Le règlement général sur la protection des données (« RGPD ») est entré en vigueur le 25 mai 2018. Il modifie la législation antérieure sur le traitement des données personnelles en supprimant notamment le principe de déclaration préalable à la CNIL. Cette déclaration est remplacée par une obligation pour l’entreprise de démontrer la conformité de
The Information Commissioner’s Office in the UK (ICO) has updated its Subject Access Code of Practice (the Code) which deals with requests from individuals for personal information. The amendments are mainly to reflect the Court of Appeal’s decisions in the recent cases of Dawson-Damer and others v Taylor Wessing LLP [2017] EWCA Civ 74 and
The implementation of the General Data Protection Regulation (the GDPR) on 25 May 2018 will see a replacement of the current data protection law set out in the Data Protection Act 1998 and an extension of data protection obligations. Employers process a large amount of data in relation to their employees, not only the information
According to Law 1581 of 2012 and Decree 1377 of 2013, all individuals and legal entities that handle personal data must inform about the existence of such information in their databases.
Holders of personal data must inform that the personal data will be treated in the strictest and most confidential manner, and that the information