Ley de seguridad informática

Artículos Recientes

•  

  14.11.2023

  United Kingdom

  Common IT security weaknesses lead to ICO reprimand

  The UK Information Commissioner’s Office (“ICO”), the UK’s data protection regulator, has issued a reprimand following infringements of the UK General Data Protection Regulation (“GDPR”) to recruitment company Gap Personnel Holdings Limited (“Gap”). This followed threat actors gaining access to personal data on two separate occasions within a 12 month period.The reprimand provides further guidance as to the ICO’s expectations on data controllers in the context of cyber incidents.BackgroundThe same threat actor accessed Gap’s IT systems...

  Leer más
•  

  26.10.2023

  Polonia

  Polish law creates new rules on banking outsourcing

  In September 2023, Polish legislation amending the nation’s Banking Law and the rules on banking outsourcing came into force. These changes were introduced by the Act of 16 August 2023 amending certain acts with a view to ensuring the development of the financial market and the protection of investors in that market.The amendment underscores how banking outsourcing, situations where a bank outsources certain tasks related to banking activities (e.g. IT services, including cloud computing) to another undertaking (i.e. outsourcer), is becoming increasingly popular internationally, and...

  Leer más
•  

  17.10.2023

  International

  How to draft an AI policy

  AI has been around for decades, but there’s been a substantial increase in the use (or, at least, talk about the use) of AI within the workplace as a result of recent advances in AI, in particular, in relation to generative AI tools.Organisations need to ensure that there is appropriate and clear governance in relation to the use of AI within their businesses, so that they can harness the many benefits and exciting opportunities AI presents, whilst mitigating its potential risks. In this article, we set out some of the key issues to consider when preparing and implementing an AI policy.Is...

  Leer más
•  

  09.10.2023

  EU

  EU Cybersecurity Month: The looming threat of a single phishing click to your business

  The EU Cybersecurity Month (ECSM) is an annual awareness campaign held every October throughout Europe, orchestrated by European and national institutions. Its primary objective is to elevate awareness regarding cybersecurity threats, foster proactive mitigation measures, and facilitate the dissemination of best practices.At CMS Belgium, we wholeheartedly endorse and actively engage in this vital initiative. The 2023 edition has chosen to spotlight the pervasive threat of phishing. Phishing attacks loom as a formidable peril to enterprises, capable of inflicting considerable financial setbacks...

  Leer más
•  

  26.09.2023

  United Kingdom

  A Roadmap to a Resilient AI Ecosystem: Policy Considerations for the UK

  According to a recent briefing paper published by the Centre for Emerging Technology and Security (CETaS) and the Centre for Long-Term Resilience (CLTR), the UK is inadequately resilient to the risks posed by AI. CLTR is an independent think tank with a focus on resilience, while CETaS is a research centre based at the UK’s national institute for AI and data science (the Alan Turing Institute).Calling for decisive action by the UK government, the briefing paper (‘Strengthening Resilience to AI Risk: A guide for UK policymakers’) sets out a suggested framework for identifying and...

  Leer más
•  

  11.09.2023

  EU

  Summer Snapshot: Tech and Data Highlights You Might Have Missed

  Have you taken a break from your usual spot in front of the computer screen over the past few weeks? No worries, this article provides a succinct overview of the significant advancements in the world of technology and data that have transpired over the summer. You’ll soon discover that the summer has been exceptionally eventful in this regard.EU Commission adopted adequacy decision for EU-US Data Privacy FrameworkOn 10 July 2023, the EU Commission announced the adoption of its adequacy decision pertaining to the EU-US Data Privacy Framework (“EU-US DPF”). This decision allows...

  Leer más