PAC-5010

Collins, Katie, 2022. GDPR Fines: The biggest privacy sanctions handed out so far. Retrieved from https://www.cnet.com/tech/gdpr-fines-the-biggest-privacy-sanctions-handed-out-so-far/

This article presents the top eight largest fines that companies have received for violating the EU's General Data Protection Regulation (GDPR). The GDPR, which came into effect in May 2018, is designed to protect the privacy of European internet users and give them some of the strongest privacy protections in the world, and allows for fines of up to 20 million euros or 4% of a company's global revenue for violators.

Gladstone, M. H. (2020). GDPR in United States litigation through summer 2020: GDPR-subject companies must produce. Defense Counsel Journal, 87(4), 1–14. Retrieved from https://search.ebscohost.com/login.aspx?direct=true&AuthType=sso&db=tsh&AN=153887854&site=eds-live&scope=site&custid=natuniv

The article offers a detailed look at the decisions in the emissions litigation Mercedes-Benz Emissions Litig and other General Data Protection Regulation (GDPR) decisions applying the Finjan model to compel discovery of GDPR-protected data from GDPR-subject companies in U.S. litigation. Topics covered include a formulaic pattern of analysis and outcome modeled on Finjan Inc. v. Zscaler Inc. adopted by courts, and how U.S. courts have examined the terms of the GDPR.

The Gaurdian. (2018). Privacy policies of tech giants “still not GDPR-compliant”; Consumer group says policies of Facebook, Amazon and Google are vague and unclear. Retrieved from https://search.ebscohost.com/login.aspx?direct=true&AuthType=sso&db=edsinc&AN=edsinc.A545470959&site=eds-live&scope=site&custid=natuniv

Read this article as it highlights the issues related to GDPR compliance of the privacy policies of tech giants such as Facebook, Amazon, and Google. It will provide insights into the practical challenges of implementing GDPR and the potential consequences of non-compliance.

Voss, W., & Houser, K. A. (2019). Personal data and the GDPR: providing a competitive advantage for US companies. American Business Law Journal, 56(2), 287-344. Retrieved from https://heinonline.org/HOL/P?h=hein.journals/ambuslj56&i=287

This article delves into the differences in definitions of protected data between the United States and the European Union. As the GDPR has become applicable since May 25, 2018, understanding the differences in the definitions of personal data and sensitive data is important for companies to establish a robust and comprehensive data protection compliance program.

Survey shows North American and APAC companies unprepared for new data protection law GDPR. (2018, May 23). Plus Company Updates. Retrieved from https://search.ebscohost.com/login.aspx?direct=true&AuthType=sso&db=edsinc&AN=edsinc.A539913285&site=eds-live&scope=site&custid=natuniv

This article provides insights into the preparedness of North American and APAC companies for compliance with the GDPR, highlighting potential compliance gaps and challenges. Students of privacy law and data protection can use this article to understand the practical implications of the GDPR and how companies are responding to its requirements.

Hilliard, E. (2020). The GDPR: A retrospective and prospective look at the first two years. Berkeley Technology Law Journal, 35(4), 1245–1289. https://doi.org/10.15779/Z384J09Z3Z

The article focuses on quantitative summary of the European Union's General Data Protection Regulation (GDPR) and provides an exhaustive Internet search of all GDPR fines and sanctions. It mentions uses descriptive statistics mean, median, mode, range, and linear regression to analyze the data and present results, including noteworthy findings. It also mentions enforcements was compiled for all twenty-seven E.U. countries.

Palmer, Denny., 2019, ZDNET. What is GDPR? Everything you need to know about the new general data protection regulations. Retrieved from https://www.zdnet.com/article/gdpr-an-executive-guide-to-what-you-need-to-know/

The Cybersecurity and Infrastructure Security Agency (CISA) has recommended three steps that organizations can take to strengthen their network security against cyber-attacks. The article suggests that implementing multi-factor authentication, network segmentation, and endpoint protection can help mitigate the risk of data breaches and other cyber threats.