25 January 2021 Matteo Bruno Freelance Lawyer To print this article, all you need is to be registered or login on Mondaq.com. Do you want to compare other jurisdictions?. Click here
1 Legal and enforcement framework
1.1 Which legislative and regulatory provisions govern data privacy in your jurisdiction?
Since 25 May 2018, the EU General Data Protection Regulation (2016/679) (GDPR) is the main legal framework for data protection in all countries within the European Economic Area, which includes EU member states, Iceland, Norway and Lichtenstein.
In Ireland, the national law that gives further effect to the GDPR is the Data Protection Act 2018 (DPA 2018), which entered into force on the same day as the GDPR. The DPA 2018, in addition, transposed the EU Law Enforcement Directive (2016/680) (LED) into Irish law and provided for the necessary amendments to the previous data protection framework
Brexit, GDPR, AND The Timeline for Data Breaches Friday, January 22, 2021
The European Union (EU) and the United Kingdom (UK) finally came to an agreement on 24 December 2020 (EU-UK Trade and Cooperation Agreement, the Agreement), less than ten days after the European Data Protection Board (EDPB) published a statement on the consequences a no-deal situation would have on the flows of personal data between the EU and the UK (for previous coverage of General Data Protection Regulation (GDPR) and Brexit, please see our alert here). This statement has since been updated on 13 January 2021.
According to this Agreement, until 30 June 2021, any transfer of personal data to the UK will be made under the current framework and will not be considered as a transfer of data to a third-party country. Nevertheless, at the end of this six-month grace period, and unless a compromise is found through an “adequacy decision,” the UK will become a third-party country in the eyes of
Friday, January 22, 2021
The European Union (EU) and the United Kingdom (UK) finally came to an agreement on 24 December 2020 (EU-UK Trade and Cooperation Agreement, the Agreement), less than ten days after the European Data Protection Board (EDPB) published a statement on the consequences a no-deal situation would have on the flows of personal data between the EU and the UK (for previous coverage of General Data Protection Regulation (GDPR) and Brexit, please see our alert here). This statement has since been updated on 13 January 2021.
According to this Agreement, until 30 June 2021, any transfer of personal data to the UK will be made under the current framework and will not be considered as a transfer of data to a third-party country. Nevertheless, at the end of this six-month grace period, and unless a compromise is found through an “adequacy decision,” the UK will become a third-party country in the eyes of the General Data Protection Regulation no.2016/67
reporting the gap will be necessary because of the impact it can have.
A woman died in Germany while waiting for treatment and her hospital was attacked
Reuters
The EDPB highlights among its examples a hypothetical computer attack on a hospital after one year, that of the pandemic, in which this type of incident has been commonplace.
The most serious case occurred in Germany, where such an attack caused delays and delays in operations, leading to the death of a woman while she was being transferred to another facility. In May, the owner of the Quirónsalud hospitals suffered another hack, details of which became known weeks later.
– Dunja Mijatović, Council of Europe Commissioner for Human Rights.
Story of the week: As the European Commission readies new rules on Artificial Intelligence to be presented in March, we take look at what could be in store.
Podcast: In this week’s edition, we draw on comments from high-level Commission officials to get a picture of the EU executive’s vision for AI in the EU. We also catch up with Ella Jakubowska, a campaign officer for EDRi, the European Digital Rights group, who is behind a new EU Citizens Initiative dubbed ‘Reclaim Your Face,’ which advocates for a blanket ban on facial recognition technologies in public spaces.