LAST WEEK IN PRIVACY & DATA PROTECTION

The Last Week in Privacy & Data Protection is a weekly newsletter provided to you by Data Privacy Recruitment Ltd.In it we gather the most important, business relevant, and generally interesting news articles, court judgments, and professional opinions related to privacy and data protection.

54th Weekly Newsletter -> 24–30 July 2017

___________________________________________________________________

UniCredit Bank Suffers a Massive Cyber Attack

Italy’s largest bank UniCredit has reported that bank accounts of 400,000 customers have been put at risk and that personal data may have been compromised. The attack was carried out in two stages, the first happened in September and October 2016, and the second happened in June and July this year. So far there is no information on the hackers behind the attack and UniCredit stated that the account passwords had not been compromised, meaning that no unauthorised transactions were carried out.

Read more HERE

___________________________________________________________________

UK Parliament Publishes a Paper on Post-Brexit Data Transfers with EU

Last week the House of Commons Library published a Paper on the impact of Brexit on data protection law in the UK. The Paper explains the current legislative regime on data protection, taking the EU’s data protection framework into account. It explains that any country other than a Member State of the EU and EEA is classed as a ’third country’, and personal data can only be transferred to a third country where an adequate level of protection is guaranteed. Following Brexit the UK may undergo the European Commission’s “adequacy decision” so that data can flow freely from EU and now also EEA Member States. This option is also supported by Elizabeth Denham, the UK Information Commissioner.

Read more HERE

You can find the Full Report HERE

___________________________________________________________________

UK ICO Warns Workers Not to Share Personal Data After Fining a Recruitment Manager

The UK Information Commissioner’s office has issued a fine to a recruitment manager for illegally disclosing the personal information of job applicants to a third party employment agency. The manager pleaded guilty to an offence under section 55 of the Data Protection Act and was fined £573 and ordered to pay costs of £364 and a victim surcharge of £57, totalling £994.

ICO took this opportunity to warn the employees about the potential consequences of illegally sharing personal data that they have access to as part of their employment. ICO Head of Enforcement stated that most people are aware its wrong to share personal data without consent is, but they don’t seem to realise it’s a criminal offence and they could face prosecution.

Read more HERE

___________________________________________________________________

Compiled by Jernej Mavrič, email: jm@dp-recruitment.com

___________________________________________________________________

Follow us on Twitter @LastWeekInPDP and visit our WEBSITE

For privacy jobs and vacancies follow @dprecruitment

Data Privacy Recruitment

Written by

International privacy and data protection recruitment specialists.

Welcome to a place where words matter. On Medium, smart voices and original ideas take center stage - with no ads in sight. Watch
Follow all the topics you care about, and we’ll deliver the best stories for you to your homepage and inbox. Explore
Get unlimited access to the best stories on Medium — and support writers while you’re at it. Just $5/month. Upgrade