Blog

Category filter: News (53 posts found)

The Office of the Comptroller of the Currency Assesses $80 Million Civil Money Penalty Against Capital One

The Office of the Comptroller (OCC) has issued an $80 million civil penalty against Capital One, N.A., and Capital One Bank (USA), N.A. and mandated them to strengthen their compliance programme by appointing a compliance committee and developing comprehensive action plan to comply with the order. This decision is the result of failing to establish effective risk assessment processes prior to migrating significant information technology operations to the public cloud environment and the bank's failure to correct the deficiencies in a timely manner. In taking this action, the OCC positively considered the bank's customer notification and remediation efforts … Continue reading >

The ICO has issued the Guidance on AI and Data Protection

The UK Information Commissioner’s Office (ICO) has issued the Guidance on AI and data protection (Guidance). It provides a framework for auditing AI, focusing on best practices for data protection compliance. It provides a clear methodology to audit AI applications and ensure they process personal data fairly – something ICO has highlighted as the key challenge for artificial intelligence processing personal data. … Continue reading >

Spanish Data Protection Authority Has Issued an Update on Cookies Guidelines

Spanish Data Protection Authority, Agencia española de protección de datos (AEPD), has updated its Cookies Guidelines. … Continue reading >

Summary of the Frequently Asked Questions on the judgment of the Court of Justice of the European Union in the Schrems 2 Case

The European Data Protection Board (EDPB) has issued answers to the questions they have received from the EU data protection authorities (DPAs) about the Schrems 2 case. In essence, the EDPB follows the position of the CJEU. If you are still unclear on what to do in the days after the CJEU decision this short summary of the FAQs can help. … Continue reading >

The CJEU Decision on the Privacy Shield and Standard Contractual Clauses

The Court of Justice of the European Union (CJEU) has invalidated the EU-US Privacy Shield Framework and found that Standard Contractual Clauses (SCC) for data transfers between EU and non-EU countries are valid. This was the outcome of the CJEU decision C-311/18 – Facebook Ireland and Schrems issued on July 16th 2020. … Continue reading >

Articles >

News >

arrow_upward