breach,
Are Class Actions the new norm for GDPR compensation claims?
Coming up in this week's episode:
Details released of data requirements for Covid-19 testing providers,
Remote employee monitoring - a note of caution,
Foxtons Estate Agents data breach,
Stormont data breach,
Legal battle in Irish Republic, does Mother and Baby Homes investigation have right to override GDPR,
DPC investigates Facebook & Instagram handling of children' data,
Pfizer data breach,
Scalable data breach in City of London,
FCA taken to complaints commission over data breach,
New Zealand introduces data breach reporting tool,
Japanese Covid19 vaccine producer targeted by ransomware
Coming up in this week's episode:
Update on NHS Track and Trace QR Codes and data collection and retention,
Wick man unhappy with response of NHS Highland to Covid-19 FOI request,
British Airways penalty reduced to £20 million,
Belgian DPA rules IAB code of practice inadequate,
Your Lawyers initiate class action against Virgin Media,
Carnival Cruises data breach update,
Twitter data breach update,
Hackney council data breach,
Flintshire council data breach,
C-Planet data breach comes to court in Malta,
CWU appoints Kellner Lekner,
Non-material damages judgement in German court following data breach,
ICO consulting on GDPR penalty calculation,
GDPR for freelancers,
Results of Exonar survey of reasons for GDPR penalties
Coming up in this week's episode:
Covid-19 Temperature Checks and GDPR,
Tesco finds difficulty informing staff of positive Covid-19 test,
Home Working DPIA - what you should consider,
Department for Education receives a damning audit report from ICO,
Crown Prosecution Service reports over 1500 data breaches in 12 months,
Docsketch data breach,
Ardonagh group which includes Swinton and Towergate has data breach,
Limerick Hospital suffers a data breach,
Morgan Stanley fined $60m after a data breach,
What are you, the data controller, data processor, or joint data controller?
A reminder that you cannot fire DPO without a valid reason
Coming up in this week's episode:
Blackbaud admits data breach may have contained customers financial details,
H&M fined for holding too much data on their employees,
Greater Manchester Police data breach,
Kylie Jenner online store suffers data breach,
Basingstoke and Deane Council declare data breach,
Belgian DPA goes to CJEU for permission to pursue Facebook,
Brazil begins enforcement of LGPD, its equivalent to GDPR,
Charity Commission and ICO agree to work closely together on investigations,
Russian hacker jailed for LinkedIn data breach affecting UK civil servants
Coming up in this week's episode:
Covid19 guidance for shops and hospitality venues,
GDPR Phishing Scam,
AirBnB suffer new data breach,
Shopify data breach update,
Stone Refurb data breach leads to credit card fraud,
School data breaches involving physical documents,
Babylon Health data breach update,
Universities face class action after Blackbaud data breach,
Guidance on Data Subject Access Requests,
Irish Cookie Law has websites rushing to comply by 6th October,
Penalty comparison of GDPR regimes across Europe,
Irish Car and Driver database changes after potential data breach,
GDPR and its interaction with PSD2,
Dominic Cummings disrupts EU/UK talks on data transfers after 1st January 2021,
DPC under pressure for delays in contextual advertising real time bidding investigation
Kingsley Hayes joins Keller Lenkner,
Activision dispute whether they have had a data breach
Coming up in this week's episode:
Covid19 data gathering now law for bars, pubs, restaurants and other leisure venues,
Public Health Wales suffers Covid-19 data breach,
Employer guidance on carrying out employee Covid-19 checks,
Working from home - some thoughts on best practice,
Northern Ireland Historic Abuse inquiry data breach update,
Warner Music face class action after data breach,
Marriott Hotels face High Court class action after data breach,
Dunkin Donuts reach lawsuit settlement after data breach,
PMI data breach,
SNP data breach by one of its own councillors,
Staples data breach,
Polish University fined $13000 after data breach,
Email data breaches and how to avoid them
Coming up in this week's episode:
Test and Trace data collection by hospitality and leisure establishments becomes mandatory,
Virtual Mailroom data breach affects businesses and local authorities,
ICO reports 34% increase in reports by Whistleblowers,
Northern Ireland Historical Abuse Inquiry data breach,
Northumberland County Council data breach causes controversy,
Razer major customer data breach,
Private Hire drivers pursue Ola for release of data,
Wheely ask ICO for advice on release of customer data,
Artech suffer major employee data breach,
Change of management at Hayes Connor,
Blackberry open new EU data centres,
Government DPOs say major increase in subject access requests,
Physical Security of your servers,
EDPB issues new Data Controller and Data Processor guidance,
Japan brings its data protection law in line with GDPR,
Brexit and the use of EU and UK GDPR representatives
Coming up in this week's episode:
Warner Music data breach exposes customers' payment card details,
New South Wales drivers licence details in data breach,
Finland Kela apologises for paper data breach,
Barrister uses GDPR to extract job interview comments,
Telmate data breach exposes prisoner data,
Uber data breach cover-up update,
Morgan Stanley faces class action after data breach,
Basingstoke Hospital data breach update,
GDPR and UFCMJRA could put spanner in works of standard contractual clauses,
Malta elector data leaked in data breach,
CNIL confirms TikTok investigation,
Claires Accessories faces class action
Coming up in this week's episode of the GDPR Weekly Show:
ICO responds to letter from cross-party group of MPs,
Sam Smiths brewery not taking part in track and trace as it claims it breaches GDPR,
Covid19 vaccine studies being hampered by GDPR,
Blackbaud faces class action over data breach,
Watford Community Housing faces legal action from tenants after data breach,
Tiktok, Instagram, Youtube accounts affected by massive data breach,
Brexit and its implications for GDPR,
5 useful GDPR Wordpress plugins,
Employee rights under GDPR,
Mobile apps and their GDPR compliance,
Iot.Nxt achieves ISO and GDPR compliance
Coming up in this week's episode of the GDPR Weekly Show:-
Freepik data breach,
Carnival Cruises data breach,
Ritz Hotel London data breach,
Marriott Hotels face class action after data breach,
University of Brighton data breach,
Experian South Africa data breach,
DPC provides update on Twitter investigation,
TikTok faces GDPR compliance investigation,
HMRC Covid19 phishing attempts top 10,000,
When is what you tell your GP not subject to GDPR,
Former Uber security chief charged with data breach cover up,
MPs write to Elizabeth Denham over Government's handling of Covid19 related data
Coming up in this week's episode of the GDPR Weekly Show:
Salesforce and Oracle to be sued over their involvement in contextual advertising tracking,
South Wales Police facial recognition ruled unlawful by UK Court of Appeal,
Ofqual investigated by ICO over algorithm used for calculation of Covid-19 affected exam grades,
Elizabeth Denham in Canada during Covid19 raises concerns about UK ICO effectiveness,
More-ish launches new Covid19 tracking app,
OTC driver conduct hearing publicity puts it in conflict with GDPR,
IBM Annual Cost of Data Breach Report,
Instagram retaining data after deletion by user leaving it in breach of GDPR,
Bletchley Park Trust affected by Blackbaud data breach,
Walgreens Pharmacy data breach after stores hit by looting,
2020 - a bad year for everyone but especially for Canon,
Effect on transfer of genetic data following Schrems II ruling
Coming up in this week's episode of the GDPR Weekly Show:
Covid19 GDPR Compliance Survey from the hospitality industry,
ICO issues Exam script exemption update,
British Dental Association data breach,
Hope House Childrens Hospice part of Blackbaud data breach,
Basingstoke Hospital data breach,
Marriot Hotels data breach update,
British Airways data breach penalty update,
Havenly data breach,
University of Sydney, the University of New South Wales, the University of Melbourne, the University of Queensland, the University of Tasmania, James Cook University, Swinburne University of Technology, the University of Western Australia, Curtin University, and Adelaide University affected by data breach,
Police Digital Consent withdrawal welcomed by ICO,
ICO Freedom of Information Toolkit,
Update on EU/US Privacy Shield and Standard Contractual Clauses,
ICO issues explanatory notes on ICO Age Appropriate Design Code 2020
Coming up in this week's episode:
Blackbaud data breach update,
Twitter data breach update,
EU Doctors call for tests to ensure GDPR contact tracing apps are compatible,
GDPR Compliant Covid 19 tests,
Eat out to Help Out raises GDPR issues,
Over 50% of Universities had data breach in last 12 months,
Flintshire Local Development Plan suffers data breach,
Shropshire council suffers data breach,
Dave, the challenger bank, suffers data breach,
Morgan Stanley suffers data breach from discarded IT equipment,
ICO publishes results of its internal audit,
Italian DPA fines telecoms operator for unsolicited marketing,
Belgian DPA fines Google for not complying with GDPR right to be forgotten,
Irish websites must comply with cookie policy by October,
Spanish AEPD gets tough on appointments of DPOs
Coming up in this week's episode of the GDPR Weekly Show:
UK Track and Trace system reported to ICO over GDPR breach,
Update on Irish Covid-19 Contact Tracking app,
Teenage hacker infiltrates Western Australia Coronavirus database,
RBS data breach reported by ex-employee,
Blackbaud data breach targets UK, US and Canadian universities,
EDPB BCRs guidance note for UK post-Brexit,
Garmin ransomware attack,
Free VPN data breach,
Instacart data breach,
Couchsurfing data breach,
Never-Consent browser add-on review
Coming up in episode 100 of the GDPR Weekly Show:
EU-US privacy shield struck down by CJEU in SchremsII Case,
School guidance following Covid-19,
Twitter data breach,
South East Coast Ambulance data breach,
PCIPAL survey results,
MGM data breach exposes more victims,
Singapore data protection law update,
2nd IT contractor arrested over Landmark White data breach,
New Zealand data breach investigated by police,
Live Auctioneers data breach
Walmart sued under CCPA,
Germans hand too much data to Police.
Coming up in this week's edition of the GDPR Weekly Show:
Covid19 tracking apps international comparison,
Racial discrimination causing data breaches in Irish meat packing plants,
AI cameras and their use in the fight against Covid19,
NHS Orkney data breach,
Equifax data breach update,
Whitehall data breaches reported in 2019/20,
Clearview AI investigation by ICO and Australian regulators,
Privacy group takes High Court action against Irish Data Protection Commission,
Dutch DPA record fine for non-compliance with Data Subject Access Request,
Morgan Stanley offer compensation after data breach,
CCPA could become CPRA by 2023,
German authorities seize server after Houston data breach
Coming up in this week's episode of the GDPR Weekly Show:
Covid19 update on GDPR implications for hospitality venues,
Review of GDPR compliant tracing apps to capture NHS Track and Trace data,
Matt Hancock faces legal action over no DPIA for Track and Trace,
Ransomware which reports you for GDPR breach,
Facebook data breach,
ONS identifies UK cyber crime hotspots,
NHS Orkney data breaches,
CCPA enforcement stage,
California healthcare data breach,
Garante fines Unicredit following data breach,
EU sets out global ambitions for GDPR,
A look at Australia's new CDR rules
Coming up in this week's episode of the GDPR Weekly Show:
PHE reduces data retention time for data collected through NHS Covid-19 track and trace programme,
GDPR and pubs reopening following Covid-19,
Employee temperature checks and GDPR implications,
Exam script exemption remains after Covid-19,
Billon Group Covid19 Certification System wins grant award,
Capital One loses appeal after data breach,
Apple introduces new privacy option,
New Zealand data act updated in line with GDPR
Isle of Man fine for data subject access request failures,
Twitter suffers another data breach,
Staff leave South Gloucestershire council after data breaches,
Why your DPO must be able to think independently.
Coming up in this week's episode of the GDPR Weekly Show:
UK drops NHS Covid19 tracking app,
Coronavirus mass surveillance could continue in future,
Babylon medical confirm GP data breach,
Google loses GDPR penalty appeal,
EDPB issues UK GDPR post-Brexit adequacy warning,
Hungarian ICO issues GDPR penalty for website vulnerability,
ICO issues AI Guidance,
Just Eat data breach,
Wiggle data breach,
Foodora data breach,
Sheffield ANPR data breach update,
Quebec new data law based on GDPR,
European Broadcast Union GDPR 2 year review,
Web scraped emails ruled as GDPR personal data
Coming up in this week's episode of the GDPR Weekly Show:
Sheltered employees returning to work and the GDPR implications,
GDPR implications of redundancy,
Belgian DPA rules Covid19 temperature readings unlawful,
Matt Hancock's GP suffers data breach,
Dr Poulter MP has a data breach,
A1 Telekom Austrian ISP data breach,
Austrian GDPR penalty annulled,
Honda suffer a further data breach,
Nintendo data breach update,
Community Care patients launch class action against accountancy firm after data breach,
Legal lessons from Capital One data breach,
Macy's and Bloomingdale's settle data breach class action out of court.
Coming up in this week's episode of the GDPR Weekly Show:
EDPB issues new guidance on GDPR overrides in response to Covid-19 pandemic,
GDPR issues on returning to work after the Covid-19 pandemic,
Serco data breach update,
Hairdressers and beauty salons new way of working and staying GDPR compliant after Covid-19,
Open Banking after Covid-19 and GDPR,
Equifax settlement reached after legal action,
Joomla data breach,
Amtrak data breach,
You have changed your password, haven't you?
San Francisco Corporation Pension Fund data breach,
Chartered Professional Accountants of Canada data breach
Coming up in this week's episode of the GDPR Weekly Show:-
Covid19 Track and Trace Privacy Notice shows Public Health England will retain data longer than expected,
Two UK companies release Covid19 Digital Health Passport,
Welcome to the new normal after Covid 19,
NI Historic Sex Abuse Inquiry Data Breach,
EU Parliament confirms Data Breach,
Easyjet data breach update,
Minted confirms data breach,
Mathway confirm data breach,
Judge rules Capital One must release forensic report into data breach,
Vermont updates its data breach notification law,
Mercedes Benz learns a lesson from data leak
Coming up in this week's episode of the GDPR Weekly Show:
Easyjet data breach affects 9 million customers,
GDPR not secure enough for Covid19 tracking says Joint Committee on Human Rights,
Serco data breach affecting Covid-19 trackers,
Workforce data breach affecting Covid-19 trackers,
HSE data breach affecting Covid-19 app,
EU Parliament alleged data breach,
190 law firms affected by a data breach,
DPC announces action against Whatsapp and Tusla,
ShinyHunters go on data breach hacking spree,
Grandmother fined under GDPR for posting photos of Grandchildren on FaceBook without their mother's permission
Coming up in this week's episode of the GDPR Weekly Show:
Covid19 data scams, phishing attacks and data breaches,
Covid19 tracking app update,
1 in 10 remote workers believe they are not GDPR compliant,
EU Commission investigates Hungarian action as a result of Covid19,
Spending on compliance using up 40% of IT Security budgets and 43% of organisations have either reported data breaches or been reported to ICO for data breaches,
Top 4 GDPR violations discovered by ICO and other DPAs,
Massive data dump found on Internet, but no one knows who put it there or why,
Interserve and BAM Construct suffer data breaches,
GDPR breach alleged to Austrian Data Protection Authority over Android's use of the Android Advertising ID
Coming up in this week's extended edition of the GDPR Weekly Show:
Guidelines on collecting Covid19 employee data as employees return to work after lockdown,
Hungarian Government overrules GDPR while state of emergency in place,
House of Commons committee finds NHS Covid19 Tracking App not suitable for widespread use,
Interview with Hayes Connor, solicitors who specialise in data breach claims,
SAP data handling not compliant with statutory requirements,
GoDaddy data breach finally admitted after 9 month delay,
Tesla cars data breach when customer data not removed from replaced components
Coming up in this week's bumper episode of the GDPR Weekly Show:
An update on the NHS Covid19 tracking app,
EU standards clarification for Covid 19 tracking apps,
Google strengthens Gmail Covid19 phishing blocking,
City of York data breach of Covid 19 grant applicants,
House of Lords data breach takes broadcast off air,
ICO headcount concerns over volume of data breach notifications,
Nintendo data breach update,
gdpr.eu data breach of .git details,
Sheffield City data breach from ANPR cameras,
Warwick University data breaches not notified to students or staff,
Great Yarmouth Borough Council data breach as a result of data subject access request,
Cork City Council data breach,
Quibi sharing email addresses without user consent,
Us pharma giant Execupharm victim of sophisticated ransomware attack
Coming up in this week's episode of the GDPR Weekly Show:
ICO gives its opinion on Google/Apple Covid19 tracking app,
Covid19 data handling update from European Data Commissioner,
Covid19 and EU data transfer adequacy arrangements,
Robert Dyas suffers significant customer financial data breach,
Nintendo data breach affects Nintendo Network ID,
Kinomap fitness app suffers data breach,
States of Guernsey small business support scheme data breach,
Ironman causes potential Strava data breach
Coming up in this week's episode of the GDPR Weekly Show:
ICO issues further CoronaVirus Covid-19 update,
Home working data breaches - do you have procedures in place?
Check that your business insurance covers home working,
GDPR delays grocery deliveries to UK citizens safeguarding against Covid-19,
EU Commission firms up regulations for Covid-19 apps,
Virgin Media data breach class action announced by Your Lawyers,
Vodafone data breach after employee used customer support details to set up Snapchat profile,
San Francisco Airport data breach affecting two airport websites
Coming up in this week's episode of the GDPR Weekly Show:
ICO grants BA and Marriott penalties deferment as a result of Covid-19,
ICO allows GP practices to share Covid-19 patient data with UK Biobank,
EU Commission requests common standards for Covid-19 proximity app,
Hammersmith Medicines Research suffer data breach,
Survey of GDPR penalties across Europe,
Cabinet Office publishes review into New Year's Honours List data breach,
SOS Online Backup data breach affects users worldwide,
Travelex pay $2.3 million ransom after data breach
Coming up in this week's episode of the GDPR Weekly Show:
Covid-19 leads to recommended changes to company visitors books,
Latest GDPR/Covid-19 CoronaVirus advice from UK ICO and Irish DPC,
UK Government developing Covid-19 contract tracking mobile device app,
Ocasta launch free GDPR compliant iOS document scanning app,
Morrisons win Supreme Court GDPR appeal case,
Marriott Hotels suffer 2nd major data breach,
Maltese data breach affects over 300,000 Maltese subjects
Coming up in this week's episode of the GDPR Weekly Show:
Local CoronaVirus support groups and GDPR considerations,
Government surveillance tracking of CoronaVirus sufferers via their mobile phones,
Your data and Corona Virus - what can your employer ask you,
Home Working best practice and avoiding phishing attacks,
Zoom video conferencing security concerns,
Virgin Media data breach update and launch of legal class action,
Watford Community Housing data breach,
BBC data breaches revealed by Daily Telegraph,
Irish Teaching Council data breach
Coming up in this week's episode of the GDPR Weekly Show:
Corona Virus GDPR related questions,
Can the UK Government issue CoronaVirus messages to personal devices without consent?
Updated Corona Virus guidance from the UK ICO,
GDPR concerns when emailing your customers re how Corona Virus is affecting your business,
GDPR patient privacy when employees self-isolate for Corona Virus Covid-19,
Concerns re UK Government mobile telephone tracking for Corona Virus patients,
Norwegian Cruise Lines Data Breach
With the Corona Virus firmly in our thoughts this week, we have:
Corona Virus, GDPR, and home working - what do you need in place?
GDPR Special data and how GDPR article 9.2.1 comes into play,
GDPR Employer Corona Virus FAQ,
Is your data breach policy strong enough for remote working?
Google appeals fine from Swedish ICO,
Princess Cruises reveal employee and customer data breach,
CNIL investigates Criteo over implied consent,
Legal update re Morrisons, British Airways and Google
Coming up in this week's episode of the GDPR Weekly Show:
Virgin Media suffer huge data breach,
Boots Advantage cards and Tesco Clubcards both affected by data breach,
Cathay Pacific receive fine for pre-GDPR data breach,
Portsmouth City Council data breach,
Greater Anglia, C3UK and Network rail suffer WiFi data breach,
Loqbox credit score builder suffers data breach,
Polish school fined for using biometric data,
University of Hertfordshire update on earlier data breach
Coming up in this week's episode of the GDPR Weekly Show:
A breakdown of the top 10 Data Breaches by country,
Home Office EU Settlement Programme has over 20 data breaches per month,
Decathlon data breach exposes millions of records of Spanish, French and UK customers,
Transavia data breach of details of 80,000 passengers,
UK FCA suffers an embarrassing data breach,
Desjardins counts the true cost of a data breach,
CBI urges employers to start gathering ethnicity pay gap data,
UK ICO issues consultation paper on GDPR and AI
Coming up in this week's episode of the GDPR Weekly Show:
MGM Hotels and Resorts data breach,
Four Hampshire Councils have to make website changes after BBC investigation,
GDPR Consumer survey - what is public knowledge of GDPR?
Google moving UK Customer data to USA, what are the GDPR consequences?
EU commissioner says facial recognition breaches GDPR,
Software development and GDPR,
Doorstep Dispenseree lessons learned,
Wordpress GDPR plugin has security flaw
Coming up in this week's episode of the GDPR Weekly Show:
RideLondon data breach around ballot entrants for ride places,
DFE reveal whistleblower names in data breach,
US authorities charge Chinese nationals over Equifax data breach,
Estee Lauder suffer massive data breach but no payment information breached,
How independent does your DPO need to be?
Good passwords and preventing credential stuffing,
Facebook Cupid's Arrow is blunted by the Irish DPC,
GDPR and HR - how they should work well together
Coming up in this week's episode of the GDPR Weekly Show:
Labour Party reports Sir Keir Starmer's leadership campaign team to ICO for alleged data breach,
JustPark under investigation by Infrastructure Minister, Nichola Mallon MP following their data breach,
Yachting Industry data breach reveals details of 17000 yachting professionals from more than 50 countries,
Tinder faces GDPR investigation after complaints from across EU,
German ICO accuses Irish DPC of being under-resourced and dragging their feet,
2020 GDPR Enforcement Landscape - where are DPCs focusing their efforts?
When is Medical Research a legal basis under GDPR?
Coming up in this week's episode of the GDPR Weekly Show:
University of East Anglia pays students £140k compensation after a data breach,
Fife Housing Group data breach reveals tenant details,
Gaelic Athletic Association stops Whatsapp use by individual clubs and urges them to use the official app instead,
Increased costs of data subject access requests for most UK businesses,
ICO urges the digital advertising industry to take ownership of data issues from RTB and programmatic advertising,
Are Standard Contractual Clauses still the best option for data transfer outside of the EU after Brexit?
Thailand introduces DPDA as its equivalent to GDPR,
48% of UK top 150 legal firms have had data breaches in the last 18 months.
Coming up in this week's GDPR Weekly Show:
Microsoft data breach could have exposed 250 million data records,
Data breach firm granted access to child data by the Department for Education,
ICO introduces age-appropriate design code,
Google CEO gives data privacy assurance at the Davos summit,
Regus data breach exposes employee details via Trello,
Twitter prohibits Grindr adverts following GDPR breaches,
New mobile privacy app Mine helps users protect their personal data,
Met Police body-worn cameras present GDPR unintended consequences
Coming up in this week's episode of the GDPR Weekly Show:
An update on the data/security breach at Travelex,
BA and Marriott Hotels continue their negotiations with ICO over size of their GDPR data breach penalty,
Herefordshire School suffers Data Breach,
ICO accused of dragging their feet over IAB and Google Programattic advertising practices,
Peekaboo Moments Data Breach,
Dove Data Breach lands Unilever in a sticky patch,
Greek Banks reissue thousands of debit and credit cards after Data Breach on travel portal
Coming up in this week's episode of the GDPR Weekly Show:
Travelex Update - latest news on the ongoing malware attack/data breach,
Zynga Data Breach affects mobile game producer,
Dixons Carphone fined £500,000 for Data Breach,
India's PDPA takes its next steps towards implementation,
We've got GDPR; We are getting Brexit, so what happens next? - say Hello to UKGDPR.
End of life equipment can lead to unexpected Data Breaches,
PSC Card Irish legal battle concerning Data Security continues
Coming up in this week's episode of the GDPR Weekly Show:
Investigation follows New Year's Honours List Data Breach,
CCPA plus new Data Protection Regulations in Oregon, Illinois and Texas,
East Flanders Police Academy Data Breach in Belgium,
ECJ Ruling Awaited on EU/US Privacy Shield and common contractual clauses for data transfers,
GDPR Logjams in Ireland and Luxembourg cause frustration,
Luxembourg unveils GDPR Penalties,
Why use an external DPO? What are the benefits?
Coming up in our Christmas edition of the GDPR Weekly Show:
Pharmacist Doorstep Dispensaree fined £275,000 for medical records data breach,
Brechin High School Data Breach reveals pupils with medical conditions,
Nest Breach in Data Security - they argue it's the users' responsibility,
Charity Sector data breach reports to ICO reduced compared to last year,
Sweaty Betty Data Breach in their e-commerce system,
GDPR and Real Estate - what you need to know,
Possible audio data breach at the Bank of England
We hope you all have a happy Christmas and send you best wishes for the New Year. Next episode will be on 5th January 2000
Coming up in this week's episode of the GDPR Weekly Show:-
1&1 Fine for Data Security Failure at Call Centre,
Facebook Breach of Employee DATA,
What Becomes of the EU-US Privacy Shield after Brexit,
Third Party Notification of Data Breaches - How Would You Respond?
France Considers Criminal Offences for some GDPR Failures,
German ICO Suggests Changes to GDPR,
GDPR and Corporate Christmas Cards
Coming up in this week's episode of the GDPR Weekly Show:
A Data Breach involving postal votes in South East Dorset,
British American Tobacco Data Breach involving residents of Romania,
A look at how GDPR applies in cases of International Arbitration,
The results of a survey into responses to Data Subject Access Requests,
Brazil introduces new Data Security legislation and is so near and yet so far in terms of GDPR compliance,
GDPR implications around Employee Monitoring,
An update on EU Privacy Directive progress
Coming up in this week's episode of the GDPR Weekly Show:
Adobe Magento Marketplace suffers data breach,
New EU President pledges GDPR Style legislation to regulate use of Artificial Intelligence,
Polish ICO imposes 47,000 Euro Penalty for Data Consent violation,
Some guidance on Data Retention for Estate Agents/Realtors,
Twitter to pause deletion of inactive accounts,
Some guidance on GDPR for organisations outside of the EU,
GDPR responsibilities of Pension Fund Trustees,
GDPR and Christmas cards
Coming up in this weeks episode of the GDPR Weekly Show:
FACEBOOK claims that users accepting its terms and conditions since 25th May 2018 have knowingly consented to accept targetted advertising,
WhatsApp GDPR Penalty decision by the Irish ICO delayed until early 2020,
Cayman National Bank suffers Data Breach in its Isle of Man operations,
ICO warns the Programmatic Ad industry that its patience is running out with regard to GDPR compliance,
Brexit Party investigated by ICO for not complying with Data Subject Access Requests within the required timescale,
Austrian Whitelist gives examples of where a data privacy impact assessment (DPIA) will not normally be required,
Wizards of the Coast suffers large Data Breach
Coming up in this week's episode of the GDPR Weekly Show:
Labour Party suffers two Data Breach attempts in two days,
Scottish Widows Data Breach when pension information sent to wrong person,
Manchester Mum denied access to CCTV by Greater Manchester Passenger Transport as it claims it cannot release CCTV under GDPR,
Kenya introduces Data Protection legislations based upon GDPR,
Austria brings its DPA into line with GDPR,
Bradford Councillors unhappy with GDPR as they claim it is hindering them in doing their job,
GDPR and Company Christmas Cards
Coming up in this week's episode of the GDPR Weekly Show:
GDPR General Election advice for candidates and campaigners,
Morrisons appeal against Data Breach damages reaches the Supreme Court,
Trend Micro Data Breach after unauthorised sale of data by employee,
University of Hertfordshire Data Breach leaks student names and email addresses,
Facebook Data Breach affecting Facebook Groups,
First German GDPR fine imposed under new penalty calculation regime,
GDPR endangers the future of Pubwatch in some areas of UK
Coming up in this week's episode of the GDPR Weekly Show:
General Election Update - what it means for Brexit and GDPR,
BBC suffers Data Breach at an employment tribunal,
West Berkshire District Council suffers Data Breach by using cc for an email to over 1000 recipients,
Unicredit Data Breach affecting many customers of the Italian finance provider,
Austrian Post Office receives GDPR Violation Fine for selling data without consent,
Domain Name Registrar Web.com, Register.com, and Network Solutions suffers Data Breach,
Adobe CC suffers a potentially huge Data Breach,
Jesdardins Data Breach affects all of their clients,
Facebook drops appeal and agrees to pay £500k fine to ICO for Cambridge Analytica scandal
Coming up in this week's episode of the GDPR Weekly Show:
Home Group Housing Association Data Breach potentially affecting 4000 of their tenants and prospective tenants,
Whistl launches GDPR compliant PAM Solution,
German Court rules on claims for GDPR Non-Material Damages,
German authorities issue guidelines on the calculation of GDPR Fines following breaches of GDPR,
Mastercard launches their Data Responsibility Initiative,
Met Police Officer faces costs after Data Breach after turning down out of court settlement
Coming up in this week's episode of the GDPR Weekly Show:
BA Data Breach update - date for damages claims now extended to 17 January 2021,
Brockenhurst man awarded £1500 compensation after Southern Health NHS Trust data breach,
GDPR and Brexit Update - steps to take before 31st October 2019,
Does CCPA Apply To You?
Hudson Bay Finance Ltd faces compliance court action over failure to comply with Data Subject Access Requests,
Irish school operations impacted by GDPR,
Hayes Connor launches £100 million legal action against Equifax following data breach
Coming up in this week's episode of the GDPR Weekly Show:
Electronic Arts Fifa 20 Data Breach,
World of Warcraft producer Blizzard is overwhelmed by the volume of Data Subject Access Requests,
Suspended prison sentences for two Lancashire women following unauthorised data access,
Wellington Healthcare NGO data breach exposes details of 1 Million New Zealanders,
Norfolk and Norwich University Trust Data Breach involving patient data,
Data and Marketing Association GDPR training needs survey highlights where organisations feel they still need GDPR training,
GDPR doubles Data Breach Reports to ICO from Government Departments,
Hookers.nl Data Breach of 250,000 users
Coming up in this week's episode of the GDPR Weekly Show:
BA High Court ruling opens the way for group action compensation claim over British Airways Data Breach,
Bolton NHS Foundation Trust data breach exposes the details of over 400 children moving from primary to secondary school,
Zendesk Data Breach potentially affecting 10,000 users of the support desk platform,
Appeal Court rules against Google over data harvesting from Apple iPhones,
Coventry Council faces scrutiny over whether its redaction of planning application documents is overzealous,
Facebook fined by Turkish Data Protection authority over data breach,
CJEU ruling on Cookie Consent could impact millions of websites worldwide
Coming up in this week's episode of the GDPR Weekly Show:
Tesco Parking App Data Breach affects customers parking at 19 Tesco stores across the UK,
Medical records sent for destruction are used to weigh down scaffolding around statue awaiting unveiling in Milton Keynes,
Polish ICO fines Morele.net for Data Breach,
Dutch ICO suggests rates for standard penalties for GDPR breaches/failures across the EU and UK,
UK sees drop in direct mail volume since introduction of GDPR,
Instagram suffers from another Data Breach,
A look at the results of a European GDPR Consumer Awareness Survey conducted across France, Spain, the UK, Germany, and Poland.
Coming up in this week's episode of the GDPR Weekly Show:
BA swerving responsibility for damages following its data breach,
Isle of Wight Council Tax data breach sees residents being copied in on other residents bills,
Criminal investigation launched following Wigan Hospital data breach which saw the potential release of sensitive patient information,
Facebook suspends over 10,000 Apps over data privacy concerns,
Tesla assures drivers over GDPR compliance of its data gathering,
Court ruling on Data Subject Access Requests - just how much information do you have to provide?
Are China and Japan ready for GDPR?
Coming up in this week's episode of the GDPR Weekly Show:
BA announces 17 week claim period for anyone claiming damages following BA data breach,
Yves Rocher data breach exposes customer details and customer orders,
Is Dominic Cummings turning .GOV.UK into Big Brother?
A Greater Manchester school is being overzealous in its implementation of GDPR,
Max Schrems takes on 8 Tech Giants who he says are not complying with Data Subject Access Requests,
An appeal court in Germany gives some guidance on when damages are payable for breaches of GDPR
Coming up in this week's episode of the GDPR Weekly Show:
Facebook data breach potentially exposes UK phone numbers of 18 million users,
Tavistock and Portman NHS Trust Data Breach when gender reassignment clinic misuses cc in emails,
Monster Recruitment applicant data breach after data sold to 3rd party recruitment company,
Google secret web tracking pages uncovered,
Privacy Policy - Thoughts on best practice,
Foxit PDF Reader suffers data breach
Coming up in this week's episode of the GDPR Weekly Show:
How are UK political parties responding to Subject Data Access Requests,
Google discover Apple iPhone data breach,
Bulgarian ICO fines DSK Bank for data breach involving physical documents,
Teletext Holidays suffers data breach containing thousands of voice recordings,
Is GDPR inadvertently aiding phishing attacks?
Google to be fined for collecting data from children via YouTube without parental consent,
Joint Data Controllers - where does joint liability end?
Microsoft moves some cloud storage to Germany to aid GDPR compliance
Coming up in this week's episode of the GDPR Weekly Show:
RBS kept quiet on Nat West Data Breach for 10 years,
CNIL fines car insurance company for data breach,
Website created for the New Zealand Government suffers a data breach,
Mastercard Specials loyalty programme suffers data breach in Germany and Belgium
Adult content sharing website Luscious suffers data breach potentially affecting over 800,000 users,
IAB Europe releases new Programmatic Advertising Framework to allow programmatic publishers to be GDPR compliant,
European Court rules that websites using the Facebook Like Button are joint data controllers of personal data captured by Facebook
Ciao to Giovanni Buttarelli - one of the key architects of GDPR
Coming up in this week's episode of the GDPR Weekly Show:-
Extended guidance on GDPR and how it affects children's data,
News of a data breach at the Los Angeles Police Department (LAPD),
A data breach at the European Central Bank (ECB),
Millions of fingerprints potentially released in data breach,
Choice Hotels data breach,
FBI arrest a suspect as investigations into the Capital One data breach continue,
Irish ICO investigates potential for GDPR infringement through Facebook transcription of Messenger voice messages,
Revised ICO guidance on time limits for dealing with Data Subject Data Access Requests.
Coming up in this week's episode of the GDPR Weekly Show:
West Berkshire Council Data Breach,
Bulgaria Tax Records Data Breach Update,
Personal Data Vulnerability in 3Fun Dating App,
Air New Zealand Data Breach Affecting Their Loyalty Programme,
Irish ICO Investigating Twitter For Potential Data Breach,
Monzo Bank PIN Serious Data Breach,
Has GDPR Made It Easier to Access Other People's Data,
Data Subject Access Request Survey - How are Companies/Organisations Coping?
Coming up in this week's episode of the GDPR Weekly Show:
The UK Home Office exemption from some elements of GDPR under the Data Protection Act 2018 are subject to Judicial Review,
Poshmark suffers a data breach,
Honda suffers a potentially major Data Breach,
India seeks GDPR Adequacy Status - this will have a significant effect on EU/UK data transfers to India,
Educational software company Pearson suffers Data Breach,
French ICO imposes penalties for failure to keep to Data Retention Schedules,
Are BA and Marriott penalties sufficient?
Buffer login bug causes potential data breach.
Coming up in this week's episode of the GDPR Weekly Show:
In Our 50th Episode of the GDPR Weekly Show, We Look at the Top 10 and Bottom 10 Countries for Listeners to our Show,
Sky.com Email Customers Are Advised to Change Their Passwords After a Possible Data Breach,
A Man is Arrested After a Data Breach at Lancaster University,
Glasgow City Council Suffer a Data Breach Which Potentially Exposes Details of Parents and Where Their Children go to School,
Massive Bulgaria Data Breach sees Two Men Arrested on Terrorism Charges,
New York State Introduces New Data Laws to Bring Them Closer In Line with GDPR,
The Brexit Dept is Reported to the ICO for Failing to Declare a Data Breach,
Data Breach at Isle of Man Adult Social Services
Coming up in this week's episode of the GDPR Weekly Show:
Facebook Receives Record $5 Billion Fine for its part in the Cambridge Analytica Scandal,
No Win No Fee Lawyers set up British Airways Data Breach Compensation Website,
We Carry Out a Comparison of GDPR Penalties Across Europe,
London Estate Agent Fined £80,000 for Data Breach,
Listen to the Final Part of our Interview with Mark Wellins from 1Touch.io
Coming up in this week's episode of the GDPR Weekly Show:-
BA Faces £183 Million Fine for GDPR Data Breach,
Marriott Hotels Faces £99 Million Pound Fine for GDPR Data Breach,
So Just Where Does The Money From These GDPR Fines End Up?...
Why Is There Such Disparity in GDPR Penalties Between EU States,
Part 3 Of Our Interview With Mark Wellins From 1Touch.io
In this week's episode of the GDPR Weekly Show:
Has Boris Johnson Breached GDPR During his Back Boris Campaign?
The ICO Issues its End of Term Report on School Data Breaches,
Update on the Irish FA Data Breach,
Kings College London Data Breach and its Implications,
UK DPA 2018 Court Case - a Number of Migrant's Rights Groups are Taking the UK Government to Court Over Claims that the Immigration Rights Contained Within the UK DPA 2018 are not Compliant with GDPR,
The Second Part of our Interview with Mark Wellins from 1Touch.io
Coming up in this week's episode of the GDPR Weekly Show:
News of the ICO's ruling on the SNP Data Breach relating to their European elections campaign,
Much has been said about the Californian Privacy Laws, but in an in-depth article we take a look at how other US states are changing their laws to bring them into line with GDPR,
Some Interesting Insights from our GDPR Interview with Mark Wellins from 1Touch.io
Coming up in this week's episode of the GDPR Weekly Show:
How To Verify Data Subject Identity When Data Subject Makes Data Subject Access Request,
An Update on the Swedish ICO Questions to Spotify,
Danish ICO Gets Tough On Data Retention - and What It Means For You,
ICO Report on Programmatic Advertising,
TripAdvisor Tightens Passwords,
UK ICO Falls Foul of GDPR
Coming up in this week's episode of the GDPR Weekly Show:
Swedish ICO Investigates Spotify Data Subject Access Requests,
Privacy Policies - the Good, the Bad and the Ugly,
Evite Data Breach,
La Liga Receives Red Card from Spanish ICO for Listening In on Fan's Conversations,
Mermaids UK Trans-Gender Charity Data Breach
Coming up in this week's episode of the GDPR Weekly Show:
Marriott Data Breach Update and the Value of Business Insurance,
GDPR Adoption Around the World - 1 Year On,
Lessons We Can Learn From US Medical Data Breaches,
Ricoh Theta 360 Data Breach,
Embarrassment for Dutch ICO
Coming up in this week's episode of the GDPR Weekly Show:
Dealing With Physical Paper Documents and Staying GDPR Compliant,
Consumer Perceptions of GDPR - the Public View,
Flipboard Major Data Breach,
50% of Top 100 EU Websites Still Not Fully GDPR Compliant,
University of South Wales Data Breach
Coming up in this week's episode of the GDPR Weekly Show:
We wish GDPR a Happy Birthday and look at 4 lessons learned,
Why you ignore Subject Access Requests at your peril,
The results of a GDPR Consumer Survey conducted by IPSOS MORI,
News of a major data breach at Canva which potentially could affect over 100 million users worldwide,
A look at the storm around Real Time Bidding (RTB) data and whether that storm could become a Tsunami for Google and the IAB
Coming up in this week's episode of the GDPR Weekly Show:
GDPR and Photographs Gets Serious With Prince Harry and Meghan,
Charnwood Borough Council Data Breach,
Highland Council Social Services Data Breach - a serious breach of sensitive data,
Channel Islands Bus Companies Data Breach via spoof website
Coming up in this week's episode of the GDPR Weekly Show:
HMRC Voice Recognition Data Breach Update,
UK Home Office and ICO Clash Over Facial Recognition,
SNP Euro Election Data Breach,
DVLA May Find 2nd Class Post is More Expensive,
Turkish ICO Fines Facebook for Data Breach,
Uber Employee Data Requests Could End In Court Action
Coming up in this week's episode of the GDPR Weekly Show:
Details of training we are providing for new local authority councillors,
A Home Office data breach once again using cc instead of BCC,
HMRC data breach - millions of voice recordings to be deleted,
Ticketmaster High Court action launched to get compensation for victims of Ticketmaster Data Breach,
Irish Post Office says is it all just rubbish? - why they removed all of their litter bins.
Man who found data in street now having to report a data breach himself after newspaper story.
Coming up in this week's episode of the GDPR Weekly Show:
Results of the Hiscox data security survey,
Shopping analysis company SBXL and it's Youtube GDPR headache,
With sports day approaching, a look at GDPR and school photographs,
GDPR and party political leaflets for the local UK elections,
Bounty hit with £400,000 data breach fine
Coming up in this week's episode of the GDPR Weekly Show:
ICO Age Appropriate Design Code Consultation,
DCMS suffers a data breach when telling journalists of new proof of age scheme for UK porn site access,
Telephone Call Recording and GDPR,
Potential Perils of Facebook Like Button in Connection with GDPR
Coming up in this week's episode of the GDPR Weekly Show:
UK ICO found to have no privacy notice for their own employees,
Data breaches at the Home Office affect EU residents seeking settled status and in a separate breach, those affected by the Windrush scandal,
The winner of the GDPR DPO of the year award,
Notes from the GDPR practitioners conference,
Bristol City Council data breach,
Apple Pay, Google Pay and GDPR
Coming up in this week's episode of the GDPR Weekly Show:
Good news for local councils, councillors and election candidates,
Results of a charity survey on GDPR awareness showing there is still a knowledge gap to be filled,
A look at Massachusetts new data breach law and potential implications for UK and EU
Coming up in this week's episode of the GDPR Weekly Show:
Facebook's Mark Zuckerberg article in Washington Post reveals his thoughts on data privacy and GDPR,
The Czech Republic finally adopts GDPR into law but with an interesting slant on how it will affect public bodies in the Czech Republic,
The Dutch ICO issues penalties schedule detailing maximum penalties dependent upon company/organisation turnover,
Verifications.io suffer a massive data breach,
Bisnode vs the Polish ICO re: address only data and how far there is an obligation to notify individuals re assumed consent.
Coming up in this week's episode of the GDPR Weekly Show:
Another Facebook data breach,
An alleged data breach at the British Airways Call Centre in Bremen, Germany,
Extracts from a Data Breach Compliance Report from the UK ICO,
To USB or not USB - that is the question,
Two paper-based data breaches - a reminder that GDPR is not just about electronic records.
Coming up in this week's episode of the GDPR Weekly Show:
An update on the Marriott Hotel data breach,
Kent County Council data breach of adoptive parents,
GDPR Canada style - a look at PIPEDA,
Builder fined for not complying with Subject Access Request
Coming up in this week's episode of the GDPR weekly show:
Update on GDPR Subject Access Requests,
Data Protection Practitioners Conference 2019,
Charities and GDPR - make sure you stay within the rules,
Cisco GDPR survey results,
Dutch ICO and IAB clash over cookie walls - a war of words which could have an impact on websites for everyone
Coming up in this week's episode of the GDPR Weekly Show:
Details of a data breach at a school in Liverpool,
A look at the 2018 Annual Report from the Irish ICO,
An update on ongoing GDPR issues concerning Facebook,
Car Dealerships marketing consent rates fall after GDPR,
More USA states introducing their own GDPR equivalent laws,
Lack of GDPR training in schools and educational establishments,
A data breach in Sweden releases phone call recordings
Coming up in this week's episode of the GDPR Weekly Show:
GDPR Training Update,
Labour Party data breach,
Airbus data breach of employee data,
500px data breach update - breach now known to have affected other photo sharing web services,
Family Voice Peterborough Data Breach,
Nest secretly listening without informing users,
GP surgeries GDPR Update
Coming up in this week's episode of the GDPR weekly show:
2019 Data Breaches so far,
Details of the Coinmama Bitcoin data breach,
Valentines Day data breaches affect two dating apps,
Mumsnet data breach - error on site allows users to see other users data,
Myfitnesspal data breach,
Facebook FTC penalty which rumours have it say Facebook could be facing a $1 billion penalty,
Photo sharing site 500px hit by data breach,
Sensnet CCTV facial recognition data breach could result in physical as well as virtual harm
Coming up in this week's episode of the GDPR Weekly Show:
DLA Piper GDPR report
European Top 20 Data Breach countdown
Data Breach findings from the DLA Piper Report
Cisco/Apple request US GDPR
Unipass Maillock review
Coming up in this week's GDPR weekly show:-
Aaron Banks, Brexit, Eldon Insurance and GDPR,
B and Q shoplifters oops - the law of GDPR unintended consequences,
Google appeals 50 million euro fine from French ICO,
Facebook update - no news is bad news,
A look at the right to be forgotten,
Portugese Hospital fined 400k Euro for gaps in data security
Coming up in this week's edition of the GDPR Weekly Show:
Norwich City's implementation of GDPR for season ticket renewals,
An update on Brexit and its impact on GDPR,
A UK ICO investigation into Deliveroo and fraudulent use of data in data breaches,
French ICO slaps huge 50 million euro fine on Google,
An Austrian Privacy group files complaint with Austrian ICO against Amazon, Apple, Netflix, YouTube and Spotify
Coming up in this week's episode of the GDPR Weekly Show:
Confusion over Christmas gift returns - does the store have to let the original purchaser know you have returned their gift?
USA Today and New York Times - how they have changed their approach to Europe in the GDPR era
CCTV and swipe access cards - what you need to know about GDPR compliance
POPI brings GDPR to South Africa
Coming up in this week's episode of the GDPR weekly show:
An update on the Cambridge Analytica/Facebook Data Breach,
Some guidelines from the ICO on Document Retention Periods,
Nominations open for the ICO Practitioner Awards 2019,
A look back at the Top Data Breaches of 2018,
Details of a GDPR ECJ Ruling expected this week,
Sheridan Smith new ITV series Cleaning Up and what it tells us about the importance of GDPR,
USB Security Update - beware of unexplained USB keys arriving in your office,
Some thoughts on the GDPR Right to be Forgotten
Coming up in this week's episode of the GDPR weekly show:
Awards for Elizabeth Denham and other ICO staff in the New Years Honours List,
A countdown of the Top 10 passwords for 2018,
A review of GDPR as we enter 2019,
Marriott Hotels data breach update,
GP Data Requests update,
A report on Suffolk Local Authority Data Breaches
Coming up in this week's episode of the GDPR Weekly Show:
ICO issues fines for non-registration to over 100 organisations, Increase in school data breach reports to ICO,
GDPR and its implications for Dashcam use,
News of an Amazon Alexa data breach,
GDPR and Everton FC - a positive story to end the year
Coming up in this week's episode of the GDPR Weekly Show:
A look at the impact of this week's Brexit events on GDPR,
GDPR and how it affects HR and the issues HR managers should be aware of,
An update on the Facebook Images Data Breach,
NHS bans new fax machines,
Results of an SME survey into effects of GDPR
Coming up in this week's episode of the GDPR Weekly Show:
An update on the large Marriott data breach,
A look at how GDPR could be affected by the UK Parliament Brexit vote,
EPIC Games Store Privacy Policy, not GDPR compliant,
GDPR Notes for Pension Trustees,
GDPR spreads around the world to Brazil and India,
Expansion of GDPR rules for USA data processed in UK and EU
Coming up in this week's episode of the GDPR Weekly Show:
GDPR and corporate Christmas cards
Marriott Hotels enormous data breach,
Deloitte survey of costs of GDPR data requests,
GP surgeries survey into the impact of GDPR,
Dell Data Breach,
Uber receives fines from UK and Dutch ICO
Coming up in this week's episode of the GDPR Weekly Show:
Be careful with staff Christmas Party photos
Vision Direct Data Breach
Amazon self inflicted Data Breach
GDPR almost cancels Christmas for town in Germany
Facebook appeals against level of ICO fine
A look at GDPR penalties across Europe
Coming up in this week's episode of the GDPR Weekly Show:
GDPR WP Plugin Urgent Update,
Experian and Equifax ICO investigation into data collection,
Microsoft Office GDPR concerns over the collection of email subjects and text from Word Documents,
Brexit update - how do this week's events affect UK GDPR?
Coming up in this week's episode of the GDPR Weekly Show:
Aaron Banks/Leave.EU and Eldon Insurance receive an ICO Fine
The ICO begins imposing GDPR audits on UK companies
A survey by Fellows finds 1 in 5 employees have no GDPR training Matalan/Pathe UK Twitter Hack
Why your data breach procedures should be Customer Centric
In this week's packed episode of the GDPR Weekly show: -
Details of a data breach at Radisson Hotels
GDPR and how many companies are taking it into account when disposing of redundant or broken IT equipment or archived documents
How Google and Facebook are getting around GDPR
The wonders of takeout.google.com
In this week's packed episode of the GDPR Weekly show: -
An update on the Morrisons payroll data breach and the decision of the Appeal Court to uphold the earlier High Court decision
Cathay Pacific suffered a huge data breach affecting millions of customers and then took 6 months to reveal to its customers their data may have been stolen
British Airways data breach update - an additional 185,000 customers now thought to have had their data stolen
Facebook receives maximum fine from ICO over Cambridge Analytica, Protect yourself against spear phishing - what it is and how to minimise the chance of it happening to you
In this week's episode of the GDPR Weekly Show:
An EY/IAPP survey reveals 20% of companies believe they will never be GDPR compliant
The Danish Data Protection Agency is suffering from a massive increase in workload
An update on the Data Protection World Forum at Excel in London during November 2018
UK supermarket chain Morrisons contesting data breach liability via the Court of Appeal
Schedule 7 stop and search powers and how they relate to GDPR
In this week's episode of the GDPR Weekly Show:
An update on the VISA outage in the UK in June 2018
An article on GDPR in the Netherlands
An update on the major data breach affecting over 50 million Facebook subscribers
An update on the High Court case concerning Google and access to personal data of iPhone users
An update on the Data Protection World Forum at Excel in London during November 2018
In this week's episode of the GDPR Weekly Show:
An update on the major data breach affecting over 50 million Facebook subscribers
A data breach at Uber
An update on the Data Protection World Forum at Excel in London during November 2018
Some results from a survey regarding the impact of GDPR on business operation
Further details on the PI Live event at Old Billingsgate in London on 15th and 16th October
Some feedback on GDPR Contract Liabilities and their place in the supply chain
Some thoughts on Cyber Security Insurance
Four best-practice snippets on the practical implementation of GDPR
In this week's episode of the GDPR Weekly Show:
A data breach in the official app for the Conservative Party Annual Conference in Birmingham
A major data breach affecting over 50 million Facebook subscribers
A data breach at UK health insurance company, Bupa
Leeds Teaching Hospitals NHS Trust aims to be one of the first in the UK to abandon fax machines by January 2019
An update on the Data Protection World Forum at Excel in London during November 2018
News of two other events, PI Live at Old Billingsgate in London on 15th and 16th October and the Future Directions event with Education Secretary Damian Hinds
The ICO has begun fining companies who have not registered to pay the correct annual GDPR registration fee
In this weeks episode of the GDPR Weekly Show:
Details on how Google and Mastercard may be sharing your information without you knowing
Equifax get hit with a £500,000 fine following a data breach at their US operation
The results of a survey, 4 months in, just how ready are UK businesses for GDPR?
An update on the Data Protection World Forum being held at Excel in London in November 2018
A note on a talk I gave to Solent Disruptors
A checklist of items to check if your privacy policy is anywhere near to being GDPR compliant.
Don't forget to check out our website at https://www.gdprtrainingcourse.co.uk
In this weeks episode of the GDPR Weekly Show:
Updates on the major data breach at British Airways
Details of a new data breach at Stena Line affecting HR data
Why GDPR is a whole company issue
News of the Data Protection World Forum at Excel in November 2018
Some rulings concerning the use of location data
Some thoughts on phishing attacks and how to avoid them
In this weeks episode of the GDPR weekly show:
News of the large data breach at British Airways which could see them facing a fine of over £1 million
The ICO serves an enforcement notice on the London Borough of Lewisham for not satisfying data subject access requests within 30 days
New guidance from the ICO on marketing to first_name.last_name@companyname.co.uk email addresses
An update on the Data Protection World Forum to be held at Excel, London in November 2018
News of a legal challenge by human rights groups against some clauses in the UK Data Protection Act 2018
In this week's episode:
News of a GDPR extortion attempt against Superdrug
Some thoughts on GDPR and HR
News of a serious data breach at Lewisham Council
Some notes on one of our clients, The Rosemary Foundation
GDPR, students, examination boards and exam results
Data Protection World Forum, Excel, London
In this week's episode:
A data breach at Butlins
Your responsibilities as an employer under GDPR
Leaking of medical records from the NHS
Dealing with unsubscribes from your newsletters/marketing communications