We would like to inform you of the new rules of audits/inspections of companies processing personal data approved by the Decree of the Russian Government dated February 13, 2019 No. 146 «On Approving the Rules on Arranging and Exercising Control over Compliance of Personal Data Processing» («Decree»). The Russian Data Protection Authority (DPA) is entitled to investigate companies’ compliance with data protection laws ...
At the end of the last year, the Plenum of the Supreme Court of the Russian Federation (the “Supreme Court”) adopted the Ruling dated December 25, 2018 No ...
Public bodies in the UK (government departments, regulators, local authorities etc.) are legally accountable for the decisions that they make. But what does that mean in practical terms to someone looking to raise a legal challenge to a particular decision? This short blog post provides some very high level guidance in FAQ form. Q. If I think a decision is wrong, am I able to raise a legal challenge against it? A. Maybe ...
Senate Bill 273 goes into effect on March 20, 2019, and creates new requirements for Ohio insurance companies, including health insurance plans, to develop and implement specific information security programs to safeguard nonpublic business and personal information. Senate Bill 273 is based upon the National Association of Insurance Commissioners’ Insurance Data Security Model Law (also referred to as "MDL-668") ...
Issuers and borrowers who enter into continuing disclosure undertakings on or after February 27, 2019 in connection with the offering of municipal securities will be required to report two new material events. The Securities and Exchange Commission (SEC) is implementing the amendment to Rule 15c2-12 of the Securities Exchange Act of 1934 (Rule 15c2-12) by virtue of Release No ...
USCIS recently announced that beginning March 11, 2019 it will require use of a new version of Form I-539 Application to Extend/Change Nonimmigrant Status, a form commonly used to extend or change the status of H-4 and L-2 dependents. USCIS stated it will also require use of a new Form I-539A, Supplemental Information for Application to Extend/Change Nonimmigrant Status ...
Since the EU referendum, ourImmigration Team has been advisingEU nationals and their familiesimpacted by the UK’s decision to leave the EU. The result has thrown up a whole host of issues for EU nationals in the UK, not least how it affects their rights as a family unit. Our earlier post,British passports for EU children, looked at the position for EU children in the UK and how their parents can obtain a British passport on their behalf ...
The Scottish Government has published its first two Scottish Procurement Policy Notes (SPPNs) for 2019, both of which relate to public procurement in Scotland in the event that the UK exits the European Union without an agreement (a ‘no-deal’ Brexit), and has published accompanying draft legislation to implement the changes it proposes. The first policy note (SPPN 1/2019) sets out the Scottish Government’s proposed changes to public procurement legislation ...
When a scion of the investment banking world gets into crypto it is probably worth taking notice. JP Morgan Chase, America's largest bank, has just grabbed everyone's attention with the launch of its very own cryptocurrency, the JPM Coin. JP Morgan intends the internally developed crypto asset to be used in its wholesale payment system, which currently sees daily volumes in the region of $6 trillion ...
The Financial Conduct Authority (FCA) recently launched a consultation on its proposed guidance on cryptoassets (CP19/3) which can be read in fullhere. The move comes as part of the UK Cryptoasset Taskforce's wider look into the regulation of the cryptoasset market. The consultation follows a report published in October 2018 by the Taskforce, which consists of the Bank of England, HM Treasury and the FCA. Our discussion of that report can be readhere ...
In its decision from February 7, 2019, the Bundeskartellamt prohibited Facebook from the further processing of user data which it has generated from so-called third party sources. In order to make use of these personal data in future, Facebook will need the consent of the data subject as defined by the General Data Protection Regulation (GDPR). It remains to be seen whether this will be granted by the majority of users. 1 ...
The General Data Protection Regulation (GDPR) provides for a significant increase of the maximum possible fine for legal infringements compared to previous data protection legislation. Fines of up to 20 million euros or 4 percent of the worldwide annual turnover, whichever is higher, can be imposed (Art. 83 para. 5 GDPR). Yet, the first few months after the introduction of the GDPR in May 2018 were uneventful in this regard. That is now changing, however ...
On December 28, 2018, the Department of Health and Human Services (HHS), in partnership with the Health Sector Coordinating Council (HSSC), published the “Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients” (HICP Publication), which is a four-volume publication designed to provide voluntary cybersecurity practices to health care organizations of all types and sizes, ranging from local clinics to large health care systems ...
The US tech giant, Google is fined EUR 50 million by France's data protection regulator, CNIL, for failing to comply with its General Data Protection Regulation (GDPR) obligations. This is the biggest GDPR fine yet to be issued by a European regulator and the first time that one of the tech giants has been found in breach with the new regulations that came into force in May 2017 ...
The use of the Internet without the use of search engines, which list links to Internet pages after keywords have been entered, is almost unthinkable. In the context of the search results, however, websites may appear that contain personal data and thus fall within the scope of the GDPR ...
On 18 January 2019, the Electronic Invoicing (Public Contracts etc.) Amendment (Scotland) Regulations 2019 (the Regulations) were laid before the Scottish Parliament. They come into force on 18 April 2019 for central government authorities and bodies established under the National Health Service (Scotland) Act 1978, and on 18 April 2020 in relation to all other contracting authorities and contracting entities ...
On January 21, 2019, Google was fined nearly $57 million (approximately 50 million euros) by France’s Data Protection Authority, CNIL, for an alleged violation of the General Data Protection Regulation (GDPR).[1] CNIL found Google violated the GDPR based on a lack of transparency, inadequate information, and lack of valid consent regarding ad personalization. This fine is the largest imposed under the GDPR since it went into effect in May 2018 and the first to be imposed on a U.S ...
To date, the Indonesian government and institutions have largely remained entrenched in an endemic culture of corruption. Despite major victories before the court by the Corruption Eradication Commission (“KPK”) in recent years, crimes of corruption (especially bribery and gratification) remain a major problem at every level of government institution ...
“I don’t want a British passport for myself but should I get one for my child?” This is a common immigration-related enquiry, and onemy team and Ihave been asked about by EU nationals repeatedly since the June 2016 referendum vote ...
The Brexit Withdrawal Agreement negotiated between the European Union and the United Kingdom envisaged that during the United Kingdom's transitional period data protection legislation would have been treated in the same way as with the countries of the European Economic Area. This would have allowed a transfer of personal data from the European Union to the United Kingdom without additional measures to ensure adequate levels of data protection ...
In a landmark decision, the European Union Intellectual Property Office (‘EUIPO’) has ruled that McDonald’s, one of the world’s largest fast food chains, will lose its EU trade mark for “Big Mac” ...
The Court of Justice of the European Union (ECJ) must currently clarify whether and how website operators can legally integrate the so-called "Like" button of Facebook on their website (Case C-40/17). A German online retailer had integrated the "Facebook Like" button into their online shop. Due to the functionality of the "Facebook Like" button, personal information was transmitted to Facebook Ireland each time the website was visited, including the IP address ...
The UK government has announced changes to legislation to reduce the risk of fraud, violence or intimidation faced by company directors as a result of having their residential addresses on the public record. For a number of years, directors have been able to keep their residential address details private by making use of a separate service address, often the company's registered office ...
Now that the holidays are in the rearview and business as usual has begun to pick up where it left off, it’s time for public companies to do a deep download of key securities law updates and business developments of the past year so they are positioned for success in 2019. Below is a review of the 2018 proxy season, along with a summary of new and anticipated changes that may impact reporting and disclosure requirements for the 2019 proxy season ...
Why is April 1, 2019 Important? April 1, 2019 is the first day U.S. Citizenship and Immigration Services (USCIS) may accept H-1B specialty worker petitions for the next fiscal year, which begins October 1, 2019 ...
