GRA focus on gambling sector for ‘Privacy Sweep’
The Gibraltar Regulatory Authority will be focusing on the gambling sector for the seventh Global Privacy Enforcement Network Privacy Sweep.
The Sweep helps to foster cross-border cooperation among privacy authorities and this year 18 privacy enforcement authorities from around the world are participating.
The theme for this year’s Sweep is data breach notifications and this year, the GRA will be focusing on the gambling sector in Gibraltar.
The topic of data breach notification is particularly relevant as the number of international jurisdictions with mandatory notification requirements is increasing, the GRA said in a statement.
Many other jurisdictions such as New Zealand, Hong Kong and Singapore are considering the feasibility of adopting a mandatory regime or in the process of adopting one.
The Sweep will involve a coordinated effort by participants to assess how well organisations are capturing information about data breaches, and whether they are reporting these to the relevant regulator.
It will also be an opportunity for jurisdictions with mandatory notification regimes to reflect on how the organisations within their jurisdictions are performing, and how this performance compares with other parts of the world, the GRA added.
As part of the initiative, participating privacy enforcement authorities will be making enquiries with a number of organisations to get an idea of their awareness of the relevant data breach framework, their internal procedures for handling data breaches, how they respond to data breaches, and whether they have a process in place to prevent future breaches.
The goal of the Sweep is to identify trends which might guide future education and outreach. The results may also highlight areas for further follow up engagement.
The overall results of this year’s Sweep will be compiled and made public towards the end of the year.
In addition, the GRA says it is available to anyone wishing to discuss matters which affect their privacy, or feel that their data protection rights are not being correctly addressed.
For further information please contact the GRA by telephone on +350 200 74636 or by email on email@example.com.