The council will also invite contributions from government, business, media, academia, the technology sector, data protection organizations and other organizations with a particular interest in the area, to surface and discuss the challenging issues at the intersection of the right to know and the right to privacy.
Stiennon said the level of data protection an organization needs to prevent similar breaches and embarrassing "doxing" (wherein stolen documents are released to the public) is daunting to contemplate, but necessary.
Beyond that, data protection determines how organizations holding data may or may not process them, and, in particular, it regulates access to personal data by third parties.
This framework has over 130 measurable metrics that enables us to monitor data protection across the organization.
As this shift occurs, CIOs have found themselves more focused on service provision, data protection, and migrating the organization itself to the cloud.
With fines now being levied by data protection authorities, I predict that organizations will broaden their open source governance policies to include reviews of commercial software for open source libraries.
While such risks typically have to be legally addressed in data protection impact assessments (DPIA), some organizations go further, e.g., by setting up an external ethics committee to review data uses.
It offers a new framework for data protection with increased obligations for organizations, and its reach is far and wide.
WP29's official statement cites "an overall lack of clarity regarding the new framework as well as making accessibility for data subjects, organizations, and data protection authorities more difficult" as the overarching reasons for its rejection of the agreement in its current form.
"Google's refusal to hand over the data will be seen as a declaration of war by European regulators," said Simon Davies, the director of Privacy International, a London organization representing data protection groups in 40 countries.
You may need to formally designate a data protection officer (DPO) if your organization meets certain criteria spelled out by the EU.
