Russia's top bank leads sector revolution

Significance The expansion into retail reflects the transition of state-controlled Sberbank, Russia's largest bank from financial institution into a digital 'ecosystem' rebranded as Sber. Its large client base and profits have facilitated acquisitions of e-commerce firms and their technological integration. Russia's central bank has concerns about the effects on competition and consumers. Impacts The boundaries between the financial and IT sectors will be blurred further. The central bank will continue efforts to restrain Sberbank's dominance in the financial markets. Cybersecurity and personal data protection need to be addressed at company and national level.

Significance Such programmes contribute not only to Indonesia’s efforts to boost the cyber readiness of its booming digital economy, but are also designed to maintain China's friendly relations with South-east Asia’s largest economy amid the intensifying technology tensions between China and the United States. Impacts The Personal Data Protection Law would need to clarify key provisions and concepts to be effective. The BSSN’s extensive powers will fuel civil society concerns about excessive state surveillance. Turning down Chinese technology suppliers carries cost and wider economic ramifications for Jakarta.


Significance The experience of surfing the net is vastly different for women, who have been disproportionately at the receiving end of cybercrimes that undermine their safety online. As elsewhere, the forms of online offence included bullying, stalking, impersonation and non-consensual pornography. Impacts Lack of online safety will limit the female customer base of digital platforms. Entrenched weaknesses of the judicial systems impede reporting and conviction of cybercrime. Civil society demands for a personal data protection law will rise.


2020 ◽  
Vol 28 (4) ◽  
pp. 531-553 ◽  
Author(s):  
Aggeliki Tsohou ◽  
Emmanouil Magkos ◽  
Haralambos Mouratidis ◽  
George Chrysoloras ◽  
Luca Piras ◽  
...  

Purpose General data protection regulation (GDPR) entered into force in May 2018 for enhancing personal data protection. Even though GDPR leads toward many advantages for the data subjects it turned out to be a significant challenge. Organizations need to implement long and complex changes to become GDPR compliant. Data subjects are empowered with new rights, which, however, they need to become aware of. GDPR compliance is a challenging matter for the relevant stakeholders calls for a software platform that can support their needs. The aim of data governance for supporting GDPR (DEFeND) EU project is to deliver such a platform. The purpose of this paper is to describe the process, within the DEFeND EU project, for eliciting and analyzing requirements for such a complex platform. Design/methodology/approach The platform needs to satisfy legal and privacy requirements and provide functionalities that data controllers request for supporting GDPR compliance. Further, it needs to satisfy acceptance requirements, for assuring that its users will embrace and use the platform. In this paper, the authors describe the methodology for eliciting and analyzing requirements for such a complex platform, by analyzing data attained by stakeholders from different sectors. Findings The findings provide the process for the DEFeND platform requirements’ elicitation and an indicative sample of those. The authors also describe the implementation of a secondary process for consolidating the elicited requirements into a consistent set of platform requirements. Practical implications The proposed software engineering methodology and data collection tools (i.e. questionnaires) are expected to have a significant impact for software engineers in academia and industry. Social implications It is reported repeatedly that data controllers face difficulties in complying with the GDPR. The study aims to offer mechanisms and tools that can assist organizations to comply with the GDPR, thus, offering a significant boost toward the European personal data protection objectives. Originality/value This is the first paper, according to the best of the authors’ knowledge, to provide software requirements for a GDPR compliance platform, including multiple perspectives.


Significance Once finalised and promulgated, probably sometime in late 2021 or 2022, it will be China’s first comprehensive piece of legislation to govern the collection, processing and use of personal data. There are significant ramifications for domestic and foreign businesses. Impacts Security inspection requirements for cross-border transfers of personal data could have considerable importance for foreign firms. The law may be used to sanction foreign firms or retaliate against foreign governments. The law aims to settle a long-running turf war between regulators, to eliminate duplicate licensing, enforcement and inspection regimes.


Subject India’s data ecosystem and reform outlook. Significance Prime Minister Narendra Modi’s second government is expected to revive its effort to enforce a new data protection framework. The draft 2018 Personal Data Protection (PDP) bill, deferred due to the April-May general elections, will be tabled afresh when the new parliament convenes from July. Impacts Policy push for data localisation and relatively open access to competing firms will not be reversed. This will be welcomed by large domestic corporates, while alientating foreign ‘big tech’. Cybersecurity of data stored by local corporates and the government will remain poor.


Subject Prospects for digital privacy. Significance With technology becoming more intertwined in daily life, there is increasing concern about how tech companies and governments use personal data gathered from online users. In many cases public authorities are responding to such concerns by acting to improve personal data protection. However, governments are also increasing the degree to which they themselves infringe on people’s privacy.


Author(s):  
Evgenii Vladimirovich Pustovalov

The subject of this research is the established in arbitration courts of the Russian Federation practice of implementation of provision of Multilateral Convention on Mutual Administrative Assistance in Tax Matters and provisions of the agreements on the avoidance of dual taxation, related to cooperation of fiscal authorities in the form of exchanging tax information. In particular, the author examines the questions of the period of validity of the provisions of international acts; forms information transfer; compliance with the requirements on legalization and apostiling of transferred documents; rights of taxpayers to appeal against the request on them to foreign jurisdiction; correlation between the provisions of international acts on the exchange of tax information and provisions of legislation on personal data protection. A conclusion is formulated that since the exchange of tax information is primarily regulated by the international acts, there is no need in adoption of normative act on the national level that would contain additional regulation, except a separate act for regulating the system of supplementary guarantees of private entities, involved into the exchange of tax information. Summarization of the formulated by courts legal positions on the level of the Supreme Court of the Russian Federation is relevant.


Subject Reform of data policies. Significance The central government is developing a new regulatory regime for data protection. The main elements likely in the regulatory push are elaborated in ‘The Personal Data Protection Bill, 2018’ (PDP bill) and the accompanying report entitled ‘A Free and Fair Digital Economy’ submitted to the government in July by the Justice BN Srikrishna committee of experts. Impacts The proposals, if implemented, would increase the state’s surveillance capabilities. New rules would also force large domestic firms to share their data, somewhat encouraging smaller entrants. The government will struggle to limit the spread of fake news and misinformation, even where these trigger violence.


2017 ◽  
Vol 39 (3) ◽  
pp. 308-316 ◽  
Author(s):  
Phoebe Moore ◽  
Lukasz Piwek

Purpose The purpose of this paper is to lay out the conceptual issues arising alongside the rise of sensory technologies in workplaces designed to improve wellness and productivity. Design/methodology/approach This is a text based conceptual paper. The authors’ approach is to throw light on some of the emerging issues with the introduction of wearable self-tracking technologies in workplaces. Findings The paper indicates that scholars will need to put ethical issues at the heart of research on sensory tracking technologies in workplaces that aim to regulate employee behaviour via wellness initiatives. Practical implications The study explores the legal issues around data protection and potential work intensification. Social implications Privacy and personal data protection, workplace discipline are discuss in this paper. Originality/value This is an original paper. Since there is very little scholarly research in this area, it is important to begin to consider the implications of sensory technology in workplaces linked to wellness initiatives, given the probable impact it will have on work design and appraisal systems.


2017 ◽  
Vol 2017 (1) ◽  
pp. 35-44
Author(s):  
Dawid Zadura

Abstract In the review below the author presents a general overview of the selected contemporary legal issues related to the present growth of the aviation industry and the development of aviation technologies. The review is focused on the questions at the intersection of aviation law and personal data protection law. Massive processing of passenger data (Passenger Name Record, PNR) in IT systems is a daily activity for the contemporary aviation industry. Simultaneously, since the mid- 1990s we can observe the rapid growth of personal data protection law as a very new branch of the law. The importance of this new branch of the law for the aviation industry is however still questionable and unclear. This article includes the summary of the author’s own research conducted between 2011 and 2017, in particular his audits in LOT Polish Airlines (June 2011-April 2013) and Lublin Airport (July - September 2013) and the author’s analyses of public information shared by International Civil Aviation Organization (ICAO), International Air Transport Association (IATA), Association of European Airlines (AEA), Civil Aviation Authority (ULC) and (GIODO). The purpose of the author’s research was to determine the applicability of the implementation of technical and organizational measures established by personal data protection law in aviation industry entities.


Sign in / Sign up

Export Citation Format

Share Document