Author: stefan

includes a form for reporting security incidents.

https://www.ncsc.admin.ch/ncsc/en/home.html

Statement on the end of the Brexit transition period
Adopted on 15 December 2020

https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_statement_20201215_brexit_en.pdf

New Microsoft Data Processing Agreement template

https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=67

https://www.nature.com/articles/s41597-020-00773-y

using ARX pipeline

Very interesting case involving sensitive personal data that

• was shared via unencrypted email (which was pointed out to the university, but was not reported as an incident)
• stored on box.com, protected only by username/password, despite the fact that the University’s risk assessment didn’t support this – and in violation to internal published policies

(I hope I read the documents correctly..)

Press release:
https://www.datainspektionen.se/nyheter/universitet-brast-i-skyddet-av-kansliga-personuppgifter/

Details:
https://www.datainspektionen.se/globalassets/dokument/beslut/2020-12-10-beslut-tillsyn-umea-universitet.pdf/a>

https://www.datenschutzzentrum.de/sdm/

also – with somehow more material, incl. security control blocks at

https://www.datenschutz-mv.de/datenschutz/datenschutzmodell/

A Deep Dive into New Zealand’s New Privacy Law: Extraterritorial Effect, Cross-Border Data Transfers Restrictions and New Powers of the Privacy Commissioner

https://fpf.org/2020/12/08/a-deep-dive-into-new-zealands-new-privacy-law-extraterritorial-effect-cross-border-data-transfers-restrictions-and-new-powers-of-the-privacy-commissioner/

NIST Privacy Framework
https://www.nist.gov/privacy-framework/privacy-framework
with PDF at
https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.01162020.pdf

NIST Cybersecurity Framework
https://www.nist.gov/cyberframework
with PDF at
https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf