News

CJEU confirms that competitors can sue each other for GDPR infringements  A German pharmacy sued another pharmacy for failing to guarantee explicit consent when processing the health data of the clients as prescribed under GDPR. The German Court held that such activity does amount to unfair and unlawful practice. However, the Court was unsure whether […]

EDPB’s Guidelines on Legitimate Intesrest Recently, the European Data Protection Board (“EDPB”) adopted Guidelines 01/2024 on processing of personal data based on Article 6(1)(f) GDPR (processing based on legitimate interest). Legitimate interest is one of the lawful grounds on which personal data can be processed. Its flexible nature makes it quite hard to actually apply […]

Can data subjects be data controllers? With the rise of AI trained on user data, the question of whether data subjects be considered data controllers for the personal data in their AI prompts and outputs has once again taken the spotlight. This is not a new issue, the possibility of the data subjects acting as […]

HOT NEWS The draft Personal Data Protection Law has officially been released for public consultation! The draft Personal Data Protection Law has proposed regulations on the protection of personal data and the responsibilities of relevant agencies, organizations, and individuals in protecting personal data. Additionally, the draft Personal Data Protection Law is expected to apply to: […]

Vietnam’s Draft Digital Industry Law On the 3rd of July 2024, the Vietnamese government released a draft of the Digital Industry Law for public consultation. The draft law promises to bring about a fresh change in hi-tech areas such as AI, big data, cloud computing, Internet of Things, etc. The law encourages the development of […]

Greater attention needed to respond to cyberinformation security threats The Government has recently required the intensification of response to cyberinformation security threats so as to build digital trust and protect the country’s prosperous development in the digital era, thus contributing to successfully completing the national digital transformation. Under Directive 18 dated October 13, the Prime […]

EU hits Amazon with record-breaking $887M GDPR fine over data misuse Luxembourg’s National Commission for Data Protection (CNPD) has hit Amazon with a record-breaking €746 million ($887 million) GDPR fine over the way it uses customer data for targeted advertising purposes. Amazon disclosed the ruling in an SEC filing on Friday in which it slammed the decision as baseless […]

Vietnam hopes to attract more capital from South Korea HÀ NỘI — Policies and orientations on attracting foreign investment, especially from South Korean businesses, was spotlighted at a conference in the capital city on Tuesday. Hosted by Việt Nam News, the forum lured the participation of more than 30 Vietnamese and South Korean companies. General director […]

Government issues decree on Personal Data Protection HÀ NỘI – On April 17, the Government released a new Decree on Personal Data Protection, outlining measures and conditions to safeguard personal data. Effective July 1, 2023, the decree stipulates that protecting personal data falls on organisations and individuals involved in processing such data. These entities must implement […]

3CX’s supply chain attack was caused by… another supply chain attack The incident responders investigating how hackers carried out a complex supply-chain attack targeting enterprise phone provider 3CX say the company was compromised by another supply chain attack. 3CX, which develops a software-based phone system used by over 600,000 organizations worldwide with more than 12 million active daily users, worked […]