Financial Services

Client Alert: Ransomware – COVID-19 & Upgrading Your Defences

January 15, 2021

We first published this alert in March 2020 and we have updated it to reflect more recent developments It’s pretty shameful that in the current crisis we’re seeing ransomware on the rise. It’s even more shameful that organisations involved in fighting the COVID-19 pandemic seem to be especially at risk. In 2019 ransomware targeted healthcare more Read more »

Life With GDPR: Episode 51 – Reduction to GDPR Fines by EU Courts

December 18, 2020

In this episode Jonathan Armstrong and Tom Fox are back to discuss issues relating to data privacy, data protection and GDPR. They consider EU courts reducing fines and penalties assessed by data protection regulators. This reminds us that, as we said before, data protection authorities are likely to face challenges to high fines in the Read more »

Life With GDPR: Episode 50 – The Experian Enforcement Notice Case

December 10, 2020

In this episode Jonathan Armstrong and Tom Fox are back to discuss issues relating to data privacy, data protection and GDPR. Here they consider the Experian enforcement action. Recently, the UK Data Protection Authority, the Information Commissioner’s Office (ICO), slapped Experian with an enforcement notice requiring the company to make major changes to how it Read more »

Client Alert: Fines imposed by French Data Protection Regulator including for Data Transfer Transparency Non-Compliance

November 30, 2020

We first wrote this note on 26 November 2020 and have updated it with more details about the case. In brief Following investigations (triggered by complaints), the French data protection regulator, the Commission nationale de l’informatique et des libertés (CNIL), has sanctioned two French organisations for a number of data protection compliance failures: Carrefour France Read more »

Client Alert: Experian comes out fighting against ICO Enforcement Notice

October 30, 2020

Introduction The UK Information Commission’s Office (ICO) has slapped Experian with an enforcement notice requiring the company to make major changes to how it processes personal data in its UK marketing services business. The two other largest credit reference agencies (CRAs) Equifax and TransUnion were also investigated at the same time in relation to their Read more »

EU Data Protection – glossary

June 25, 2020

We first published this alert on 13 September 2017 and we’re updating it from time to time with more terms. We’ve put together this glossary to help explain some of the terms used in data protection and in the GDPR. If there’s a term you think we should add let us know. ABG = The Read more »

Swedish Data Protection Regulator Imposes Fine for Failure to Report Data Breach

June 22, 2020

Introduction The Swedish Data Protection Authority (“the Datainspektionen”) recently imposed a fine of 200,000 Swedish kronor (approximately €18,700 or $21,320) on the Swedish National Government Service Centre (“the NGSC”) for failing to notify both the Datainspektionen and others about a personal data breach in sufficient time. This brief article highlights the issues in the case. Read more »

EU Whistleblowing Legislation FAQs

June 16, 2020

Introduction Late last year the EU introduced a new law to enable whistleblowers to report about EU law irregularities – this law also harmonises the minimum level of protection available to whistleblowers across the EU. These new rules are set out in “Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 Read more »