Month: August 2021

The new technical specification on a quality label for health and wellness apps has been published by ISO, CEN and IEC. It brings together and builds on guidelines and requirements for apps, by many local and national health organizations around the world to ensure they are safe, reliable and effective.

https://digital-strategy.ec.europa.eu/en/news/mhealth-label-published

ISO/TS 82304-2, Health software – Part 2: Health and wellness apps – Quality and reliability, brings together and builds on guidelines and requirements for apps by many local and national health organizations around the world to ensure they are safe, reliable and effective.

at ISO: https://www.iso.org/news/ref2704.html

The Personal Information Protection Law of China needs to be read together with

• the Data Security Law,
• the Cybersecurity Law,
• the Civil Code,
• and the Critical Information Infrastructure Security Protection Regulations

  Personal Information Protection Law:

  • Stanford’s DigiChina Project’s translation of China’s finalized
    https://digichina.stanford.edu/news/translation-personal-information-protection-law-peoples-republic-china-effective-nov-1-2021

  • Original:
    http://www.npc.gov.cn/npc/c30834/202108/a8c4e3672c74491a80b53a172bb753fe.shtml
  • Analysis by DLA Piper:
    https://blogs.dlapiper.com/privacymatters/chinas-pipl-has-finally-arrived-and-brings-helpful-clarification-rather-than-substantial-change-to-chinas-data-privacy-framework/

  —

  Data Security Law (DSL)

  • Latham Watkins article on the DSL:
    https://www.globalprivacyblog.com/security/chinas-new-data-security-law-what-to-know/

Practical advice on responding to the questionnaires shared by some German DPAs related Schrems II.

https://www.gdd.de/downloads/praxishilfen/prax-praxishilfen-neustrukturierung/GDDPraxishinweise_Fragebogen_Aufsicht_Konzern_SchremsII.pdf

The referenced paper by the Wissenschaftliche Dienst des Deutschen Bundestags on “US-Datenrecht – Zugriff US-amerikanischer Behörden auf Daten”
https://www.bundestag.de/resource/blob/796102/ea53ffe8e08a9ab11e270719263d8c53/WD-3-181-20-pdf-data.pdf

“Orientierungshilfe Datenträgervernichtung entsprechend dem Schutzbedarf der Daten”

also mentions DIN 66399

https://www.tlfdi.de/fileadmin/tlfdi/gesetze/orientierungshilfen/datentragervernichtung.pdf

https://ico.org.uk/about-the-ico/ico-and-stakeholder-consultations/ico-consultation-on-data-transferred-outside-of-the-uk/

open until 07.10.2021, includes:

• International transfer risk assessment and tool
  https://ico.org.uk/media/about-the-ico/consultations/2620397/intl-transfer-risk-assessment-tool-20210804.pdf
• International data transfer agreement
  https://ico.org.uk/media/about-the-ico/consultations/2620396/intl-data-transfer-agreement-202100804.pdf
• Draft UK Addendum to the EU Commission standard contractual clauseshttps://ico.org.uk/media/about-the-ico/consultations/2620398/draft-ico-addendum-to-com-scc-20210805.pdf
• Consultation paper and questions
  https://ico.org.uk/media/about-the-ico/consultations/2620394/consultation-paper-intl-transfers-under-uk-gdpr-20210804.docx

Comments in German by Bernadette Bucheli at https://datenrecht.ch/ico-entwurf-uk-addendum-zu-den-standardvertragsklauseln/

https://edpb.europa.eu/system/files/2021-08/edpb_report_2021_overviewsaressourcesandenforcement_v2_0.pdf