The UAE does not have a full federal data protection and privacy law, nor does it have a regulatory authority.
But, matters are evolving and this panel will explore what the future might herald for regulations in the United Arab Emirates.
Wednesday, 22 September, 10:00 AM - 10:45 AM (BST)
View the agenda
Antonis Patrikios, Partner, Dentons
Lori Baker, VP, Legal & Director of Data Protection, DIFC
Ben Gibson, Legal Director, CMS
Nick Roudev, Managing Associate, Simmons & Simmons Middle East LLP
Vice President, Legal & Director of Data Protection, Dubai International Financial Authority
This panel will explore a controversial topic: what is more out of control at the moment, ransomware attacks or our susceptibility due to outside forces such as cryptocurrencies and the very users/staff of our companies?
The California Privacy Rights Act (CPRA) comes into effect on January 1, 2023. Among its new requirements is a new data retention provision. Personal and sensitive information must be disposed of when its purpose has been fulfilled, and the organization must disclose the retention policy at the time of collection. And the data retention policies apply to data collected on or after January 1, 2022. Under CPRA, companies can no longer simply hold on to individuals’ personal data forever, they must have robust data retention and disposal practices.
Many more states within the US are leading the legislative charge to follow California, Colorado and Virginia to pass Privacy Acts into law. From New York and Massachusetts to North Carolina and Ohio, moves are afoot.
In June, the European Commission finalised the modern SCCs in a bid to restore normal EU-US data transfer agreements.
From employees accidentally clicking on malicious links, to sabotage, theft of data and unauthorised access, companies have plenty of potential insider cybersecurity threats to consider.
Site powered by Webvision Cloud