We’ve updated our Consumer Data Right (CDR) guidance to reflect the latest version of the CDR rules around outsourcing. In the CDR system, an outsourced service provider may be engaged by an accredited person, CDR representative, or existing outsourced service provider, to handle service data under an outsourcing arrangement. Our guidance outlines privacy obligations when participating in this type of arrangement for: – principals of an outsourced service provider: https://lnkd.in/e6cXpnus – outsourced service providers: https://lnkd.in/ezirPUGq
Office of the Australian Information Commissioner’s Post
More Relevant Posts
-
Our white paper is live! We assessed the performance of the Wi-Fi 7 clients with Multi-Link Operation (MLO) both enabled and disabled across these different locations. Interested? Learn more with our new white paper: https://lnkd.in/evRbQ8ff #ExcentisInnovates #ByteBlower #WiFi7Exploration #MLOTesting #L4STesting #NetworkTechFuture #Whitepaper
-
All Consumer Data Right (CDR) providers must have a CDR policy. Having a clear and up-to-date CDR policy that covers how you manage CDR data, how customers can make an enquiry or complaint, and how they can access and correct their data is critical for building trust and engaging customers. Find out more: https://lnkd.in/dm5STsCs
-
In response to some of the defenders of the HPSCI bill on 702, we have updated our blog post to explain the problem with the new legislation in more detail. See the December 12, 2023 Update. #FISA, #702. https://lnkd.in/e4QEKzAX
House Intelligence Committee FISA “Reform” Bill Would Greatly Expand the Class of Businesses and Other Entities Required to Assist in FISA 702 Surveillance
https://www.zwillgen.com
-
See how #Fortify on Demand provided a business-critical solution for a leading telecommunications group, driving their #datasecurity and regulatory compliance. Read the case study: https://otcs.cc/3SQbPuD
-
-
The 2021/22 #DSPT is no longer valid and cannot be used as evidence of your current data protection arrangements. Review and republish your DSPT with support from #BetterSecurityBetterCare Watch a webinar recording, access slides, and useful links 👇👇 https://lnkd.in/eSAuRpks #AdultSocialCare
-
See how #Fortify on Demand provided a business-critical solution for a leading telecommunications group, driving their #datasecurity and regulatory compliance. Read the case study: https://oal.lu/tbip3
-
-
With the FCC's 1:1 consent requirement coming I would recommend to everybody to create a FLAG field in their CRMs, Dialing Technology Platforms, and internal data warehouses indicating you have the 1:1 consent. You should have this FLAG field along with a field that has the documentation of the consent properly stored and tested. When the FCC's 1:1 consent rules goes live, the flag will allow you to easily identify which leads you have the 1:1 consent for. This will allow you to report and filter out the ones that don't have the 1:1 consent to ensure you remain compliant.
-
-
Enabling Privacy Solutions | Safeguarding Your Digital Stronghold CIPP/E Certified Privacy Counsel | Licensed California Attorney
A timely reminder from a solid expert.
The Digital Services Act (DSA) is now in force and for many in-scope service providers its provisions will apply from 17 February 2024. However, for some of the larger service providers, its provisions have been in force since 16 November 2022. In our guide, we present an overview of the key features of the DSA, including the range of obligations imposed on all tiers of intermediary service provider and the enforcement framework. Learn more about content and platform regulation with ALG’s Technology Regulation and Investigations Group: https://lnkd.in/eCB6aKYu #DigitalServicesAct #OnlineSafety #Compliance #DSA
-
With the clarity on Data Protection Board to be merely an adjudicating body for the disputes. I think we can dissuade from my previous post and focus on the rules laid by the central government for the implementation part, especially on consent management. Context: “I want to be very clear that the Data Protection Board's role in the bill is very narrow. It is not a regulator. It is not a statutory body. It's a body that adjudicates the dispute between those whose personal data has been given to a platform and the platform which has in turn breached the obligations under the law. It's an adjudicating body,” said Minister of State for Electronics and IT Rajeev Chandrasekhar. Source-CNBCTV18