DLA PIPER-数据泄露调查（英文）-2020..pdf

《DLA PIPER-数据泄露调查（英文）-2020..pdf》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、AREPORTBYDLAPIPER’SCYBERSECURITYANDDATAPROTECTIONTEAMDLAPiperGDPRdatabreachsurvey:January2020DLAPIPERGDPRDATABREACHSURVEY:FEBRUARY20192WWW.DLAPIPER.COMDLAPiperGDPRdatabreachsurvey:January2020UndertheGDPRpersonaldatabreachesthatarelikelyTheEUGeneralDataProtec

2、tiontoresultin“arisk”totherightsandfreedomsofnaturalRegulation(GDPR)cameintoforcepersonsmustbenotifiedbythe“controller”organisationtotheappropriatedataprotectionsupervisoryauthorityacrosstheEuropeanUnionon25withoutunduedelayand,wherefeasible,notlaterthanMay2

3、018.InFebruary2019DLA72hoursafterhavingbecomeawareofit.Whereapersonaldatabreachislikelytoresultina“highrisk”PiperpublishedthefirstDLAPipertotherightsandfreedomsofnaturalpersons,theseDataBreachSurveycoveringtheindividualsmustalsobenotifiedwithoutunduedelay.fi

4、rst8monthsoftheGDPRregimeOrganisationsfacestiffpenaltiesforfailingtonotifypersonaldatabreacheswithinthestipulatedtimeto27January2019.Withthankstoperiodsincludingfinesofupto€10million,oruptothemanydifferentcontributorsand2%ofthetotalworldwideturnoveroftheprec

5、edingfinancialyear,whicheverishigher.supervisoryauthoritieswhomakethisreportpossible,our2020reporttakesManyorganisationsandindeedmanysupervisoryauthoritiesarestrugglingwithhowtodeterminewhenalookatkeyGDPRmetricsacrosstheabreachisorisnotnotifiablegiventhevaga

6、riesofEuropeanEconomicArea(“EEA”)12thelegaltriggerfornotification–wherethereis“arisk”totherightsandfreedomsofnaturalpersons.monthson.TheEEAincludesall28NeithertermisdefinedintheGDPR.SomeguidanceMemberStatesoftheEUplusNorway,isavailableincluding,atanEUlevel,t

7、heGuidelinesonPersonalDataBreachNotificationwhichwereIcelandandLiechtenstein.originallypublishedbytheArticle29WorkingPartyandsubsequentlyadoptedbytheEuropeanDataProtectionBoard.However,theguidanceishighlevelandopentowideinterpretation.Furtherguidancewouldbew

8、elcomedbothbyorganisationsreportingbreachesandsupervisoryauthoritiesassessingbreachesinordertoOrganisationsfacestiffpenaltiesforfailingdriveconsistencyandbestpracticeforriskassessment.Aconsisten