Posts Tagged

Data Protection

Of the European countries, Germany has always had the strictest data protection rules. This includes the legal framework that governs employer’s rights to process personal information of their employees, e.g. to do their payroll, or establish benefit schemes, during recruitment or in workforce investigations. The statutory rules applicable in Germany until May 24, 2018, the Old Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG-old), were based on the European data protection directive and provided for a comprehensive and restrictive scheme for the processing and transfer of personal data, including employees’ data in the workplace. On May 25, 2018, these rules were replaced by the new European General Data Protection Regulation (GDPR) which is binding in all EU member states.

Data breaches and cyber security are a significant concern with U.S. businesses expecting to see an all-time high of nearly 1,500 reported data breaches in 2017. Business owners need to be more vigilant than ever in order to avoid these near-certain attacks, and to protect their employees’ and customers’ personally identifiable information (PII). Generali Global Assistance, in cooperation with the Identity Theft Resources Center (ITRC), in August 2017 released

Every business traveller these days is expected to have access to corporate networks and secure data on multiple devices. These devices include smart phones, tablets, and laptop computers, all of which are vulnerable to lapses in security protocols. Data security and privacy have always been a priority for any corporation − and this includes in-house proprietary data as well as client data − yet the increasingly invasive nature of governments and their agents has the potential to breach a company’s internal controls, as well as pose a multi-jurisdictional litigious liability to its operation.

New regulations dealing with the protection of personal data for the citizens of the European Union went into effect on 25 May, 2016. E.U. General Data Protection Regulation 2016/679 (GDPR) will fully replace Directive 95/35/EC in 2018, after a two-year transitional period. The new regulations, drawn up in 2012 for the purpose of ensuring a consistent and high level of protection of an individual’s personal data and rights, have