Beacon AI newsletter Issue 10 - 4th September 2020

ISSUE 10 - 04 SEPT, 2020

Newsletter The latest privacy news, views and announcements

Good evening,

LISTEN LIVE

As we get back into school term the world of privacy doesn't miss a beat. We are still eagerly watching the Schrems II case unfold as the world waits for direction over EU - US transfers. Never a dull moment folks! Enjoy your weekend.

Schrems II Update from European Data Protection Board In a press release issued today the European Data Protection Board stated that they have created a taskforce to look into complaints filed in the aftermath of the CJEU Schrems II judgement. A total of 101 identical complaints have been lodged with EEA Data Protection Authorities against several controllers in the EEA member states regarding their use of Google / Facebook services which involve the transfer of personal data. Specifically the complainants, represented by the NGO NOYB, claim that Google/Facebook transfer personal data to the U.S. relying on the EU-U.S. Privacy Shield or Standard Contractual Clauses and that according to the recent CJEU judgment in case C-311/18 the controller is unable to ensure an adequate protection of the complainants' personal data. The taskforce will analyse the matter and ensure a close cooperation among the members of the Board.

As a follow-up to the CJEU’s Schrems II ruling and in addition to the FAQ adopted on 23 July, the Board has created a taskforce. This taskforce will prepare recommendations to assist controllers and processors with their duty to identify and implement appropriate supplementary measures to ensure adequate protection

Beacon AI CEO Niamh Parker will be featured on Business Matters with Karl Fitzpatrick this Saturday Morning 5th September at 10.30 am.

PRIVACY NEWS IN BRIEF when transferring data to third countries.

Andrea Jelinek, Chair of the EDPB: “The EDPB is well aware that the Schrems II ruling gives controllers an important responsibility. In addition to the statement and the FAQ we put out shortly following the judgment, we will prepare recommendations to support controllers and processors regarding their duty in identifying and implementing appropriate supplementary measures of a legal, technical and organizational nature to meet the essential equivalence standard when transferring personal data to third countries. However, the implications of the judgment are wide-ranging, and the contexts of data transfers to third countries very diverse. Therefore, there cannot be a one-size-fits-all, quick fix solution. Each organisation will need to evaluate its own data processing operations and transfers and take appropriate measures.”

Brazil’s New Data Protection Law Moves Forward Without Warning – Employers Race To Comply

Beacon AI teams up with Altada for Global State of Privacy event 15th Sept

Forbes reports that "in just six hours of deliberation, the Brazilian Senate propelled a measure aimed at protecting its citizens' data to the desk of the country's President, an action that's been two years in the

Tickets are now available - registration free on eventbrite

New Zealand Stock Exchange Shut Down by DDoS Cyber Attack

DPC says keeping records of food orders is legal At home in Ireland there is controversy over tracking food orders, the Irish

making. Unless vetoed, the Lei Geral

CPO MAgazine reports that "New

Examiner reports that the Health

de Proteção de Dados Pessoais, or

Zealand’s Stock Exchange Market

minister "is under fire from publicans

LGPD, Brazil’s General Data

(NZX) suffered cyber attacks for

and his own backbenchers over the

Protection Law, will likely become

four days in a row, forcing the

introduction of “crazy” new rules

effective by September 16,

government to activate the country’s requiring restaurants and pubs serving

2020.Before the LGPD, data privacy

National Security System. The NZX

food to record all food orders and keep

in Brazil was managed by

was forced to close on the fourth

the information for 28 days."

a patchwork of sectoral

day of the attacks after crashing due

Deputy Data Protection Commissioner

legislation that created confusion and

to systems connectivity issues. The

ambiguity in the rights afforded to

debt market and Fonterra market,

Brazilian citizens. In 2018 the LGPD

however, resumed trading within

was passed as the country’s first

three hours after abruptly shutting

omnibus data privacy

down on Friday afternoon. The

measure. Between political turnover

government could not determine

and the Covid-19 pandemic getting

the source of the “offshore” cyber

LGPD implemented has proven to be

attack, casting doubts on its ability to

challenging for Brazil."

stop future attacks."

I hope you enjoyed our privacy newsletter as we look forward to the weekend. If you have any privacy queries feel free to drop me a line at niamh@beaconai.io From Niamh & the Privacy Beaconettes

Graham Doyle said "The interference with fundamental rights, in this case, is not significant and the data collected and the purpose for its collection mean it is unlikely to result in any significant risks to the rights of an individual."

"It is the role of the DPC to monitor compliance with data protection law and, in this case, the legal basis is sufficient.”