(Jul 30, 2015) Greetings from Dublin! Back in the city of my birth for a fleeting visit, a few meetings and a meal with the Irish information security community courtesy of ISACA Ireland (Information Systems Audit & Control Association). August is almost upon us, and if you know Brussels, then you’ll appreciate that folks have been slowly fleeing the city for sunnier climes in the last weeks. Although still operational, I can sense the change of daily pace in the European quarter; I can drive my car unhi... Read More

Europe Data Protection Digest

Are Dutch Businesses Ready for the GDPR?

(Jul 30, 2015) ComputerWeekly reports that “relatively few businesses in The Netherlands are familiar with the planned General Data Protection Regulation (GDPR).” That’s according to Pieter Lacroix, managing director for the Benelux region at security firm Sophos, who says many organizations have a long way to go before they’ll be able to meet the requirements of the GDPR. Sophos research indicates half of 1,500 respondents surveyed are unaware of their organizations’ data protection policy and only 51 percent... Read More

Europe Data Protection Digest

USB Stick Found To Contain Data on 13,500 Individuals

(Jul 30, 2015) Thousands of Barclays bank customers had their sensitive data potentially compromised after police found a USB memory stick during a raid. The device contained information including names, dates of birth and addresses, Bristol Post reports. The 13,500 individuals affected may have had their job information, salaries, debts, insurance policies, mortgages and passport and national insurance numbers compromised in the incident as well. The report notes “it is thought the personal details could have been in the hands of fraudsters for up to seven years.” The Information Commissioner's Office has said it is “aware of the incident” and “will be making enquiries.” Read More

Europe Data Protection Digest

CNIL Finds Dating Sites Not Protecting Privacy

(Jul 30, 2015) The Local reports on the CNIL’s finding that French dating sites are not protecting users’ privacy. “In total, 13 sites run by eight companies have been put on notice for not protecting ‘sensitive’ data supplied by their clients,” the report states. "Most of these sites offer their users very targeted searches based on their social community, their religious or ethnic (identity), where they live, how they look, their sexual practices and their political opinions," a CNIL spokesperson said. However, the report states, “some sites aren't giving clients sufficient warning of the fact they are handing over the sort of data they are unlikely to share with a neighbour or colleague.” Read More

Europe Data Protection Digest

Minister Backs Campaign Calling for RTBF for Youth

(Jul 30, 2015) UK Minister for Internet Safety and Security Joanna Shields is backing a new campaign called iRights that aims to give children the ability to “easily edit or delete content they have created online,” BBC News reports. The initiative encourages businesses and the government to work together to protect and empower young people online. It touts children’s need for digital literacy and the importance of being well-informed about how their online data may be used. "There is a movement amongst children and young people in terms of reclaiming what they can in terms of privacy,” Shields said. Rachel O'Connell, founder of, says the proposals are in line with many EU laws that would come into force over the next few years. Read More

Europe Data Protection Digest

MPs To Look at Opportunities and Risks

(Jul 30, 2015) Parliament’s Science and Technology Committee plans to assess whether the government is doing enough to help UK entrepreneurs make the most of the increasing availability of data and the power of analytics software, reports. The committee will also look at data protection and privacy, the report states. “Growth in computing power continues at a remarkable pace, bringing enormous economic and social opportunities as new public and private services are developed using big data sets,” said MP Nicola Blackwood, chair of the committee, adding that “there are also growing public concerns about the collection, use and sale of personal data.” Read More

Europe Data Protection Digest

EDRi: EC Will Monitor Retention Laws

(Jul 30, 2015) EDRi’s Protecting Digital Freedom reports the European Commission (EC) has said it “will continue monitoring legislative developments at the national level” for EU data retention laws. The EC sent the response “to the letter we sent on 2 July 2015 asking the commission to investigate illegal data retention laws in the European Union,” the report states, citing an analysis from EDRi and the Electronic Frontier Finland, IT-Political Association of Denmark, Open Rights Group, Panoptykon and others looking at existing national laws in member states that require “the retention of their citizens’ personal data.” The analysis “concluded that the existing laws in at least six countries appear to be in contravention to the Charter of Fundamental Rights,” the report states. Read More

Europe Data Protection Digest

Stephen Wong Kai-yi Named Privacy Commissioner

(Jul 30, 2015) Long-time barrister Stephen Wong Kai-yi has been appointed as Hong Kong’s next privacy commissioner, South China Morning Post reports. "I hope I could strengthen the work (of the commission) and maintain its high quality," Wong said. He also “stressed that it was important to protect the privacy of every individual as well as the free flow of information—which was a core value of Hong Kong,” the report states, adding he hopes “through education, Hongkongers could take ‘control’ of their own data—meaning they could decide whether to give it out or not—and to understand the consequences of passing it to third parties.” Wong begins his term August 4. (Registration may be required to access this story.) Read More

Asia-Pacific Dashboard Digest