Data And Cyber Bulletin - April 2022

Published 29 April 2022

Welcome to the April edition of our Data And Cyber Bulletin.

We are delighted to share this month’s Data and Cyber Bulletin with you, with content covering the recent DPC fine against the Bank of Ireland, amendments to the Security of Network and Information Systems Regulations, and the Swedish DPA’s fine against Klarna.

We also provide insight into recent activity in the world of cookies, along with cyber risk in the renewable energy sector.

Finally, we discuss the EDPB announcement on the new EU-US privacy framework and provide a review of the recent DCMS cyber security breach survey.

We hope you enjoy this month’s newsletter. Please do contact the authors of this month’s newsletter content if you have any questions.

Bank of Ireland fined €463,000 for breaches of GDPR

DACB’s Dublin office analyses the recent DPC fine against the Bank of Ireland, highlighting key points taken into consideration by the regulator.

Read more

Amendments to the Security of Networks and Information Systems Regulations

With increasing attention being paid to cyber risk in the context of critical national infrastructure given the current geo-political situation, we explain key points arising out of the passing of the Network and Information Systems (EU Exit) (Amendment) Regulations, which came into force earlier this year.

Read more

Swedish DPA Audit Results in Klarna Fine

We explain the failures which led to Klarna being fined SEK 7,500,000 by the Swedish DPA, which serves as a salutary reminder of the importance of complying with transparency requirements under the GDPR.

Read more

Cookie Bite

We provide an update on recent activity in relation to regulatory scrutiny of the use of cookies by companies such as Google and Facebook.

Read more

Cyber Risk in the World of Renewable Energy & Climate Change

We highlight the important intersection between the worlds of renewable energy and cyber risk, in this interesting exploration of recent developments.

Read more

EDPB Announcement on New EU-US Privacy Framework

Our information law specialists provide their analysis of the recent EDPB announcement in respect of the new EU-US privacy framework.

Read more

2022 Cyber Security Breaches Survey vs ICO Incident Data: what can we learn from the statistics?

We compare the recently published DCMS annual cyber security breaches survey with the ICO’s own incident data, and set out key areas where they diverge.

Read more