IAPP - International Association of Privacy Professionals’ Post

Consent isn't just a checkbox; it's a fundamental aspect of the DPDP Act. It signifies an individual's permission for their personal data to be processed by an organisation. But it's not a simple "yes" or "no" scenario for organisations. The Digital Personal Data Protection Act lays out specific criterias for consent to be valid. Watch the video below for understand it better! If you need expert guidance to navigate through DPDPA for your organisation, feel free to reach out to us. Details in the comments!

Navigating the complexities of cross-border data transfer just got clearer under the Digital Personal Data Protection Act, of 2023. Personal data can now be transferred internationally by data fiduciaries, except to countries blacklisted by the Central Government. This 'blacklisting' approach allows for broader flexibility, ensuring data moves freely to most destinations worldwide. However, if other laws or sectoral regulations offer stricter data protection or restrictions, those will take precedence. . . . #sls #symbiosis #symbiosislawschool #noida #LegalInsights #personaldata #dpdpact2023 #dataprotection

Knowledge of the principles of the Digital Personal Data Protection Act (DPDP Act) is crucial in today's data-driven world. It confers certain rights to all of us. If you want to learn more, check out the link to the Ministry of Electronics and IT's press information bureau post that I'm sharing. Stay informed and protect your data! #dataprotection #DPDPAct https://lnkd.in/g9mN4CTA

Interesting to see the interest here where they call out: "from a consumer protection perspective: addressing the use of consumer data (including practices such as combining personal data), promoting data portability, addressing business practices such as unfair trading and providing reporting and compliance mechanisms" AND that they have picked up on where the UK DMA are addressing certain aspects. #Privacy #adtech

eIDAS Regulation: A Market Booster for Data Aggregators and Intermediaries 📌 The verified attributes and zero-knowledge proofs added to eIDAS-compliant wallets must originate from and be verified against authentic sources. 📌 This verification should be conducted either directly by the qualified trust service provider or through designated intermediaries. 📌 Intermediaries can add value to authentic sources from both the public and private sectors by eliminating the need for a separate wallet-compatible API on top of the existing data exchange layer. These intermediaries provide the required wallet APIs and consume existing data sources. ❓Do you think this has a negative influence on privacy, or does it provide a valuable boost for adoption instead? Comment below.

⏱️3 more days to go: Compliance deadline for the #DigitalServicesAct Here's what DOT Europe's members are worrying about: ⚠️Lack of guidance provided by the Commission and Digital Services Coordinators (DSCs), particularly for smaller intermediaries and non-VLOP platforms. ⚠️ Without proper support, there is a risk of varying interpretations and confusion among providers potentially jeopardizing DSA’s integrity. We are calling for: 1️⃣prioritizing compliance support over enforcement 2️⃣legal certainty 3️⃣coherence across the EU framework 4️⃣consistent application of rules by DSCs to avoid disadvantages for providers

⚠️FinCEN is seeking comments on the #CIP Requirement to modernize #AML practices in light of technological advancements. Submit your comments by March 28, 2024 to participate in the conversation! Comment here ➡️ https://lnkd.in/gB8p8zzc  #ACAMS #ACAMSNV #FinCEN

☝ In case you missed it! Valid from 15 September 2024: The Swiss government agrees personal data can be sent to US. Implications for Switzerland-based companies: They can continue to transfer personal data to the U.S. provided the U.S. recipient is certified under the Swiss–U.S. DPF. This should reduce the legal and compliance burdens associated with cross-border data transfers. The U.S. Department of Commerce maintains and publishes a list of organizations that have self-certified their compliance with the Swiss–U.S. DPF principles. This list is publicly accessible, and companies in Switzerland can consult it to verify whether a U.S. company is certified: https://lnkd.in/etPz6kzy

The Data Protection and Digital Information Bill is being carried over to the next parliamentary session, and the Information Commissioner has updated their response. This is a big deal for anyone who cares about how their data is used, as the Bill will make major changes to the way data is collected, stored, and used in the UK. The Information Commissioner is calling for a number of changes to the Bill, including: 🚸 Stronger safeguards for children's data 🈺 Clearer rules on how businesses can use our data 📠 A new right to object to automated decision-making These are all important changes that will help to protect people's privacy. But it's important to remember that this is still at an early stage, and there's a lot of work to be done before it becomes law. The Data Privacy Group Ltd. will be keeping a close eye on this issue and will let keep you all updated on what happens next. In the meantime, you can find out more about the Bill and the Information Commissioner's response on the ICO website. For more posts like this, and to stay up to date with everything data privacy related, connect with us on LinkedIn. https://lnkd.in/gDqD2cwd #TheDataPrivacyGroup #DataPrivacy #DigitalRights #UK

𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐈𝐃 𝐥𝐞𝐠𝐢𝐬𝐥𝐚𝐭𝐢𝐨𝐧 𝐩𝐚𝐬𝐬𝐞𝐝 𝐏𝐚𝐫𝐥𝐢𝐚𝐦𝐞𝐧𝐭 The Digital ID Bill 2024 and the Digital ID (Transitional and Consequential Provisions) Bill have passed Parliament, expected to receive Royal Consent in the next few weeks, with an estimated commencement date in November 2024. This legislative framework is intended to strengthen the existing voluntary Digital ID accreditation scheme, support the expansion and governance of the Digital ID system, and strengthen privacy and consumer protection. Within two years, Australians are expected to be able to create their Digital IDs through their preferred service providers and be able to use such IDs to verify who they are at both public and private sector entities. The 𝑨𝑪𝑪𝑪 will be appointed as the initial Digital ID regulator, with responsibilities of: ✳ accrediting Digital ID service providers, ✳ approving which services can participate in the Australian Government Digital ID System (AGDIS), and ✳ enforcing the non-privacy aspects of the legislation. The 𝑰𝒏𝒇𝒐𝒓𝒎𝒂𝒕𝒊𝒐𝒏 𝑪𝒐𝒎𝒎𝒊𝒔𝒔𝒊𝒐𝒏𝒆𝒓 will be responsible for regulating and enforcing the privacy-related aspects of the Digital ID accreditation scheme. Curious to explore the interactions between this upcoming legislative framework and the AML/CTF Act & Rules, and the Privacy Act. For more information: https://lnkd.in/g5bVgXGQ https://lnkd.in/gqyRtVqE