Posts

CCPA – The Definitive, Easily Searchable Text

In the last 12 months, data privacy has moved from a niche topic to something talked about at almost every corporation’s board meeting.

The EU GDPR, which came into force on May 25th, 2018, covers data held on any EU citizen and enforced new accountability for organizations processing personal data.

With the legislature passing the California Consumer Privacy Act 2018 (AB 375) on June 29th 2018, there are now a similar set of rules governing most organizations holding data on US Citizens.

We’ve now made it easy for you to read the act in full with our easily searchable CCPA text below:

California Consumer Privacy Act

CCPA 2018 Introduction

Section 1

Section 1 This measure shall be known and may be cited as “The California Consumer Privacy Act of 2018.

Section 2

Article A In 1972, California voters amended the California Constuition…
Article B Since California voters approved the right of privacy, the…
Article C At the same time, California is one of the world’s leaders in…
Article D As the role of technology and data in the every daily…
Article E Many businesses collect personal information from…
Article F The unauthorized disclosure of personal information and…
Article G In March 2018, it came to light that tens of millions of people…
Article H People desire privacy and more control over their information.
Article I Therefore, it is the intent of the Legislature to further…
Article I (1) The right of Californians to know what personal information is being collected about them.
Article I (2) The right of Californians to know whether their personal information is sold or disclosed and to whom.
Article I (3) The right of Californians to say no to the sale of personal information.
Article I (4) The right of Californians to access their personal information.
Article I (5) The right of Californians to equal service and price, even if they exercise their privacy rights.

Section 3 – Title 1.81.5 CCPA 2017 added toPart 4 of Division 3 of the Civil Code

Law Section 1798.100 Right to Know What Personal Information is Being Collected.
Law Section 1798.105 Compliance with Right to Say No and Notice Requirements.
Law Section 1798.110 Articles (A), (B), (C), (D).
Law Section 1798.115 Articles (A), (B), (C), (D).
Law Section 1798.120 Articles (A), (B), (C), (D).
Law Section 1798.125 Articles (A), (B).
Law Section 1798.130 Articles (A), (B), (C).
Law Section 1798.135 Articles (A), (B), (C).
Law Section 1798.140 Articles (A), (B), (C), (D), (E)…(Y).
Law Section 1798.145 Articles (A), (B), (C), (D), (E)…(J).
Law Section 1798.150 Articles (A), (B), (C).
Law Section 1798.155 Articles (A), (B), (C), (D).
Law Section 1798.160 Articles (A), (B).
Law Section 1798.175 This title is intended to further the constitutional right…
Law Section 1798.180 This title is a matter of statewide concern and supersedes…
Law Section 1798.185 Articles (A), (B).
Law Section 1798.190 If a series of steps or transactions were component parts…
Law Section 1798.192 Any provision of a contract or agreement of any kind that purports…
Law Section 1798.194 This title shall be liberally construed to effectuate its purposes..
Law Section 1798.196 This title is intended to supplement federal and state law, if permissible…
Law Section 1798.198 Articles (A), (B).

Section 4

Article (A) The provisions of this bill are severable. If any provision of this bill or its application is held invalid, that invalidity shall not affect other provisions or applications that can be given effect without the invalid provision or application.

PWC – The Global State of Information Security Survey 2018

Revitalising privacy and trust in a data-driven world

Key findings from The Global State of Information Security Survey 2018

‘49% of the 9500 respondents did not have an accurate inventory of personal data’

Massive data breaches and the constant collection of personal information routinely spur debate on whether privacy, rooted in ancient times, is dead in the digital age. Are we in a post-privacy world? In many ways, it is the wrong question. Privacy, security and trust—all increasingly at risk—are also more vital and intertwined in our data-driven society.

Read the full survey results: exo.nr/PWCsurvey

 

Ask the founder: 15 questions with NatWest

NatWest meets Exonar CEO – Adrian Barrett

In their series of interviews with SME founders about their business journey so far, NatWest chats to Adrian Barrett, our CEO and founder.

Read more about how Exonar was created in 2010 and changed in 2013, when Adrian and our team set out to create our own software that could help businesses get a handle on their data. With the new Europe-wide data privacy regulations, Exonar is the right business in the right place at the right time – and now growing at a rate of more than 250% per annum.

You can read the full interview here: exo.nr/NatWest

 

The positive impact technological innovation can have on business

Hear the latest Venturi’s Voice Podcast with Exonar CEO – Adrian Barrett

In the latest podcast from IT recruitment specialist – Venturi, Andy Davis talks to Adrian Barrett, our CEO about the challenging world of startup’s and the importance of technological innovation in moving tech industries forward. Andy asks about the vital role of customer feedback. They also touch on choosing the right approaches in business and picking the best technologies.

Adrian is a specialist in creating and growing innovative businesses his previous roles have been the international VP of Lumeta and VP of eloyalty.

You can hear the full podcast here: www.venturi-group.com/podcast/technological-innovation/

 

Topics covered in discussion include:

The challenges of Entrepreneurship and startups.

The importance of a team dynamic and work culture when forming a start-up team and business.

The recruiting strategy at Exonar.

Discussing Investment in new employee’s.

Talking about innovation and technology within tech industries.

Areas where we can see opportunities for innovation outside of technology.

The importance of customer feedback.

The issues around overthinking problems.

Picking the right technologies and approaches in business.

What thought process were undertaken when starting your business.

 

About Exonar

We enable organisations to better organise their information, removing risk and making it more productive and secure. Visit us at www.exonar.com or follow us @Exonar.

PwC and Exonar bring new data discovery and remediation services to market

PwC and Exonar form alliance to bring new data discovery and remediation services to market

  • Partnership will bring together PwC’s world-leading data discovery knowledge with Exonar’s ground breaking Information Intelligence™ platform to help companies meet future data demands

Exonar today announced that PwC’s Data Discovery team has selected its ground breaking Information Intelligence software to help its clients understand unstructured data in greater depth.

With increasing regulatory and compliance pressure, and the growing need to manage a business better, many companies turn to PwC for their data discovery, review and remediation services. PwC has engaged with Exonar in a number of data discovery projects where understanding unstructured data and its content is needed. This has included pre and post data breach, finding intellectual property stored where it should not be on a network, GDPR compliance and helping clients properly dispose of data to reduce storage and the risk of potential litigation costs.

Exonar is a British company that is redefining how organisations map, categorise and understand all of their data. Exonar solves a problem common to all organisations and their senior information owners, namely “I just don’t know what I’ve got”.

This statement, compounded with “I don’t know where it is or who has access to it” results in information security, regulatory and privacy demands becoming disproportionately challenging. The result is large amounts of risky, unwanted and unnecessary information being stored. In turn, this makes finding and understanding productive, valuable, or sensitive information much more difficult.

Umang Paw, PwC Partner in London, said, “We are excited to be working with Exonar and to add its capability to the portfolio of technology that we tailor for our clients’ specific business needs. We have been working with Exonar for over a year and are seeing real benefits across a number of different scenarios when it comes to helping our clients understand their electronic data.”

“Our technology provides a simple, comprehensive view of where data is being held,” explains Adrian Barrett, founder and CEO of Exonar.

“The platform’s underlying big data architecture provides a view of the whole enterprise, often uncovering repositories that have been forgotten about, or those that present a risk. It works by using machine learning to accurately identify data held in information systems and categorises it automatically into groups such as personal, private and sensitive. The platform does this instantly and then monitors on an ongoing basis every time a change is made.

“By bringing together our unique technology with PwC’s in-depth understanding of the world’s leading businesses, we can give CEOs the assurances they need that data is being managed in the right way to meet the obligations of regulation today and to continue to do so as laws evolve,” adds Adrian.

About Exonar

We enable organisations to better organise their information, removing risk and making it more productive and secure. Visit us at www.exonar.com or follow us @Exonar.

PwC and Exonar’s new data discovery and remediation services

PwC and Exonar form alliance to bring new data discovery and remediation services to market

  • Partnership will bring together PwC’s world-leading data discovery knowledge with Exonar’s ground breaking Information Intelligence™ platform to help companies meet future data demands

Exonar today announced that PwC’s Data Discovery team has selected its ground breaking Information Intelligence software to help its clients understand unstructured data in greater depth.

With increasing regulatory and compliance pressure, and the growing need to manage a business better, many companies turn to PwC for their data discovery, review and remediation services. PwC has engaged with Exonar in a number of data discovery projects where understanding unstructured data and its content is needed. This has included pre and post data breach, finding intellectual property stored where it should not be on a network, GDPR compliance and helping clients properly dispose of data to reduce storage and the risk of potential litigation costs.

Exonar is a British company that is redefining how organisations map, categorise and understand all of their data. Exonar solves a problem common to all organisations and their senior information owners, namely “I just don’t know what I’ve got”.

This statement, compounded with “I don’t know where it is or who has access to it” results in information security, regulatory and privacy demands becoming disproportionately challenging. The result is large amounts of risky, unwanted and unnecessary information being stored. In turn, this makes finding and understanding productive, valuable, or sensitive information much more difficult.

Umang Paw, PwC Partner in London, said, “We are excited to be working with Exonar and to add its capability to the portfolio of technology that we tailor for our clients’ specific business needs. We have been working with Exonar for over a year and are seeing real benefits across a number of different scenarios when it comes to helping our clients understand their electronic data.”

“Our technology provides a simple, comprehensive view of where data is being held,” explains Adrian Barrett, founder and CEO of Exonar.

“The platform’s underlying big data architecture provides a view of the whole enterprise, often uncovering repositories that have been forgotten about, or those that present a risk. It works by using machine learning to accurately identify data held in information systems and categorises it automatically into groups such as personal, private and sensitive. The platform does this instantly and then monitors on an ongoing basis every time a change is made.

“By bringing together our unique technology with PwC’s in-depth understanding of the world’s leading businesses, we can give CEOs the assurances they need that data is being managed in the right way to meet the obligations of regulation today and to continue to do so as laws evolve,” adds Adrian.

About Exonar

We enable organisations to better organise their information, removing risk and making it more productive and secure. Visit us at www.exonar.com or follow us @Exonar.

A Headlining Week for Privacy, SARs and Err, Trees

Privacy Has Been Hitting the Headlines

What We’ve Been Reading And Writing This Month

Personal Information and Subject Access Requests
Plus – Saving Trees for Privacy?
IDC Insight - Exonar Probes Depths Where No GDPR Solution Has...
When GDPR goes live, people will be able to submit subject access requests to current and former employers
Apple actively promoting Privacy as a selling point but...
Apple actively promoting Privacy as a selling point but…
At Apple, we build privacy into every product we make, so you can enjoy great experiences that keep your personal information safe and secure.
How the GDPR will disrupt Google and Facebook
…seen in an Apple store in Chicago – Exactly what GDPR should stop
Normally one of the bastions of privacy data, below is a sign that was spotted in an Apple retail outlet in Chicago recently. In essence, it assumes full consent is given for Apple and it’s…
Subject access requests: revised guidance from the ICO -...
At 9.24pm (and one second) on the night of Wednesday 18 December 2013, from the second arrondissement of Paris, I wrote “Hello!” to my first ever Tinder match. Since that day I’ve fired up…
Get our free GDPR report
You have the right to get a copy of the information that is held about you. This is known as a subject access request.
Plantatreeforprivacy: the impact of GDPR when privacy regulations change
Download our report: the impact of GDPR when privacy regulations change
In May next year, the UK’s Data Protection Act will be superseded by the GDPR. The GDPR is designed to give citizens more control of the information organisations hold on them and how that…
We Are Hiring - Marketing Executive - Exonar
SARs can be over 800 Pages long.Where do we start?
I did my own SAR on my own bank. This is it (actually, it’s less than half of the information they hold on me but they filtered the request). Arrived via DHL in 2 huge boxes…
Heineken Pet
The Somewhat Related Section – Planting trees for privacy. Really?
Yes, odd, we know but this 90 second video explains all – we felt bad after the SAR experiment on the left, not just for trees but for the employees that have to generate SARs…

Millions of Brits set to make GDPR personal information requests

Finance, telecoms and even social media in the firing line as customers set to demand a copy of personal information held on them

LONDON, November 1st 2017 – New research released today shows that millions may submit Subject Access Requests (SARs) to find out what personal information businesss hold on them after the General Data Protection Act goes live in May 2018.

The research, conducted by Exonar, a leading provider of General Data Protection Regulation (GDPR) data mapping and data inventory solutions, set out to identify what people know about how their privacy rights will change in May 2018. The findings showed that 70% of people have no idea about the changes. However, once GDPR and the term SAR was explained to them, 57% said they would raise a SAR.

The research also considered which sectors will be hit hardest. Financial services topped the charts with a third of people saying they would submit a SAR to their bank and 16% to their credit card provider. This could result in around 21million* current account holders raising a SAR and around a further 8million** credit card holders also asking for information held on them.

Other targets for SARs included mobile network providers (11%), social media companies (16.4%), insurance companies (8%), and loan companies (5%), 8% a utility firm, and 5% a retailer. A further 9% would raise a SAR on a current employer, 4% on an ex-employer.

Julie Evans, COO at Exonar, said companies need to make the most of the time they have before the Information Commissioner’s Office (ICO) starts its consumer publicity campaigns: “Companies often ask us how they can predict how many SARs they will receive. It’s an impossible task as so much of it will come down to consumer awareness.

“At the moment all communication efforts from the ICO are focused on getting companies ready for the GDPR, but come next Spring, we expect the focus to change as they start to inform the general public about the changes. If the ICO succeeds in raising consumer awareness then, as this research shows, the floodgates will open. Businesses really do need to make the most of the remaining months to get their data house in order.”

The research found that people are worried about how their data is managed today: 27% are concerned their data could be sold, and another 27% said they worried about hacking.

As part of the research, it was explained that a SAR could run into hundreds of pages***. Almost a fifth (18%) stated ‘shock’ that a company could hold so much about them and everything they have ever done, with 15% saying that if they held that much information they would want to know exactly what it was and a further 10% went as far as to say they’d want companies to forget about them altogether.

There were also environmental concerns: a third of people (31%) said they thought SARs were a waste of paper and would prefer to receive them in a secure digital format – just over a quarter were surprised a SAR wasn’t digitized anyway. 12% said environmental concerns would put them off doing a SAR.

Evans adds: “Going digital should be at the heart of any GDPR strategy. New technologies like data mapping, big data and machine learning will make it easier for businesses to ensure personally identifiable data is easy to locate and secure. Technology can help everyone in a business to follow best practice and avoid the potentially hefty cost of failing to deal with SARs and comply with the GDPR.

“Aside from the cost, relying on manual processes is too high risk. Going digital will make the process of finding and retrieving information quicker and cheaper, and also lessen the environmental impact of completing a SAR request.”

In order to offset the environmental impact of producing paper-based SARs and to encourage organisations to consider moving towards a digital process, Exonar is asking that for every SAR that is produced in paper a tree is planted or a donation is made to the Woodland Trust.

For more information about the research go to: www.exonar.com/plantatreeforprivacy

 

Notes to editors 

About the research: 1028 adults were surveyed between 6th and 10th October 2017, by Opinion Matters.

* Approx. 21m active current account holders (33% of 65m –  https://assets.publishing.service.gov.uk/media/53c834c640f0b610aa000009/140717_-_PCA_Review_Full_Report.pdf)

** Approx. 8m active credit card holders (16% of 50m –http://uk.creditcards.com/credit-card-news/uk-britain-credit-debit-card-statistics-international.php)

Calculation: 33% of 1028 people questioned said they would submit a SAR to their current account provider, and 16% said they would submit a SAR to their credit card provider, multiplied by the total active current account/credit card holders.

*** People can raise a request today but companies can take as long as 40 days and charge for the service. An Exonar employee asked their bank, with whom they have been a customer for 20 years, for the information they held on them. This picture features all the paper the employee received. It amounts to eight reams of paper.

Millions of Brits to submit SARs when the GDPR goes live

 

Finance, telecoms and even social media in the firing line as customers set to demand a copy of personal information held on them

LONDON, November 1st 2017 – New research released today shows that millions may submit Subject Access Requests (SARs) to find out what personal information businesss hold on them after the General Data Protection Act goes live in May 2018.

The research, conducted by Exonar, a leading provider of General Data Protection Regulation (GDPR) data mapping and data inventory solutions, set out to identify what people know about how their privacy rights will change in May 2018. The findings showed that 70% of people have no idea about the changes. However, once GDPR and the term SAR was explained to them, 57% said they would raise a SAR.

The research also considered which sectors will be hit hardest. Financial services topped the charts with a third of people saying they would submit a SAR to their bank and 16% to their credit card provider. This could result in around 21million* current account holders raising a SAR and around a further 8million** credit card holders also asking for information held on them.

Other targets for SARs included mobile network providers (11%), social media companies (16.4%), insurance companies (8%), and loan companies (5%), 8% a utility firm, and 5% a retailer. A further 9% would raise a SAR on a current employer, 4% on an ex-employer.

Julie Evans, COO at Exonar, said companies need to make the most of the time they have before the Information Commissioner’s Office (ICO) starts its consumer publicity campaigns: “Companies often ask us how they can predict how many SARs they will receive. It’s an impossible task as so much of it will come down to consumer awareness.

“At the moment all communication efforts from the ICO are focused on getting companies ready for the GDPR, but come next Spring, we expect the focus to change as they start to inform the general public about the changes. If the ICO succeeds in raising consumer awareness then, as this research shows, the floodgates will open. Businesses really do need to make the most of the remaining months to get their data house in order.”

The research found that people are worried about how their data is managed today: 27% are concerned their data could be sold, and another 27% said they worried about hacking.

As part of the research, it was explained that a SAR could run into hundreds of pages***. Almost a fifth (18%) stated ‘shock’ that a company could hold so much about them and everything they have ever done, with 15% saying that if they held that much information they would want to know exactly what it was and a further 10% went as far as to say they’d want companies to forget about them altogether.

There were also environmental concerns: a third of people (31%) said they thought SARs were a waste of paper and would prefer to receive them in a secure digital format – just over a quarter were surprised a SAR wasn’t digitized anyway. 12% said environmental concerns would put them off doing a SAR.

Evans adds: “Going digital should be at the heart of any GDPR strategy. New technologies like data mapping, big data and machine learning will make it easier for businesses to ensure personally identifiable data is easy to locate and secure. Technology can help everyone in a business to follow best practice and avoid the potentially hefty cost of failing to deal with SARs and comply with the GDPR.

“Aside from the cost, relying on manual processes is too high risk. Going digital will make the process of finding and retrieving information quicker and cheaper, and also lessen the environmental impact of completing a SAR request.”

In order to offset the environmental impact of producing paper-based SARs and to encourage organisations to consider moving towards a digital process, Exonar is asking that for every SAR that is produced in paper a tree is planted or a donation is made to the Woodland Trust.

For more information about the research go to: www.exonar.com/plantatreeforprivacy

 

Notes to editors 

About the research: 1028 adults were surveyed between 6th and 10th October 2017, by Opinion Matters.

* Approx. 21m active current account holders (33% of 65m –  https://assets.publishing.service.gov.uk/media/53c834c640f0b610aa000009/140717_-_PCA_Review_Full_Report.pdf)

** Approx. 8m active credit card holders (16% of 50m –http://uk.creditcards.com/credit-card-news/uk-britain-credit-debit-card-statistics-international.php)

Calculation: 33% of 1028 people questioned said they would submit a SAR to their current account provider, and 16% said they would submit a SAR to their credit card provider, multiplied by the total active current account/credit card holders.

*** People can raise a request today but companies can take as long as 40 days and charge for the service. An Exonar employee asked their bank, with whom they have been a customer for 20 years, for the information they held on them. This picture features all the paper the employee received. It amounts to eight reams of paper.

Seen in Apple in Chicago – Exactly What GDPR Should Stop

Normally one of the bastions of privacy data, below is a sign that was spotted in an Apple retail outlet in Chicago recently. In essence, it assumes full consent is given for Apple and it’s Partners to use privacy data by merely entering the store.

GDPR Article 7 might have something to say about this!