Suchergebnisse

• eBook-Kapitel aus dem Buch Digitale Forensik

  Die Zukunft von Digital Forensics und Incident Response

  Bodo Meseke

• Prüfungsleitfaden Revision externer Mitarbeiter

• Spürbare Veränderungen erzielen

  …IT- und Controllingexperten wurde eine virtuelle Datenplattform („Digital Finance Platform“) entwickelt, die eine vollautomatisierte Datenübernahme aus…
• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 4/2019

  Editorial

• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 4/2019

  The EDPB's guidelines 02/2019 on Art. 6(1)(b) GDPR

  - a critical review -
  

  Dr. Malte Engeler

  …understanding of “necessary for the fulfillment of a contract” within Art. 6(1)(b) GDPR (1) and evaluates the legal reasoning behind it (2). It will then try to… …given for this is insufficient (3). It will further demonstrate how the EDPB’s guidelines may lead to undue legal uncertainty (4) and why they were likely… …existing contractual law and will try to show the merits of such an understanding while applying it to the examples given by the EDPB (6). 1. “necessary for… …performance of a contract. Instead, the EDPB requires to go ­beyond the actual terms and demands to identify something that it calls the “objective purpose”… …, the “genuinely necessary” or the “core of the service”. It wants to differentiate these from “artificial expansions” 1 Online available under… …processing is based on the performance of a contract with the data subject, it is ­important to assess what is objectively necessary to perform the contract… …suggested that when it comes to e. g. a mobile photo editing application “neither geo-localisation or online behavioural advertising are necessary for the… …genuine purpose of the contract. Based on this classification of what it deems genuine the EDPB then ­applies its “necessity-test” which – as stated in… …recital 25 – is supposed to be achieved by “a combined, fact-based assessment of the processing for the objective pursued and of whether it is less… …processing in question. Although the controller may consider that the processing is necessary for the contractual purpose, it is important that they examine…

  Alle Treffer im Inhalt anzeigen
• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 4/2019

  PinG - Schlaglichter

  Ausgewählte Rechtsprechung und Verfahren
  

  Philipp Müller-Peltzer, Ilan Leonard Selz

  …Rosenthal Dreyer Partnerschaft von Rechtsanwälten mbB in Berlin und auf IT- und Datenschutzrecht spezialisiert. Er ist außerdem als externer…
• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 4/2019

  Neues aus der Digitalwirtschaft

  Zwickmühle Datenschutzrecht
  

  Michael Neuber
• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 4/2019

  The implementation of the GDPR in Hungary

  The latest news in the first quarter of 2019
  

  Dr. Dániel Oroszvári

  …checks and the employee’s private use of IT systems shall be restricted in accordance with the amended provisions (the bill contains rules of prohibition… …unless the parties explicitly agree otherwise). c) Condominiums The bill also amends the Act CXXXIII of 2003 on condominiums, as it determines the detailed… …proprietors. In Hungary, it was a puzzling question, whether the employers could request the certficates of clean criminal record (“erkölcsi bizonyítvány”) for… …public document, so it is quite remarkable, that in the beginning of 2019, NAIH decided to determine, that these criminal record checks can be obtained in… …geo-location data, if it is used to systematic monitoring or profiling. 16. Monitoring employees’ activities. The purpose of data processing is the processing of… …, reliability, behavior and it connected with profiling. 22. Data processing concerning health data. This means data processing of special categories of data on a…

  Alle Treffer im Inhalt anzeigen
• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 4/2019

  Data breach notification

  Artur Piechocki, Daniel Siciński

  …risky strategy. This, in turn, caused companies to be more keen to inform regulators about their potential issues with data security. It is no different… …expanded significantly. According to the GDPR, a breach only needs to be reported to the authority if it is 1 DLA Piper survey from February 2019, ­available… …personal data by the controller or its staff; 5. hacker attacks resulting in the unauthorized access or encryption of electronic data records. It is still to… …be seen, whether breach ­notifications (or lack of it) will lead to ­imposition of fines in Poland. So far, UODO has been fairly lenient with the use… …American Law School (University of Warsaw), New Technology Law (Ko´zmiński ­University) IT Law at the University of Tartu, ­Estonia (LLM). financial penalty… …PinG 04.19 179 Preparation for data breaches For most data controllers the question is not if the breach will happen and how it can be avoided, but when… …will it happen and how its effects can be mitigated. For this reason UODO puts an emphasis on preparatory and mitigation measures which should be taken… …breach, in terms of the risk it poses to the rights and freedoms of individuals. Such policy should contain at least examples of potential data breaches… …should be taken by the staff involved in a breach, established form of communication (both internal and with supervisory authority and individuals). It is… …feasible, no later than 72 hours after having become aware of it, unless the personal data breach is unlikely to result in a risk to the rights and freedoms…

  Alle Treffer im Inhalt anzeigen
• eJournal-Artikel aus "PinG Privacy in Germany" Ausgabe 4/2019

  Die Verarbeitung von Beschäftigtendaten zwischen Konzernunternehmen

  Zur Reichweite eines aus der DSGVO folgenden unselbstständigen Konzernprivilegs
  

  Sebastian Pfrang