Topic: Cybersecurity
Subscribe to Cybersecurity RSS feed
Good news for employers, finally – the UK Supreme Court hands down judgment in WM Morrison Supermarkets plc (Appellant) v Various Claimants (Respondents)
In a judgment which will be warmly welcomed by employers (and their insurers) in the UK, the UK Supreme Court today overruled the Court of Appeal in holding that that Morrisons supermarkets is not vicariously liable for a data breach maliciously caused by a former employee.… Continue reading
“Heightened risk of cyber criminals exploiting COVID-19 fears”, NCSC warns
Posted in Cybersecurity
The National Cyber Security Centre (the NCSC) has warned that businesses and the public face an increased threat from attacks seeking to exploit COVID-19 (coronavirus), particularly given the move to home-working as a result of the COVID-19 outbreak. We have already seen reports of fraudulent “phishing” emails sent by criminals impersonating the World Health Organisation … Continue reading
Adventures in cyber litigation: Frozen crypto-assets and the role of cyber insurance
Posted in Cybersecurity
For some time, cyber exposure has been at or near the top of every major company’s risk register.… Continue reading
New privacy legislation could increase the burden for companies in Quebec
Quebec’s minister of justice announced her intention to introduce a bill aimed at modernizing the privacy regime provided by the Act respecting the protection of personal information in the private sector.… Continue reading
Application by Privacy Commissioner To Shed Light on Judicial Enforcement of PIPEDA
Recent legal action by the Office of the Privacy Commissioner of Canada (OPC) will shed light on the Federal Court’s willingness to enforce and monitor compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA). On February 6, the OPC filed a notice of application (the Application) in the Federal Court seeking a declaration … Continue reading
Data Privacy Day 2020 – Canadian Privacy Law Developments on the Horizon
Posted in Cybersecurity, Data breach, General
Happy Data Privacy Day! Data Privacy Day represents a timely opportunity to highlight anticipated significant developments in Canadian privacy law in 2020 that we are monitoring following two major developments from the Government of Canada.… Continue reading
Record Retention is a Key Component of Your Privacy and Cyber Compliance Program
Posted in Compliance and risk management, Cybersecurity
This blogpost summarises our recent webinar: “An urgent message from Berlin: The importance of record retention in privacy and cybersecurity”.… Continue reading
Bank of England cyber resilience exercise
Posted in Cybersecurity
BoE publish high level findings of the financial sector (“sector”) cyber simulation exercise.… Continue reading
Data protection and cyber risk issues in arbitration – dealing with regulation, cyber attacks and hacked evidence
New Chinese Measures for Personal Data Cross-Border Transfer Security Assessments
Posted in Cybersecurity, Data breachOPC reconsiders its approach to cross-border data transfers with the Equifax decision
In a significant recent decision, the Office of the Privacy Commissioner of Canada (OPC) altered the regulatory landscape when moving personal information between affiliated companies and across Canada’s border for data processing or storage purposes. Any organization governed by the federal Personal Information Protection and Electronic Documents Act (PIPEDA) will have to re-evaluate and likely … Continue reading
First multi-million Euro GDPR fine: Google LLC fined €50 million under GDPR for transparency and consent infringements in relation to use of personal data for personalized ads
On January 21,2019 the French data protection authority (the CNIL) imposed a major fine on the U.S. Google entity, Google LLC. It follows two complaints filed as soon as the GDPR came into force by two consumer rights associations, None of Your Business and La Quadrature du Net. We focus here on four key aspects … Continue reading
Transition period under New York Cybersecurity Regulation ends March 1, 2019
The two-year transitional period under the New York State Department of Financial Services (“DFS”) Cybersecurity Regulation, 23 NYCRR 500 (the “Regulation”), will expire on March 1, 2019, with the final remaining requirement becoming effective. Entities covered by the Regulation that utilize third party service providers, which include not only banks and insurers, but also other … Continue reading
