Update from the ITP Sector

Slides:



Advertisements
Similar presentations
European Data Protection Supervisor EC Data Protection Conference, Brussels, 20 May 2009 Transparency and Notification in the Age of Internet: more Effective.
Advertisements

International Employment – latest Digital Employment issues Melanie Lane and Karine Audouze.
The Experience of ASSAL with Insurance Statistics Based on Survey about Sources of Insurance Statistical Information Montevideo- September 2013.
Europe's work in progress: quality of mHealth Pēteris Zilgalvis, J.D., Head of Unit, Health and Well-Being, DG CONNECT Voka Health Community 29 September.
Data Protection and the Internet – New Challenges The reform of the data protection legal framework – current developments Roberto Lattanzi Italian Data.
European Data Protection Supervisor Pharmaceutical Regulatory & Compliance Congress, Brussels, 7 June 2007 European Privacy and Data Protection Policy.
REPUBLIC OF ARMENIA MINISTRY OF FINANCE FINANCIAL INSPECTION (concept) BUDAPEST - JUNE 2012 MAKAR GHAMBARYAN, PhD Head of PIFC and PP methodology department.
1 PARCC Data Privacy & Security Policy December 2013.
European Data Protection Supervisor CRIM, EP, 17 September 12 Cybercrime and Data protection Hielke HIJMANS Head of Unit Policy & Consultations.
Key Points for a Privacy Programme for Multinationals Steve Coope.
František Nonnemann Skopje, 10th October 2012 JHA Data protection and re-use of PSI as a tool for public control–CZ approach.
Data Protection and Enabling Psi Re-use EVPSI & LAPSI Final Meeting
Convention 108 and the EU framework: Differing while Converging
Accountability & Structured Privacy Management
E-VOLUTION OF DATA PROTECTION (IMPLEMENTATION OF DATA PROTECTION REFORM) Developments and Challenges in EU Privacy Law Aspects from a German Perspective.
EU Data Protection Reform: An ICO Perspective
Effective implementation: from Principles to Realities
GDPR (General Data Protection Regulation)
Preparing for a data protection audit 28 September 2017
Overview General Data Protection Regulation (GDPR)
Drafting Principles on Compliance Assurance Andrew Farmer, Institute for European Environmental Policy Make it Work Conference Regulatory Insights, Experiences.
Director, Regulation and Strategy
Understanding EU GDPR from an Office 365 perspective
HIPSSA/SA-1. HIPSSA/SA-1 Support for Harmonization of the ICT Policies in Sub-Sahara AfricaФ or the HIPSSA project is part of a programme funded by.
Ireland’s transition towards the GDPR
General Data Protection Regulations and the IoT
Microsoft 365 Get help with regulatory compliance
WORLD OF CLOUD COMPUTING AFTER GDPR challenges, opportunities and the unknown Matjaž Drev, MA. National Supervisor for Personal Data Protection, Information.
Presentation to GTMC on GDPR
General approach to fundamental rights (including the right to data protection) and FRA’s role in ensuring the necessary protection Dr Mario Oetheimer.
General Data Protection Regulation (GDPR
General Data Protection Regulations Preparing for the upcoming changes in data protection law David Jones & Angharad Williams.
KEY CHANGES TO THE DATA PROTECTION LANDSCAPE
GDPR Overview Gydeline – October 2017
GDPR IS A DATA PROTECTION GAME CHANGER
GDPR support January GDPR support January 2018.
GDPR Overview Gydeline – October 2017
INTRODUCTION TO GDPR 19/09/2018.
Radar Watchkeeping: Have you monitored your Communication department’s radar to avoid collisions with the new Regulation? 43rd EDPS-DPO meeting, 31 May.
Bob Siegel President Privacy Ref, Inc.
Introduction to GDPR 09/11/2018.
GDPR General Data Protection Regulation EU: Coming May 25, 2018
Passenger Mobility Statistics 28 April 2016
GDPR: getting your firm ready
Dan Tofan | Expert in NIS 21st Art. 13a WG| LISBON |
Emergency drill: ECB’s medical scheme and DPIAs
Data protection reform – update from the ICO
State of the privacy union
Review of the Telecom Framework – Security rules Security rules in the proposed European Electronic Communications Code (EECC) Lisbon, 8 March 2017.
Data protection in the Education Sector - understanding the impact of GDPR Tuesday 23rd January 2018.
From DPA to GDPR: the key elements
Aviation Policy Philippe Lenne European Commission
GDPR – Practical Implementation Managing contracts, procurement and relationships with suppliers Terry Brewer Chief Executive.
Privacy and EU GDPR Ayilur Ramnath
The National Working Group
Data Protection What’s new about The General Data Protection Regulation (GDPR) May 2018? Call Kerry on Or .
Revised DPO Policy Paper
Information technologies/NBIC and Big data
Data Protection and Audit
By The Data Protection Commissioner
GDPR & Accountability ISACA Ireland Annual Conference 2018
Data protection by design, Art.25.1 of the GDPR
Reflections on PIPEDA and the Future of Privacy Law in Canada
Data protection, new tech and privacy
General Data Protection regulation (GDPR)
The EDPS: competences and processing of personal data in EU funds
Reference Manual update Item 5.2 of the agenda
General Data Protection Regulation “11 months in”
Working in a digital way
THE IMPACT OF DATA PROTECTION RULES ON CORPORATE INFO SECURITY AND INCIDENT RESPONSE MANAGEMENT – The Energy sector CEER Cybersecurity Workshop Massimo.
Presentation transcript:

Update from the ITP Sector DPO Meeting 31 May 2018 Achim Klabunde Head of Sector IT Policy European Data Protection Supervisor

Agenda Remote inspections: Adaptation to DP Reform web services mobile apps Adaptation to DP Reform Review of Guidelines New concepts

Data Protection Reform GDPR fully applicable 25 May 2018 For EUIs: New Regulation in process ePrivacy Regulation in process New body: EDPB Guidelines on GDPR concepts (for MS and private sector) EDPS Guidelines complemented and reviewed

Data Protection for EUIs New regulation will transpose GDPR Same principles as GDPR New elements: accountability data protection by design and by default data breach notifications portability New entity: EDPB harmonising enforcement and implementation for MS and private sector EDPS remains supervisory authority for EUIs

EDPS technology guidelines eCommunications Web services Mobile devices Mobile apps Security for Personal Data Cloud Computing IT Management and IT Governance

Evolution: EDPS technology guidelines Review after new EUI Regulation and ePrivacy: eCommunications Web services Mobile devices Mobile apps Review after new EUI Regulation: Security for Personal Data Cloud Computing* IT Management and IT Governance* New topics: Data breach notification Portability Data Protection by Design and by Default * already GDPR compliant in substance

New guidelines on technology related subjects Data breach notification: EDPB Guidelines already published Drafting in progress Shortly after new EUI DP Regulation Portability: Adaptation to EUI context Following data subject’s rights guidelines Data protection by Design and by Default: partly addressed in IT management guidelines partly addressed in EDPS opinion on Privacy By Design EDPB guidelines not yet available

New guidelines on technology related subjects Data breach notification: EDPB Guidelines already published Drafting in progress Shortly after new EUI DP Regulation Portability: Adaptation to EUI context Following data subject’s rights guidelines Data protection by Design and by Default: partly addressed in IT management guidelines partly addressed in EDPS opinion on Privacy By Design EDPB guidelines not yet available

Review of existing guidelines on technology related subjects Security of personal data: Revised text compared to Regulation 45/2001 principles unchanged Shortly after new EUI DP Regulation Cloud Computing already based on Regulation 45/2001 and GDPR substance unaffected by new EUI DP Regulation updating legal references possibly adapting neu inter-institutional context IT management and IT governance: possibly adding more examples

Thank you for your attention! For more information: www.edps.europa.eu edps@edps.europa.eu @EU_EDPS @achimkla EDPS European Data Protection Supervisor