Tag

Data Retention

Browsing

The use of contemporary business communication and collaboration tools including chat and instant messaging applications has resulted in a potential recordkeeping compliance gap where there is a legal requirement to retain business records. While in the past many organizations carved out these newer and less conventional forms of electronic business communications from their formal records retention practices, this approach has become increasingly less viable. Regulators have been responding with additional requirements and guidance for instant…

On 28 June 2017, the German telecommunications regulator (Bundesnetzagentur, “BNetzA”) decided to suspend enforcement of the provisions of the German Telecommunications Act which required providers of publicly available telephone services for end users and providers of publicly available internet access services for end users to retain certain metadata (e.g. number of the calling and called party, date and time of the connection etc.) from 1 July 2017 onwards. This follows an order of 22 June 2017,…

A recent privacy breach case in Canada offers practical guidance for organizations anywhere to avoid the over-retention of personal data.A May 2017 Order from the Office of the Information and Privacy Commissioner of Alberta provides new insight into the requirement under section 35 of the Personal Information Protection Act to retain personal information only as long as reasonably required. To manage risk, organizations retaining personal information should be prepared to clearly articulate the purpose of…

In July and August 2015, a Canadian dating website operator, Avid Life Media (ALM), was subject to a data breach. The Australian Privacy Commissioner and the Privacy Commissioner of Canada investigated the incident together and released a joint report regarding their findings. The affected websites included the Ashley Madison dating website which had users in over 50 countries. Among other disclosures, the unauthorised access resulted in the online posting of details from approximately 36 million…

With the year drawing to a close, it seems an opportune time to take stock of some of the key globally relevant data protection developments in 2015 and extract a few trends which are set to continue in 2016.1. Safe Harbor – Cross-border Data Transfers Top The Regulator Priority ListThe Schrems decision of the European Court of Justice invalidating the European Commission’s 2000 Safe Harbor adequacy decision must be the 2015 event that shook up…