Data Protection And Compliance In Context

Large-scale data loss continues to make headline news, highlighting the need for stringent data protection policies, especially when personal or commercially sensitive information is at stake. This book provides detailed analysis of current data protection laws and discusses compliance issues, enabling the reader to construct a platform on which to build internal compliance strategies. The author is chair of the National Association of Data Protection Officers (NADPO).

A comprehensive guide which explains the content of data protection laws; provides practical advice on protecting data privacy under the Data Protection Act, human rights laws and freedom of information legislation; and gives data controllers a platform for building compliance strategies.

Companies, lawyers, privacy officers, compliance managers, as well as human resources, marketing and IT professionals are increasingly facing privacy issues. While information on privacy topics is freely available, it can be diffcult to grasp a problem quickly, without getting lost in details and advocacy. This is where Determann’s Field Guide to Data Privacy Law comes into its own – identifying key issues and providing concise practical guidance for an increasingly complex field shaped by rapid change in international laws, technology and society.

Companies, lawyers, privacy officers, developers, marketing and IT professionals face privacy issues more and more frequently. Much information is freely available but it can be difficult to get a grasp on a problem quickly, without getting lost in det

'This book is a timely and welcome addition to the available literature, providing a well structured introduction to the key facets of international data privacy compliance. the guide provides the reader with clear guidance on managing the regulatory risk associated with data privacy compliance, notably in both the EU and the US. the use of checklists and an A-Z chapter are particularly welcome, as is the solution focused approach adopted throughout the guide. I recommend this book as a useful tool for obtaining an understanding of the practical issues thrown up by international data protection compliance.' – Colin Rooney, Partner, Technology Group, Arthur Cox 'Understanding and having an awareness of international data protection laws is becoming increasingly essential – not just for privacy professionals – but for everyone in our globally-networked and information-driven economy. True to its title, Determann's Field Guide is a smart, pragmatic, highly personal, and often funny reference that makes short work of simplifying opaque concepts and obliterates legal-jargon. In its eminently readable form, it will empower the uninitiated and deepen the understanding of the seasoned professional.' – Laura Hamady, Senior Corporate Counsel, Regulatory and Privacy, US 'This is a blueprint for an enterprise-wide privacy program that will cover 99% of all situations your company might encounter worldwide. It moves beyond "what do I need to think about" to "what do I need to do". An excellent resource for anyone tasked with running a holistic privacy program, or for CEOs who are considering whether they need to implement such a program.' – Patrick Hagan, JD, Privacy Consultant 'Determann's Field Guide takes the complicated subject of international privacy and breaks it down into helpful topics, checklists and suggestions. the focus on practical advice in an easy-to-use format makes it an ideal reference tool for in-house privacy professionals.' – Rebecca Matthias, Senior Corporate Counsel, Privacy & Data Protection, VMware, Inc. 'With the proliferation and diversity of privacy risks and international regulatory controls, and the increasingly obvious intersection of data security and privacy, no company can afford to overlook the importance of an up-to-date and well tailored global compliance program. For companies doing business in the cloud or transacting with consumers, a well considered international data privacy compliance program is not only a critical legal and liability control – it's fundamental to earning and maintaining the trust of your customers. In this comprehensive yet concise "field guide," Professor Determann has managed to consolidate an enormous breadth of legal requirements and best practices knowledge into a single, definitive reference that should be quite accessible even to non-privacy professionals. As general counsel of a multinational public company, I consider Determann's Field Guide to International Data Privacy Law Compliance to be a pragmatic and indispensable reference in improving our compliance program, and highly recommend it for anyone looking for clear, practical guidance on establishing or improving their data privacy program!' – Felix Sterling, Senior Vice President & General Counsel at Trend Micro Inc, US 'Determann's Field Guide to International Data Privacy Law Compliance is an indispensable handbook for international privacy professionals. Written by a star lawyer, it explains how to develop and maintain a corporate privacy compliance program. the book manages both to explain the "big picture" of global privacy challenges and to point out relevant details in a clear and concise fashion.' – Paul M. Schwartz, Berkeley Center for Law & Technology, US 'Determann's Field Guide is an insightful practical guide which should be on every privacy practitioner's desk.' – Daniel Blaettler, Vice President & Associate General Counsel, Verisign 'Lothar Determann has done a great service to the field of privacy by providing practical, workable advice for a dynamic and challenging issue. This Field Guide will certainly be a valuable, and soon dog-eared, addition to any privacy professional's reference library.' – J. Trevor Hughes, President and CEO, International Association of Privacy Professionals Companies, lawyers, privacy officers, developers, marketing and IT professionals face privacy issues more and more frequently. Much information is freely available, but it can be difficult to get a grasp on a problem quickly, without getting lost in details and advocacy. This is where Determann's Field Guide to International Data Privacy Law Compliance comes into its own – helping to identify issues and provide concise practical guidance in an increasingly complex field shaped by rapid change in international laws, technology and society. Determann's field guide focusses on the compliance issues that are likely to be encountered by the majorities of companies. Starting with an overview of the key concepts in the field in order to provide a basic understanding of data privacy, the book offers practical advice on initiating, maintaining, and then auditing a compliance program, with checklists designed to assist this process. the book also gives step-by-step guidance on drafting documentation for data privacy compliance, including notices, consent forms, agreements, protocols, request forms and government notifications, and provides sample documentation to use as a model. A handy A-Z of data privacy compliance completes the book and gives a concise tour of privacy-related issues, from Advertising to Zip Codes. Lightweight enough to carry around, the book should be on the desk and in the briefcase of every compliance officer and corporate counsel. Key Features: • Concise overview of the practical requirements of data privacy compliance • Step-by-step guide to starting and maintaining a compliance programme • Advice on drafting documentation gives the user the tools to complete an end-to-end process • Glossaries of key acronyms and terms help the user to navigate through the field • Includes sample documentation and checklists to ensure the clearest possible guidance • Clear structure facilitates quick reference.

Companies, lawyers, privacy officers and marketing and IT professionals are increasingly facing privacy issues. While information is freely available, it can be difficult to grasp a problem quickly, without getting lost in details and advocacy. This is where Determann’s Field Guide to Data Privacy Law comes into its own – identifying key issues and providing concise practical guidance for an increasingly complex field shaped by rapid change in international laws, technology and society.

The complexities of implementing the General Data Protection Regulation (GDPR) continue to grow as it progresses through new and ever-changing technologies, business models, codes of conduct, and decisions of the supervisory authorities, and the courts. This eminently practical guide to implementing the GDPR – written in an original, problem-solving style by a highly experienced data protection expert with equal knowledge of both law and technology – provides a step-by-step project management approach to building a GDPR-compliant data protection system, assessing, and documenting the risks and then implementing these changes through processes at the operational level. With detailed attention to case law (Member State, ECJ, and ECHR), especially where affecting high-risk areas that have attracted scrutiny, the guidance proceeds systematically through such topics and issues as the following: required documentation, policies, and procedures; risk assessment tools and analysis frameworks; children’s data; employee and health data; international transfers post-Schrems II; data subject rights including the right of access; data retention and erasure; tracking and surveillance; and effects of technologies such as artificial intelligence, biometrics, and machine learning. With its practical examples derived from the author’s experience in building GDPR-compliant software, as well as its analysis of case law and enforcement priorities, this incomparable guide enables company data protection officers and compliance staff to advise on key issues with full awareness of the legal and reputational risks and how to mitigate them. It is also sure to be of immeasurable value to concerned regulators and policymakers at all government levels. “…it's going to be the go to resource for practitioners.” Tom Gilligan, Data Protection Consultant, September 2021 "I purchased this book recently and I’m very glad I did. It’s the textbook I have been waiting for. As someone relatively new to data protection, I was finding it very difficult to find books on the practical side of data protection. This book is very clearly laid out with practical examples and case law given for each topic, which is immensely helpful. I would recommend it to any data protection practitioners." Jennifer Breslin, LLM CIPP/E, AIPP Member

The book presents timely and needed contributions on privacy and data protection seals as seen from general, legal, policy, economic, technological, and societal perspectives. It covers data protection certification in the EU (i.e., the possibilities, actors and building blocks); the Schleswig-Holstein Data Protection Seal; the French Privacy Seal Scheme; privacy seals in the USA, Europe, Japan, Canada, India and Australia; controversies, challenges and lessons for privacy seals; the potential for privacy seals in emerging technologies; and an economic analysis. This book is particularly relevant in the EU context, given the General Data Protection Regulation (GDPR) impetus to data protection certification mechanisms and the dedication of specific provisions to certification. Its coverage of practices in jurisdictions outside the EU also makes it relevant globally. This book will appeal to European legislators and policy-makers, privacy and data protection practitioners, certification bodies, international organisations, and academics. Rowena Rodrigues is a Senior Research Analyst with Trilateral Research Ltd. in London and Vagelis Papakonstantinou is a Senior Researcher at the Vrije Universiteit Brussel in Brussels.