Ian Duffy

3 weeks ago | mondaq.com | Kerry Elise Burns |Colin Rooney |Olivia Mullooly |Ian Duffy

Implementing blockchain technology in a GDPR compliantmanner requires careful assessment, consideration and planning. Toassist organisations in navigating the risks and challenges indoing so, the European Data Protection Board(EDPB) has adopted guidelines on processingpersonal data through blockchain (Guidelines).

2 months ago | mondaq.com | Lorraine Sheridan |Colin Rooney |Olivia Mullooly |Ian Duffy

The European Commission has today published its AI ContinentAction Plan (the "Plan") to make the European Union thedestination of choice for AI companies. BriefingThe Plan does this by outlining a strategy that will focus inproviding clear rules on AI, creating the appropriateinfrastructure for AI development, providing high quality data forAI purposes, stimulating the development and adoption of AIalgorithms and ensuring the workforce is equipped with thenecessary AI skills.

2 months ago | mondaq.com | Rhiannon Monahan |Ian Duffy |Robert Cain |Sarah Thompson

In the final article of our mini-series 'A PractitionersGuide to IT Outsourcing', Rhiannon Monahan, an Associate Director within ourGovernance and Consulting Services Group highlights the keycomponents of a robust vendor management programme, including keyregulations to be incorporated into your oversight and duediligence activities.

2 months ago | mondaq.com | Olivia Mullooly |Colin Rooney |Ian Duffy |Rob Corbet

The UK Information Commissioner's Office (ICO) hasissued a fine against a processor for the first time, fining asoftware provider over GBP 3million for security failings thatexposed the personal data of over 79,000 individuals. The fine follows a ransomware attack in August 2022, wherehackers accessed the health and care systems of a subsidiary of theprovider. The access occurred through a customer account thatlacked multi-factor authentication (MFA).

2 months ago | mondaq.com | Shay Buckley |Colin Rooney |Olivia Mullooly |Ian Duffy

We previously provided a brief overview of the Data Act'skey concepts, definitions and applicable timeline in Part One: Harnessing the power of data under theData Act and the new data access right in Part Two: Data access and product design under theData Act. A key element to increase the utilisation of data isthe standardisation of the terms and conditions for sharing datagenerated by connected products and the services related to thoseconnected products.