Data Protection Regulation

Cloud computing

The European Council of Ministers has published a contribution to the revision of the Data Protection Directive.

6 June 2012 at 10:34am

MoJ Data Protection Response

An interesting morning yesterday at the launch of the Ministry of Justice's Response to the Call for Evidence on the Current Data Protection Legislative Framework.

6 June 2012 at 10:28am

EC Responds on Data Protection Consultation

Breach Notification

The European Commission has published its response to last year's consultation on revising European Data Protection legislation, in particular Directive 95/46/EC.

4 July 2012 at 4:46pm

MoJ: Data Protection Law

Breach Notification

The Ministry of Justice has been seeking evidence to inform its input into the ongoing revision of the European Data Protection Directive (95/46/EC).

6 June 2012 at 10:21am

Data Protection Revision Delayed

An interesting report from the French data protection authority (CNIL) that the European Commissioner has announced a delay in the proposed revision of the European Data Protection Directive 95/46/EC. Rather than publishing a draft Directive later this year, it seems that the plan is now to publish a report this autumn with the draft expected in November next year.

6 June 2012 at 10:19am

Data Protection Directive Meeting

I had an interesting day in Brussels yesterday, providing input for the Commission's revision of the 1995 Data Protection Directive. Invitations had been sent to those who responded to the consultation last year, so a wide variety of organisations were present, including banking, marketing, medical, consumer rights, content industries and telecommunications operators.

6 June 2012 at 10:18am

Pseudonymous Identifiers and the Law

Data Protection Act

For a while I've been trying to understand how pseudonymous identifiers, such as IP addresses and the TargetedID value used in Federated Access Management, fit into privacy law. In most cases the organisation that issues such identifiers can link them to the people who use them, but other organisations who receive the identifiers can't. Indeed Access Management federations spend a lot of effort to make it as difficult as possible for the link to be made, using both technical and legal means to protect the privacy of users.

6 June 2012 at 10:16am

Thoughts on Data Breach Notification

Breach Notification

ePrivacy Directive

Regulators and governments are moving towards creating a requirement that anyone who suffers a security breach affecting personal data would have to report it.

6 June 2012 at 10:10am

IP Addresses and Data Protection