News – Page 31 – Privacy Design®

DPIA Google G Suite Enterprise Data protection impact assessment on the processing of personal data on three platforms with the Chrome browser and as installed apps – in English (171 pages):
https://www.rijksoverheid.nl/documenten/publicaties/2021/02/12/google-workspace-dpia-for-dutch-dpa

A bit of a summary as a blog post by the company who helped draft it:
https://www.privacycompany.eu/blogpost-en/privacy-assessment-google-workspace-g-suite-enterprise-dutch-government-consults-dutch-data-protection-authority-on-high-privacy-risks

March 17, 2021March 17, 2021

SMS is not secure for 2FA

https://krebsonsecurity.com/2021/03/can-we-stop-pretending-sms-is-secure-now/

also SIM Swaps

https://en.wikipedia.org/wiki/SIM_swap_scam

March 9, 2021March 9, 2021

Leitfaden zum Datenschutz in medizinischen Forschungsprojekten – Generische Lösungen der TMF 2.0

(Data protection/privacy in healthcare research, pseudonymization/pseudonymisation, 2014)

https://www.mwv-berlin.de/produkte/!/title/leitfaden-zum-datenschutz-in-medizinischen-forschungsprojekten/id/258

Also available via https://library.oapen.org/handle/20.500.12657/37299
at direct link below
https://library.oapen.org/bitstream/handle/20.500.12657/37299/leitfaden-zum-datenschutz-in-medizinischen-forschungsprojekten.pdf?sequence=4&isAllowed=y

March 9, 2021March 9, 2021

USA: HHS security risk assessment tool (HIPAA)

https://www.healthit.gov/topic/privacy-security-and-hipaa/security-risk-assessment-tool

March 4, 2021March 4, 2021

USA: Virginia passes the Consumer Data Protection Act

IAPP article

https://iapp.org/news/a/virginia-passes-the-consumer-data-protection-act/

(incl. data protection assessments)

March 4, 2021

EAID – slides/recording – 02.03.2021: Datenschutz – Zertifizierung – Quo Vadis?

https://www.eaid-berlin.de/datenschutz-zertifizierung-quo-vadis/

includes

Die Idee hat eine lange Geschichte…und auch eine Zukunft?
• Gabriel Schulz, Stellvertreter des Landesdatenschutzbeauftragten Mecklenburg-Vorpommern

Der erste Versuch hat Erfahrungen – wie gut sind diese?
• Sebastian Meissner, EuroPriSe, Head of the EuroPriSe Certification Authority

Zertifizierungen nach Artikel 42 DSGVO und Zertifizierungsstellen gem. Art. 43 DSGVO lassen aber immer noch aus sich warten. Warum?
• Dr. jur. Raoul Kirmes, DAkkS; Sachgebiet Grundsatzaufgaben

Quo Vadis Datenschutzzertifizierung?
• Frederick Richter, Vorstand Stiftung Datenschutz

March 3, 2021March 3, 2021

The Netherlands: Privacy Assessment of Google Workspace G Suite Enterprise suite (DPIA)

“Commissioned by the Ministry of Justice and Security, Privacy Company investigated the privacy risks of G Suite Enterprise, with work and communication apps such as Gmail, Chat, Meet, Forms, Docs and Slides. Meanwhile, Google has renamed these services into Google Workspace.”

https://www.privacycompany.eu/blogpost-en/privacy-assessment-google-workspace-g-suite-enterprise-dutch-government-consults-dutch-data-protection-authority-on-high-privacy-risks