In a recent ruling, the Court of Justice of the European Union ("CJEU") has spoken for the first time on the interpretation of 32 of the GDPR and the obligation to take adequate privacy security measures in the context of a data breach.
The decision of the CJEU on potential damages deriving from a data breach might potentially increase the risk of a class action connected to privacy related violations.ย
As the risk of a cyberattack grows, it is pivotal to consider whether the directors of a company hit by a ransomware attack, for example, can bear any liability for negligence in failing to take steps to limit the risk.
The ENISA 2022 ransomware report provides valuable insights to companies on how to deal with cyberattacks, also in relation to regulatory measures to be implemented to limit the risk of data breaches.ย
The proper management of a data breach following a ransomware cyberattack can avoid potential GDPR fines and damages due to claims from customers in a situation of considerable difficulty.
The report published by DLA Piper on GDPR fines and data breach notifications offers a snapshot of what has happened in the privacy world during the past 12 months with mixed signals, also relating to Italy.
Il Garante per la protezione dei dati personali in una famosa decisione ha chiarito i contenuti minimi relativi alla comunicazione di un data breach agli interessati ai sensi del GDPR.
L'emergenza Covid-19 ha aumentato il cyber risk e quindi il rischio di data breach a causa del numero notevole di persone che lavorano in smart working.