The European Data Protection Board has issued new advice to hospitals regarding what action to take in the event of a cyber-attack.
Currently released in draft form, the new set of recommendations urges healthcare providers hit with ransomware to report the attack even if no patient data is accessed or exfiltrated.
The guidelines state: The internal documentation of a breach is an obligation independent of the risks pertaining to the breach and must be performed in each and every case.
A series of attack scenarios are described in the recommendations along with appropriate prior measures, risk assessment, mitigation, and obligations.
WhatsApp on Friday postponed a data-sharing change as users concerned about privacy fled the Facebook-owned messaging service and flocked to rivals Telegram and Signal.
Friday, January 15, 2021
On January 15, 2020, the European Data Protection Board (“EDPB”) and European Data Protection Supervisor (“EDPS”) adopted joint opinions on the draft Standard Contractual Clauses (“SCCs”) released by the European Commission in November 2020, both for international transfers (“International SCCs”) and for controller-processor relationships within the EEA (“EEA Controller-Processor SCCs”).
Once finalized, the International SCCs will replace the existing sets of SCCs, which were drafted under the Data Protection Directive, for transfers of personal data from within the EEA to organizations in non-EEA countries that have not been recognized as providing an adequate level of data protection. In those cases, the EU General Data Protection Regulation (“GDPR”) requires that a transfer mechanism be implemented. In the wake of the invalidation of the Privacy Shield in the Court of Justice of the European Union’s (the “CJEU
WhatsApp has postponed a data-sharing change as users concerned about privacy fled the Facebook-owned messaging service and flocked to rivals Telegram and Signal. The smartphone app, a huge hit across the world, canceled its February 8 deadline for accepting an update to its terms concerning sharing data with Facebook, saying it would use the pause to clear up misinformation