On the 8th January, the ICO in the UK confirmed that it had not received notification of a data breach at Travelex. Travelex seems to be under the misapprehension that because they claim no evidence exists of any data being taken, then a data breach has not yet been confirmed. Unfortunately, the GDPR is quite …
In the news this week Coverage of DLA Piper’s GDPR report. EEA breach notifications and fines finds the Netherlands leads Ireland in notified data breaches per capita. France, Germany and Austria top the rankings for the total value of fines imposed to date with just over €51 million, €24.5 million and €18 million respectively. Europe’s privacy overhaul …
The Travelex breach is still ongoing, having started on the 31st December 2019. Travelex has confirmed that it has not informed the ICO of the breach, even though lack of data availability is considered a breach under Article 32 of the GDPR. Aside from the obvious ransomware response issues generated here, there are a few …
Following an ongoing battle of 6 years (Schrems II), the Advocate General’s Opinion is that standard contractual clauses for the transfer of personal data to processors established in third countries are valid. Whilst not legally binding, the Advocate General’s opinion holds weight with the CJEU judges, who will rule in the coming months and follow advisers’ recommendations in …
The maximum fine was dished out this week by the ICO in the UK, to DSG Retail Ltd (aka Dixons Carphone), for a data breach which compromised internal network for 9 months and led to the loss of approximately 5 million credit card records and the personal data of approximately 14 million individuals. The numbers …
