Data Protection Officer

Reaching out to Enterprises – PCPD Promoted Personal Data Privacy Management Programme for Enterprises

Retrieved on: 
Friday, November 11, 2022

The Deputy Privacy Commissioner for Personal Data (Deputy Privacy Commissioner), Mr T.Y.

Key Points: 
  • The Deputy Privacy Commissioner for Personal Data (Deputy Privacy Commissioner), Mr T.Y.
  • LEE, spoke today (4 November) at a breakfast gathering organised by Practising Governance.
  • In his presentation, the Deputy Commissioner explained to management personnel of companies the importance of implementing a Personal Data Privacy Management Programme and appointing Data Protection Officers in companies.
  • He also shared examples of best practices and some practical tips for stepping up personal data protection in a corporate environment.

Reaching out to Directors - Privacy Commissioner Spoke at the Luncheon Meeting of the Hong Kong Institute of Directors

Retrieved on: 
Friday, November 11, 2022

The Privacy Commissioner for Personal Data (Privacy Commissioner), Ms Ada CHUNG Lai-ling, delivered a speech on 25 August 2022 at the Luncheon Meeting organised by the Hong Kong Institute of Directors.

Key Points: 
  • The Privacy Commissioner for Personal Data (Privacy Commissioner), Ms Ada CHUNG Lai-ling, delivered a speech on 25 August 2022 at the Luncheon Meeting organised by the Hong Kong Institute of Directors.
  • In the presentation entitled Data Privacy Pitfalls and Tips for Directors, the Privacy Commissioner discussed the common personal data privacy pitfalls that might be of concern to directors, and shared some practical tips with the participants to protect personal data privacy.
  • These included the implementation of a Personal Data Privacy Management Programme, appointment of Data Protection Officers, and recommended measures to enhance data security and collect personal data during the pandemic.
  • The Privacy Commissioner spoke at the Luncheon Meeting of the Hong Kong Institute of Directors.

Transcend Launches New Privacy Risk Management Product, Offering Automated Guidance to Streamline Privacy Impact Assessments

Retrieved on: 
Wednesday, October 19, 2022

SAN FRANCISCO, Oct. 19, 2022 /PRNewswire-PRWeb/ -- Transcend, the one-stop privacy platform that makes it easy for companies to encode modern privacy requirements into their data ecosystems, has today released a new Assessments product aimed at reducing the work and risk associated with processing personal data.

Key Points: 
  • This first-of-its-kind offering builds on Transcend's automated data discovery, classification, and governance capabilities by proactively flagging to privacy teams when a Privacy Impact Assessment (PIA) may be required, auto-suggesting relevant metadata, and automatically highlighting incomplete assessments across a company's data map.
  • Without centralized data visibility, risk and privacy assessment management has become an operational burden for privacy teams, leaving companies with compliance gaps and privacy risks.
  • "Privacy professionals rarely have a quantifiable, easily defined process for kicking off, compiling, and approving Privacy Impact Assessments," said Brandon Wiebe, Transcend General Counsel and Head of Privacy.
  • Approval and status tracking: Transcend Assessments includes powerful tools to identify outstanding tasks, documents missing key stakeholder input, and flag assessments pending DPO approval.

Hunton Andrews Kurth: New Book Explains Recent Developments in Data Protection Law and Practice

Retrieved on: 
Monday, December 7, 2020

LONDON, Dec. 7, 2020 /PRNewswire/ -- Hunton today announces the fifth edition of ' Data Protection Law and Practice ', written by Rosemary Jay , Hunton Andrews Kurth Senior Consultant Attorney, and published by Sweet & Maxwell.

Key Points: 
  • LONDON, Dec. 7, 2020 /PRNewswire/ -- Hunton today announces the fifth edition of ' Data Protection Law and Practice ', written by Rosemary Jay , Hunton Andrews Kurth Senior Consultant Attorney, and published by Sweet & Maxwell.
  • Increasingly, data protection is a business critical issue, and personal data lies at the heart of most organisations, whether public or private sector.
  • Consequently, the law governing data protection has evolved to reflect the complexity of data processing, and the challenge of protecting individuals' rights in their personal data.
  • The introduction of the EU General Data Protection Regulation (GDPR"), which was supplemented in the UK by the 2018 Data Protection Act and subsequently incorporated into UK law, was the most significant change in the data protection landscape since the 1998 Data Protection Act.

COVID-19 Recovery Analysis: Stock Music Market | Popularity Of Audio And Video Streaming to boost the Market Growth | Technavio

Retrieved on: 
Friday, September 11, 2020

The report offers an up-to-date analysis regarding the current market scenario, latest trends and drivers, and the overall market environment.

Key Points: 
  • The report offers an up-to-date analysis regarding the current market scenario, latest trends and drivers, and the overall market environment.
  • Technavios in-depth research has all your needs covered as our research reports include all foreseeable market scenarios, including pre- & post-COVID-19 analysis.
  • Popularity of audio and video streaming has been instrumental in driving the growth of the market.
  • Download a Free Sample Report on COVID-19 Impacts
    Stock Music Market is segmented as below:

The European Commission Considers Amending the General Data Protection Regulation to Make Digital Age of Consent Consistent

Retrieved on: 
Tuesday, July 21, 2020

The European Commission published a Communication on its mandated two-year evaluation of the General Data Protection Regulation (GDPR) on June 24, 2020 in which it discusses as a future policy development the possible harmonisation of the age of children consent in relation to information society services.

Key Points: 
  • The European Commission published a Communication on its mandated two-year evaluation of the General Data Protection Regulation (GDPR) on June 24, 2020 in which it discusses as a future policy development the possible harmonisation of the age of children consent in relation to information society services.
  • Notably, harmonizing the age of consent for children across the European Union is one of only two areas in the GDPR that the Commission is considering amending after further review of practice and case-law.
  • Currently, the GDPR allows individual Member States some flexibility in determining the national age of digital consent for children between the ages of 13 and 16.
  • In addition to the GDPRs varying ages of digital consent, there are also differing interpretations of the obligations on information society services regarding children.
  • Prior to the GDPR, European data protection law did not include special protections for children, instead providing the same privacy protections across all age groups.
  • The GDPR recognized that children are particularly vulnerable to harm and exploitation online and included provisions extending a higher level of protection for children.

DCU & FPF Webinar – The Independent and Effective DPO: Legal and Policy Perspectives

Retrieved on: 
Wednesday, July 15, 2020

On July 8th, Dublin City University (DCU) and the Future of Privacy Forum (FPF) jointly organized the webinar The Independent and Effective DPO: Legal and Policy Perspectives.

Key Points: 
  • On July 8th, Dublin City University (DCU) and the Future of Privacy Forum (FPF) jointly organized the webinar The Independent and Effective DPO: Legal and Policy Perspectives.
  • The webinar was designed to help policymakers, regulators, and their staff better understand legal views concerning the position of the Data Protection Officer within an organization.
  • The first half of the discussion centered around the involvement and independence of the DPO from the perspective of European data protection regulators, while the second half of the webinar explored how DPOs perceive their role.
  • Guest speakers included European data protection regulators and DPOs from leading companies.

Harro Höfliger and Vaxxas Announce Alliance to Develop Industrial-scale Aseptic Processing Line for Vaccine Products Based on Vaxxas’ High Density Microarray Patch (HD-MAP)

Retrieved on: 
Thursday, May 28, 2020

Were excited to be working on this project with Harro Hfliger, said David L. Hoey, President and CEO of Vaxxas.

Key Points: 
  • Were excited to be working on this project with Harro Hfliger, said David L. Hoey, President and CEO of Vaxxas.
  • Our novel device design along with our innovative vaccine coating and quality verification technologies are an excellent fit for integration with Harro Hfligers aseptic process automation platforms.
  • Adopting a modular approach, it will be possible to achieve output of tens-of-millions of vaccine-HD-MAP products per week.
  • Vaxxas HD-MAP is a 9x9mm array of thousands of very short (~250m) projections, invisible to the naked eye, coated with vaccine.

Tech Talk with the Regulators – Understanding Anonymization Under the GDPR

Retrieved on: 
Thursday, May 28, 2020

The General Data Protection Regulation (GDPR) has already been in existence for four years, and has been in force for two years. How can anonymization techniques under the GDPR help Data Protection Officers (DPOs) assess innovation? I hosted a webinar with Truata that featured experts from DPAs in Italy, Ireland, and the UK to find out more about their perspective. The recording is available here (link to the webinar).  ‘A revision of the 2014 opinion on anonymization techniques is in the working program of the EDPB’ In 2014, the European data protection authorities, assembled in the Article 29 Working Party provided guidance in their opinion on anonymization techniques.

Key Points: 


The General Data Protection Regulation (GDPR) has already been in existence for four years, and has been in force for two years. How can anonymization techniques under the GDPR help Data Protection Officers (DPOs) assess innovation? I hosted a webinar with Truata that featured experts from DPAs in Italy, Ireland, and the UK to find out more about their perspective. The recording is available here (link to the webinar).  

‘A revision of the 2014 opinion on anonymization techniques is in the working program of the EDPB’
    • In 2014, the European data protection authorities, assembled in the Article 29 Working Party provided guidance in their opinion on anonymization techniques.
    • Giuseppe DAcquisto, Senior Technology Advisor at the Italian Data Protection Authority, said that some adjustments to the 2014 guidance are needed because there are unexplored aspects of anonymization in the GDPR: A revision of the 2014 opinion is in the working program of the EDPB.
    • Ultan OCarroll, Deputy Commissioner for Technology and Operational Performance at the Data Protection Commission in Ireland, said: The 2014 opinion is still as valid as it ever was, if not more so.
‘Unexplored aspects of anonymization in the GDPR’
  • D’Acquisto gave three examples where in his view the use of Privacy Enhancing Technologies (PETs) could play a role.
    1. On legitimate interest as a legal ground: “Anonymization techniques can become an element in the balancing test when you want to invoke legitimate interest.”
    2. On public interest as a legal ground: “Public interest is an opportunity when used in combination with national law.” He called on national legislators to explore the possibility of including the use of privacy-enhancing safeguards in laws.
    3. On the secondary, (in)compatible use of personal data for further processing: “Rethinking the 2014 opinion is useful to explore new opportunities for data controllers.”
    • It clarifies Article 6 of the GDPR which stipulates the lawfulness of processing.
    • Recital 50 states that the processing of personal data for purposes other than those for which the personal data were initially collected should be allowed only where the processing is compatible with the purposes for which the personal data were initially collected.
    • DAcquisto stressed that value could be added to data in the interest of the public when applying anonymization techniques as safeguards for our rights and freedoms.
‘Time to focus on privacy risk management’
    • Simon McDougall, Executive Director for Technology Policy and Innovation at the Information Commissioners Office in the UK, said that it is time to focus on privacy risk management: There is a tension between risk management and hard science.
    • They struggle with the concept of residual risk and the question of what risk to accept.
    • He also explained the benefits of a layered approach to privacy risk management, rather than a focus on a single technology.
    • Think of it as a Swiss cheese notion of [stacked] risk management measures, McDougall said.
‘Legal and technical competences are complementary to each other’
    • The broader questions around innovation, sharing of data, and repurposing of data have become particularly important in the context of COVID-19.
    • Accordingly, each of the experts expressed their advice for DPOs given the developments in anonymization technologies.
    • DAcquisto suggested that DPOs should not rely on either legal or technical competence alone.
    • A holistic approach is needed with legal safeguards, technical safeguards, and a path toward compliance.
‘DPOs: do not go alone; get help’
    • DPOs need to get access to scientists and to organizational people, but also to expert advice in terms of social science, cognitive science, interface design, or mathematics, for example.
    • Do not go alone; get help, he said.
    • Its not worth carrying forward without that because youll be asked questions that you may not think about.
    • Instead of thinking this is all incredibly complicated, they should try to understand what the risks are for the individual and the organization.
    • It is possible to keep up with it so you can then have the conversation with the right expert.

New DPO Courses Launched to Groom At Least 500 DP Professionals

Retrieved on: 
Friday, October 18, 2019

New DPO Courses Launched to Groom At Least 500 DP Professionals

Key Points: 
  • New DPO Courses Launched to Groom At Least 500 DP Professionals

    12 Oct 2019

    NTUC LearningHub (LHUB), in partnership with Employment and Employability Institute (e2i) and Personal Data Protection Commission (PDPC), launched four new data protection-related courses for Data Protection Officers (DPOs) today, based on the PDPCs Data Protection Competency Framework and Training Roadmap.

  • Please download the media document here: