Data privacy is naturally fast-moving and ever-changing and the last few weeks have been no exception. Following our blogs about Japan and India recently, another pair of key data privacy announcements were made – one on the frustrating delays to the EU’s ePrivacy Regulation, and a remarkable declaration of intent from Bahrain.
ePrivacy Regulation delayed
The fact is an update to the Directive is highly needed, not only to provide additional protections, but also to simplify requirements for both data subjects and businesses. However, with it continuing to be the ball in a game of legislative ping pong, we may be waiting some time.
Bahrain ups the ante
- Processing of sensitive personal data
- Transference of personal data outside Bahrain without an adequate level of data protection, and associated exceptions
- Processing personal data without notifying the new Data Protection Authority appropriately
- Processing personal data contrary to the provision that requires prior authorization from the Authority before processing personal data in certain circumstances
- Providing false or misleading information to data subjects
- Hindering the Data Protection Authority’s work in any way
Inappropriate disclosures of personal data, or misusing personal data