Two German data protection authorities (DPAs) have issued a paper that addresses the data breach notification requirements under Section 42a of the German Federal Data Protection Act. Hunton & Williams' Privacy and Information Security Law Blog reports that the paper includes frequently asked questions that address breach notification procedures that private organizations and some public entities must follow to achieve compliance. The paper contains "practical guidelines" to help organizations identify when notification is required and appropriately comply with notification obligations.
Full Story