Cookies have been at the center of data protection discussions for a long time, but recently the focus on the implementation of cookies has increased significantly. This blog post provides some insight into the most recent changes with regard to data protection authorities’...

Over the last three years, the Attorney-General’s Department has conducted a Review of the Privacy Act 1988 (Cth). On 28 September, the Government Response to the Privacy Act Review Report was published. This Government Response comes eight months after the...

On July 10, 2023, the European Commission (EC) adopted an Adequacy Decision regarding the EU-U.S. Data Privacy Framework (DPF). The decision taken by the EC regarding the EU-U.S. DPF enables organisations to certify their compliance with the EU-U.S. DPF, simplifying the process of...

ENISA AI Cybersecurity Conference took place on 7th June, and here are the key highlights: AI is a double-edged sword when it comes to Cybersecurity as it enables better and more advanced prevention against cyberattacks but at the same time enables cyber criminals to advance their...

As a data protection professional, you will often find yourself being part of large contractual negotiations, where you will be responsible for data processing agreement. Therefore, please find below a few tips on how to prepare for a (re-) negotiation of data processing...

As cybersecurity risks increase and new data protection requirements surface, navigating the privacy and security landscape has become ever more onerous and demanding.Even in organisations with well-established and mature enterprise risk management programs, keeping your risk picture...

Bringing your privacy and security program to life involve turning the principles and activities outlined in the framework into concrete actions and processes that can be implemented in practice within your organisation. This typically involves defining clear roles and...

SECURING THE RIGHT VENDORS IN THE cybersecurity AND DATA PRIVACY DOMAINS Digitalization forcefully accelerates the adoption of platforms and devices that allow sensitive data to be shared with third parties, such as cloud service providers, data aggregators, application...

ISO/IEC 27001 is widely known as the de facto information security standard that specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system.   The first version of ISO/IEC 27001 was...

ADDRESSING THE CHALLENGE OF CONTINUALLY MITIGATING DIGITAL RISK Within the blog post series, “The Conundrum of Handling the Challenge of Third-Party Digital Risk Management”, this week we will visit the matter, “Addressing the Challenge of Continually Mitigating Digital Risk”,...