Subhajit Basu’s Post

It is amazing how many problems are solved and how much time and money you have for other activities when your data is protected by Anonomatic. Here is one more example for anyone needing to operate in the EU or other regions with strict data privacy rules. #GDPR #DataPrivacy #DataProtection

Check out our latest blog discussing international compliance with strict data privacy rules! When Anonomatic protects your data, numerous compliance obligations and problems vanish. #DataPrivacy #Compliance #Anonomatic #DataProtection #Auth0 #OKTA Please repost and share broadly!

European Parliament back plans for an EU-wide digital wallet. The EU wallet will be used on a voluntary basis. The European Parliament has adopted the proposal for the European Digital Identity Framework. The new digital identity framework will provide EU citizens with cross border digital access to key public services. According to the regulation adopted and already agreed upon with EU ministers, this new Digital Identity Wallet will allow citizens to identify and authenticate themselves online without having to resort to commercial providers – a practice that raises trust, security and privacy concerns. The EU wallet will be used on a voluntary basis. During negotiations, MEPs secured provisions to safeguard citizens’ rights and foster an inclusive digital system by avoiding discrimination against people opting not to use the digital wallet. The law provides for free “qualified electronic signatures” for EU wallet users, which are the most trusted, and have the same legal standing as a handwritten signature, as well as wallet-to-wallet interactions, to improve the fluidity of digital exchanges. MEPs have also mandated an open-source wallet to encourage transparency, innovation and to enhance security. They also set stringent rules for the registration and oversight of companies involved to ensure accountability and traceability. Via a so-called privacy dashboard, users will be able to have full control of their data and will be able to request their data be deleted, as provided for under the General Data Protection Regulation (GDPR).

VitrX are proud to announce our ongoing partnership with Global Lifecycle Solutions EMEA Ltd to deliver certified data erasure solutions that keep your business fully compliant with the ever-evolving data privacy regulations, including GDPR. In our latest article, we explore GDPR’s Right to Erasure (the ‘Right to be Forgotten’) and break down what it means for businesses. From the key implications to the best practices, this is essential reading for any company handling personal data. Mark Huffman, Director of Special Projects shares “With Global Wipe, our certified data erasure product, we provide secure, high-speed erasure for a wide range of devices - laptops, servers, tablets, and more. Our solution offers faster wipe success rates compared to leading brands, all while ensuring compliance with GDPR and the European Data Act.” 🔗 https://lnkd.in/eRz9887R Learn more about how our partnership can help your business stay secure, compliant, and sustainable. For more information, contact us at [email protected] or visit https://lnkd.in/ebbp35js #GDPR #DataErasure #DataPrivacy #GlobalEMEA #VitrX #DataSecurity #Compliance #Sustainability

Register for our webinar at https://lnkd.in/djvavUJ4 . The webinar will be on 28th March, 2024 at 11:30 am to 12:45 pm. Our experts Quency Otieno and Rikza Saqib will highlight valuable tips on how to leverage the Geodi AI Platform for technical measures under Data Protection Laws and PCI-DSS. Some of the issues that will be addressed are; 1. How Geodi facilitates compliance with PCI DSS requirements for securing payment card data, and the specific articles of the GDPR it aligns with  2. Whether Geodi can assist in implementing technical measures outlined in the Kenyan Data Protection Act (DPA),  3.Geodi features that support security of processing mandated by PCI DSS and the GDPR?  4. Ways in which Geodi helps in implementing access controls.  5. How Geodi ensures secure transmission of data, particularly in cross-border transfers. 6. Whether Geodi provides mechanisms for continuous monitoring and auditing of systems and data access to fulfill PCI DSS's requirements for regular security assessments and to align with GDPR's accountability principle.

🚀 EDPB strategy for 2024-2027 unveiled The EDPB has just unveiled its #Strategy for 2024-2027, setting out priorities and detailed actions for the next phase. The strategy is structured around four pillars: 1. Enhancing harmonization and promoting compliance 2. Reinforcing a common enforcement culture and effective cooperation 3. Safeguarding data protection in the developing digital and cross-regulatory landscape 4. Contributing to the global dialogue on data protection ➡️ Over the next four years, the EDPB will continue to promote compliance with data protection laws by developing clear, concise, and practical guidelines on key topics. Additionally, collaboration in enforcement will remain a key priority. ➡️ A new aspect of the strategy is a focus on the interaction with the new digital regulatory framework, including laws such as the DMA or the DSA. ➡️ The EDPB will work to improve cooperation with other regulatory authorities to embed the right to data protection into the overall regulatory architecture. ➡️ The strategy will be complemented by two work programs detailing its implementation. #DataProtection #Privacy #EDPBStrategy #DigitalFuture https://lnkd.in/ey4iG8RF

"In a highly discussed (and criticized) move, Italian Privacy Authority (the Garante) has mandated a dramatic shift in email metadata retention policies relating to employees emails’ metadata. Based on the position of the Garante, employers cannot keep emails’ metadata relating, among others, to the date, time, sender, recipient, subject, and size of employees’ emails, for more than 7 days, extendable, where there is a proven and documented need justifying the extension, by an additional 48 hours. These guidelines, primarily affecting cloud and software as a service providers accustomed to indefinite data retention, introduces a significant challenge: balancing stringent privacy regulations with the needs to protect the business’ properties and interests." #gdpr #dataprotection #dataprivacy https://lnkd.in/eB5HJTst

Twilio SendGrid now has GDPR compliant EU regional sending in GA 💥 . A fantastic milestone for the team, this is the accumulation of over a year's worth of infrastructure and architecture diligence. For more context on the difference between GDPR compliance and Data Residency, hit this blog post. If you think a public Q&A panel hosted by the Twilio Email team would be helpful, give me a ping! https://lnkd.in/gVX6x3DF

For highly regulated industries, protecting sensitive log data before it leaves your premises is a critical component of a data security and compliance strategy. See how Observability Pipelines integrates with Datadog's Sensitive Data Scanner to do just that!

The Dutch data protection authority, known as the Autoriteit Persoonsgegevens (AP), imposed a fine on ICS (International Card Services) for failing to conduct a Data Protection Impact Assessment (DPIA) in accordance with the General Data Protection Regulation (GDPR). The GDPR requires organizations to assess the potential risks associated with processing personal data and to conduct a DPIA when necessary. The AP found that ICS had not adequately assessed the risks to individuals' privacy rights when implementing a new system for processing credit card data. As a result, ICS was fined for non-compliance with the GDPR's DPIA requirements. It is important for organizations to conduct DPIAs to ensure they are proactively addressing privacy risks and complying with the GDPR's data protection principles. You may find mote details on the article by DataGuidance below 👇: