UK ICO Investigation: Charities Exploiting Supporters
UK Information Commissioner Office launched an investigation into the practices of charities and discovered that the Royal Society for the Prevention of Cruelty to Animals (RSPCA) and British Heart Foundation (BHF) secretly screened millions of their donors so they could target them for more money. This screening practice is also known as “wealth screening” and was one of three breaches of the Data Protection Act by the mentioned charities. Furthermore, the charities also traced and targeted new or lapsed donors by piecing together personal information obtained from other sources. And they traded personal details with other charities creating a massive pool of donor data for sale, all without obtaining donors’ consent.
Interestingly, the Information Commissioner Ms. Denham has exercised her discretion power and has significantly reduced the level of fines. Her decision was based on taking into account the risk of adding to any distress caused to donors by the charities’ actions, particularly in the context of potential further penalties in the sector as a result of ongoing investigations. The ICO has fined the RSPCA £25,000 and BHF £18,000.
Read more HERE
___________________________________________________________________
EU to Closely Monitor Privacy Shield Compliance
EU Justice Commissioner Věra Jourová said that the European Commission will “closely monitor the respect of protection standards and the correct implementation” of the Privacy Shield Agreement “under the new U.S. leadership.” The viability of Privacy Shield under the administration of U.S. President-elect Donald Trump has been brought into question because the transfer mechanism is dependant on respect for EU privacy rights when personal data of EU citizens is transferred to the U.S. for commercial purposes.
During the U.S. presidential campaign, Trump made some statements, which according to some commentators might mean that such privacy rights could be disregarded. Specifically, Trump has promised to cancel the Trans-Pacific Partnership trade agreement, which includes data protection commitments and that he was in favour of law enforcement profiling on the basis of ethnicity or religious group affiliation.
Read more HERE
___________________________________________________________________
Wearables and Apps Do Not Meet German Legal Requirements
The German Commissioner for Data Protection and Freedom of Information (BfDI) has warned fitness app and wearables developers that many of their practices do not meet legal requirements. The agency study report found out that "many of the products fail to adequately protect user data" and that in many case "privacy statements concerning wearables are overly long, difficult to understand, insufficiently detailed and often not available in German”. Furthermore, "In many cases, health data was processed by external third parties, putting user privacy at risk. While some manufacturers alert users to the potential for data sharing with third parties, users often do not know who these third parties are or how to lodge an objection."
Read more HERE
___________________________________________________________________
Compiled by Jernej Mavrič, email: jm@dp-recruitment.com
___________________________________________________________________
Follow us on Twitter @LastWeekInPDP and visit our WEBSITE
For privacy jobs and vacancies follow @dprecruitment