On 25 September 2020 Parliament approved new regulations for Blockchain and Distributed Ledger Technology (DLT).(1) The goal of this new legal framework is to further establish and increase Switzerland's reputation as a leading, innovative and sustainable location for fintech and DLT companies. DLT framework DLT allows shared data management and, in particular, shared accounting among participants that do not know or do not trust each other's identity ...
In recent months a Customs Destination Certificate (CDA, in its Spanish acronym) will be required for medical devices1that do not have a sanitary registration to be imported into Chile. The CDA must be requested and obtained by the importer through the Institute of Public Health’s (ISP, id.) GICONA 2.0 electronic platform, and will require the payment of an official fee corresponding to the service code 4111027, “Customs Destination Certificate, law 18,164” ...
Introduction On 16 October 2020 the government reinforced the urgent measures to limit the further spread of COVID-19. Teleworking is no longer highly recommended, but has become the standard for all employees whose roles allow for telework. Yet, the new rule is less far-reaching than that in place during the first lockdown in March 2020, as an exception now applies when the continuity of business operations, activities and services does not allow for teleworking ...
We would like to inform you of several draft laws in the TMT area, that were adopted by the Russian Parliament, and finally signed by the President. We have prepared a short description for you below ...
The Finnish Criminal Code has been recently amended to combat cybercrime more effectively. The Criminal Code now takes a tougher stance against cybercrime by amending certain provisions, introducing completely new provisions and more severe penalties. The amendments entered into force 4 September 2015. From now on, cybercrime offences, such as illegal data interference and identity theft, can be found under their own titles in the Criminal Code ...
Along with the prediction that the continued growth of the Internet of Things (IoT) will transform our everyday lives and how we do business, we can also anticipate that the increased number of connected devices will bring about additional challenges, including greater security and privacy-related risks ...
The UK’s new safeguard mechanism for international transfers of personal data came into force on 21 March 2022. Organisations that make restricted transfers of personal data should review their data transfer processes now ...
Effective Jan. 1, 2021, Florida law will require all public employers, as well as some private employers, to enroll in and use the E-Verify system. What is E-Verify? E-Verify is a free federal electronic database that allows employers to quickly validate documentation presented by new hires to establish that a new employee is lawfully eligible for employment in the United States ...
In November 2021, the New York City Council passed a bill requiring that artificial intelligence (“AI”) tools used by employers to make or assist in hiring decisions or internal promotions undergo bias audits to screen for discriminatory effects. Under the City Charter, the bill became law a month later after it was returned unsigned to the Council by then-mayor Bill DeBlasio ...
Cybersecurity is one of the most critical challenges facing our nation and our economy. U.S. regulators on both the state and federal level are working to keep pace with the challenges and risks posed by cybercrime. On March 1, 2017, the New York State Department of Financial Services (DFS) issued a new cybersecurity regulation designed to protect financial institutions, their information technology systems, and their customers from cybercrime1 ...
In recent months, the Knesset Constitution, Law and Justice Committee approved the Protection of Privacy Regulations (Information Security) 5777-2017 (hereinafter: the "Regulations"). The Regulations mark a landmark change in the field of information security in Israel and they impose substantial obligations on database owners ...
In this newsletter you will find a selection of the main legal news related to the fintech and digital banking market in Argentina. 3.0 transfers New open and interoperable model for instant payments As we anticipated in previous bulletins, the Central Bank (BCRA) completely updated the system of immediate electronic payments existing until now, taking it to a much more ambitious, interoperable and open model, which aims to interconnect bank accounts and accounts on an equal footing ...
In recent years, Russia has focused on regulating its IT area. In particular, this has been needed due to the increasing number of cases, when prohibited information has been distributed on various large Internet resources, such as a social network. However, according to Russian government agencies, despite the risks of possible sanctions, many foreign companies still do not respond quickly enough to government requests, or ignore the demands to remove prohibited information ...
On October 22, 2013, the National Institute of Standards and Technology (“NIST”) issued the Preliminary Cybersecurity Framework (the “Preliminary Framework”), as required under Section 7 of the Obama Administration’s February 2013 executive order, Improving Critical Infrastructure Cybersecurity (the “Executive Order”). The Preliminary Framework includes standards, procedures and processes for reducing cyber risks to critical infrastructure ...
On February 26, 2013, the National Institute of Standards and Technology ("NIST") issued a Request for Information ("RFI") to gather comments regarding the development of a framework to reduce cybersecurity risks to critical infrastructure. As we previously reported, the Obama Administration’s executive order, Improving Critical Infrastructure Cybersecurity (the "Executive Order"), released on February 12, 2013, directs NIST to coordinate development of this framework ...
The National Information Technology Development Agency (NITDA) has extended the timeline for filing the 2021 data audit report from 15 March 2021 till 30 June 2021. In 2019, the National Information Technology and Development Agency (‘NITDA’) issued the Nigerian Data Protection Regulation (‘NDPR’) ...
Why Proportionality Should Be Considered As Part of the Preservation Parties have a general duty to preserve and produce relevant electronically stored information (ESI). This duty, however, is bounded by a proportionality requirement because e-discovery should not be allowed to be the tail that wags the dog. Courts and parties have been adept at applying proportionality requirements to the production of ESI, but they have struggled to apply proportionality to the preservation of ESI ...
It has been reported by various news outlets that Ireland’s Data Protection Commission (DPC) has prepared a draft decision which may well lead to the end of EU-US data transfers. This draft decision is a consequence of the concerns which have been raised by USA surveillance laws and practices and comes in the wake of the invalidation of the EU-US Privacy Shield by the Court of Justice of the EU a few years ago ...
Earlier this year, the UK government launched 'Tech Nation'; an interactive data project that shows the growth of digital businesses within specific areas/regions across the UK. The report is the first of its kind and ranked Belfast as the second highest region in the UK in terms of the highest average company turnover in this sector, with Greater Manchester securing the top spot and Sheffield, Inner London and South Wales coming third, fourth and fifth respectively ...
Background Disqus is an American company offering online public comment sharing services. These services were previously used by various Norwegian online newspapers. The Data Protection Authority has investigated whether Disqus has been sharing information about the users of the comment sections with marketing companies, without the knowledge of neither the users nor the owners of the online newspapers, and in breach of the GDPR ...
Norway fully integrated the provisions of PSD2 and the Payment Accounts Directive into its legal system with the entry into force of the new Financial Agreements Act on January 1, 2023. The Norwegian Central Bank made significant strides in its exploration of digital central bank currency, completing the fourth phase of its initiative. This phase focused on testing and validating technical solutions, with findings reported on December 18, 2023, indicating successful outcomes ...
