News...
|
Survey
finds lack of data-protection controls in Irish
organisations
A survey commissioned by Origina, an IT
managed services & outsourcing organisation, found
that 30% of Irish organisations have 'no data protection
controls in place' to safeguard their core business
data. The risk of having no such controls is that these
organisations are open to data theft, because all staff
have access to the data. The survey conducted online in
September included primarily Chief Information Officers,
IT directors and IT managers from Irish organisations of
all sizes and sectors. Rowan O'Donoghue, Director of
Innovation and Strategy for Origina said: "If companies
lose sensitive data...it could seriously damage their
reputation and ability to carry out normal business
activities. Increasingly, we will also see larger fines
being imposed, as well." The survey also found that 37%
of those surveyed 'do not have a clear directive as to
how long data should be
retained'.
|
|
EU and
US to commence data security talks
European
Justice Ministers have decided to work towards an
agreement with the US to provide for personal data
protection. The aim of the agreement is to enable
co-operation to fight terrorism or crime while ensuring
a high level of protection of personal information such
as passenger data or financial information that is
transferred for that purpose. EU Commissioner for
Justice Viviane Reding will meet with US officials in
Washington D.C. to begin negotiations on behalf of the
European Commission. The purpose of the negotiations is
to overcome the differences in approaches to protecting
personal data that have proved controversial previously,
with exchange agreements such as the Terrorist Finance
Tracking Programme or Passenger Name
Records.
|
Farmer
payment data removed from websiteThe data
regarding individual EU payments to Irish farmers
published on the Department for Agriculture's website
were withdrawn within hours of a European Court of
Justice decision on the issue. The Court declared
a partial invalidity of the EU legislation on the
publication of information relating to the beneficiaries
of European agricultural funds. It found that the data
being published, which included the full names of
beneficiaries and the exact amounts they received, went
beyond what was necessary to achieve the legitimate aims
behind publication. Maireád McGuinness, an Ireland East
MEP said the judgement will mean that the EU will have
to revise the issue of payment
publications.
|
|
Plans
for €3.7m EU-wide data protection
project
Researchers from Waterford Institute
of Technology are to commence a project that is aimed at
improving data protection across Europe. Named the
Endorse project, it will bring together industry experts
from Ireland, the UK, Italy, the Netherlands, Spain and
Austria, who will develop software that allows
organisations to check compliance with their own
country's data protection legislation. The software
should also simplify how organisations can show a
customer the information they hold on them and how it is
used. This is already an obligation under EU law and in
many cases requests are handled manually, making it time
consuming and costly. An automated system made possible
through Endorse would allow customers to log into a
website to see instantly the details themselves. It is
anticipated that the software will be made public by
September 2012.
|
|
$1.3bn
awarded in data theft case
The European
software organisation, SAP, has been ordered to pay
$1.3bn to its US rival Oracle by a Californian court
after losing a data theft case. The case involved the
theft of customer-support documents and software which
were stolen by a subsidiary of SAP, TomorrowNow. The
German organisation, it was alleged, had intended to use
the data to poach customers from Oracle. After a three
week trial, the jury decided in Oracle's favour after
one day of deliberation.
|
The latest issue of Data
Protection Ireland features in-depth coverage
of news items and articles on compliance
issues.
|
| PDP Training
Courses |
|
Records
Management
Good records management
practice is essential to an effective data protection
compliance regime.
Two sessions led by
records management expert Philip Jones offer delegates
the opportunity to learn everything needed to put in
place an effective and compliant RM system.
Philip Jones has been involved with record
and document standards for over ten years and is a
co-editor of ISO 15489 International Records Management
Standard. Philip is Chairman of the International
Records Management Society and is an accomplished and
professional RM trainer.
Records
Management 1
This
introductory level session provides delegates with a
solid foundation for effective RM
practice.
This session will take place in
Dublin
on the following dates:
Monday, 24th
January 2011
Monday, 11th April 2011
Monday, 23rd
May 2011
See the website for further
information
Records Management
2
This
intermediate level session looks at initiating a records
management project and considers 5 practical case
studies.
This session will take place in
Dublin
on the following date:
Tuesday, 25th
January 2011
Tuesday, 12th April 2011
Tuesday,
24th May 2011
Many delegates choose to take
RM 1 and RM 2 sessions together, for which there is a
discounted rate.
To view
more information about PDP Training or to make a booking
please visit the website or call +353 (0)1 657
1479.
|
Data Protection - Essential
Knowledge
Data protection compliance is
an essential legal requirement for all
organisations. It is best to put data protection
procedures in place before problems occur to avoid legal
liability, negative publicity and cost of regulatory
enforcement.
This invaluable introductory
(or refresher) level training course, conducted by Peter
Carey, a dually qualified Irish and UK solicitor, is
taking place in Dublin
on the following dates:
Friday, 15th April
2011
Friday, 1st July 2011
To view more
information about the course, or to make a booking,
please visit the website or call +353 (0)1 657
1479.
|
Handling
Access Requests
Handling requests by
individuals for information that we hold on them is
rapidly becoming a significant organisational
burden. But if requests are handled efficiently,
the time and expense involved can be dramatically
reduced.
This Training Session is
conducted by Paul Lavery of McCann FitzGerald, one of
the leading experts on data protection law. There will
be plenty of opportunity for questions, and delegates
are encouraged to bring their queries to the
session.
This next dates for these Dublin
sessions are:
Tuesday, 8th February
2011
Wednesday, 18th May 2011
To view more
information about the course, or to make a booking,
please visit the
website
or call +353 (0)1 657
1479.
| |
| |
|
Data
Protection Ireland
is Ireland's only
professional compliance journal in the field of data
protection.
Essential reading for all those
involved with data protection, the journal contains
practical articles and invaluable news items to keep
subscribers up-to-date with the latest guidance and
enforcement action.
The journal is
published 6 times per year and is edited by Rob Corbet
of Arthur Cox.
|
The
latest issue of Data
Protection Ireland, Volume 3, Issue
6, features in-depth coverage of news items and
articles on compliance
issues.
'The Data Breach
Code of Practice: Developments on Breach Notification
Requirements', by Colin Rooney, Associate at
Arthur Cox
'Redefining
"personal data" - can the opinion live up to the
hype?', by Dan Cooper, of Covington & Burling
LLP
'Working Party
Opinion on principle of accountability - new obligations
for data controllers or old wine in new
bottles?', by Monika Kuschewsky, Partner at Van
Bael & Bellis 'Data Protection Breach
forces European Commission to reconsider data transfers
with Israel', by Ciaran Ward, Information Officer
at Lee Valley Regional Park Other Recent Articles &
Headlines:'New series: How to... stay
out of the news' by Sinead Ovenden, Director
of Regulatory Compliance at Deloitte 'Whistleblower hotlines and
data protection' by Richard Jones of Clifford
Chance LLP, and Josephine Warren of BBC World
News 'Data
security - compliance and controls' by Paul
C Dwyer, CEO at TeamInfoSec
'DPO survey - the
results' by news team at Data Protection
Ireland
'Dealing with
staff data breaches' by employment specialist
Gabriella Wright
'How to combat
identity theft in the corporate world - an essential
guide' by Peter Wood, Chief of Operations at
First Base Technologies
'The devil and the
deep blue sea - US & EU discussions on sharing
personal data' by Richard Jones, Director of
Data Privacy at Clifford Chance LLP
'Data security
obligations - under scrutiny once again' by
Anne-Marie Bohan, Matheson Ormsby
Prentice
and
more... |
| |
