-
3 weeks ago | 
mondaq.com | Olivia Mullooly |Colin Rooney |Ian Duffy |Rob Corbet
The UK Information Commissioner's Office (ICO) hasissued a fine against a processor for the first time, fining asoftware provider over GBP 3million for security failings thatexposed the personal data of over 79,000 individuals. The fine follows a ransomware attack in August 2022, wherehackers accessed the health and care systems of a subsidiary of theprovider. The access occurred through a customer account thatlacked multi-factor authentication (MFA).
-
3 weeks ago | 
mondaq.com | Rob Corbet |Colin Rooney |Olivia Mullooly |Ian Duffy
AC Arthur Cox More Arthur Cox is one of Ireland’s leading law firms. For almost 100 years, we have been at the forefront of developments in the legal profession in Ireland. Our practice encompasses all aspects of corporate and business law. The firm has offices in Dublin, Belfast, London, New York and Silicon Valley.
-
1 month ago | 
mondaq.com | Colin Rooney |Rob Corbet |Olivia Mullooly |Ian Duffy
AC Arthur Cox More Arthur Cox is one of Ireland’s leading law firms. For almost 100 years, we have been at the forefront of developments in the legal profession in Ireland. Our practice encompasses all aspects of corporate and business law. The firm has offices in Dublin, Belfast, London, New York and Silicon Valley.
-
1 month ago | 
lexology.com | Lucy Robinson |Colin Rooney |Olivia Mullooly |Ian Duffy |Rob Corbet
The CJEU has ruled on balancing access to information about automated decision making vs. protecting trade secrets. Earlier this year, we gave an overview of the Attorney General’s opinion on Case C-203/22 (Dun & Bradstreet Austria) regarding information required to be provided to data subjects about automated decisions.
-
1 month ago | 
mondaq.com | Colin Rooney |Olivia Mullooly |Ian Duffy |Rob Corbet
AC Arthur Cox More Arthur Cox is one of Ireland’s leading law firms. For almost 100 years, we have been at the forefront of developments in the legal profession in Ireland. Our practice encompasses all aspects of corporate and business law. The firm has offices in Dublin, Belfast, London, New York and Silicon Valley.
-
1 month ago | 
mondaq.com | Olivia Mullooly |Colin Rooney |Ian Duffy |Rob Corbet
On 18 February, the Government published its new LegislationProgramme setting out legislation to be published or drafted as apriority this Spring 2025 (the "Programme"). Asanticipated, the Programme includes legislation to support the mostrecent big ticket EU legislative initiatives in the technologysector, namely, the NIS2 Directive, the Data Act and the AIAct.
-
1 month ago | 
mondaq.com | Colin Rooney |Olivia Mullooly |Ian Duffy |Rob Corbet
The European Data Protection Board (EDPB) has issued a Statementon age assurance which provides some helpful clarity on thistopical issue. Age assurance involves strategies to prevent children fromaccessing inappropriate content and tailoring online experiencesbased on a user's age. This dual-purpose approach seeks tostrike a balance between safeguarding children and respecting theirprivacy. There is an increasing requirement for entities toimplement age assurance.
-
1 month ago | 
lexology.com | Colin Rooney |Olivia Mullooly |Ian Duffy |Rob Corbet |Rosemarie Blake |Fionn Henderson
A recent decision of the French supervisory authority (“CNIL”) to fine a company for its “particularly intrusive surveillance” of employee activity further underlines the risks associated with employee monitoring practices and the need for careful analysis before deploying such measures. Last year, we discussed the risks associated with employee monitoring practices on foot of the CNIL’s decision to fine Amazon €32 million for its use of an employee activity and performance monitoring system.
-
2 months ago | 
lexology.com | Aoife Coll |Colin Rooney |Olivia Mullooly |Ian Duffy |Rob Corbet
The European Data Protection Board (EDPB) has issued a Statement on age assurance which provides some helpful clarity on this topical issue. Age assurance involves strategies to prevent children from accessing inappropriate content and tailoring online experiences based on a user’s age. This dual-purpose approach seeks to strike a balance between safeguarding children and respecting their privacy. There is an increasing requirement for entities to implement age assurance.
-
2 months ago | 
lexology.com | Olivia Mullooly |Colin Rooney |Ian Duffy |Rob Corbet |Rachel Benson |Aoife Mac Ardle
On 18 February, the Government published its new Legislation Programme setting out legislation to be published or drafted as a priority this Spring 2025 (the “Programme”). As anticipated, the Programme includes legislation to support the most recent big ticket EU legislative initiatives in the technology sector, namely, the NIS2 Directive, the Data Act and the AI Act.
