,
11 tweets,
4 min read
Read on Twitter
Ryan says @DPCIreland had 2,795 breach reports in 2017. Since GDPR, breaches already at 4,136. "Getting absolutely inundated with complaints and breaches." But we can't be led by the nose by reported breaches, also need to look at companies not reporting #dpi19
Kaiser: "Completely overblown, the topic of privacy in Germany. Lawyers are hiring everyone who has two feet and can stand up. If an authority tries to hire someone, we can't pay the same price." #dpi19
In Germany, "management attention focused on the GDPR, law firms doing their biz and telling everyone we have really high penalties now, everyone is scared about the penalties, but i've seen none currently. But good for DPOs, getting recognition in Germany," says Kaiser. #DPI19
Kaiser of pre-GDPR and post: "It was of no importance to read the working papers from Article 29, now, main task if you're a DPO. If you aren't able to read an English paper from 10-20 pages, you are completely lost in the business." #dpi19
Should DPO be a lawyer? Ryan: "I'm not necessarily sure lawyers have everything in the locker on this, it's context drive. In order to really answer the question, you really need to understand the culture, the client you're giving advice to." #dpi19
"In fairness, DPO, a lot of DPOs, should be the person who really knows the org inside out. They know who to talk to what types of processes have taken place and already ahead of the game." That doesn't necessarily mean lawyer, Ryan says. #dpi19
"I think other people who bring other skills can add something to it, for example, people in records management," said Ryan. #dpi19
Kaiser on priorities: Main task is to bring submarine up to the surface. We have a submarine laying on the ground, we are not driving anymore ... we are completely on the ground. Now we need to go back to the surface, back to an organized org. We have too much complaints. #DPI19
Hesse DPA's Kaiser: If you send us a complaint now, you'll get a message that we got it within 3 months. Nothing else. #DPI19
What percentage of breaches are employee error or cyber attacks? Hesse DPA Kaiser: We aren't able to investigate the breaches bc too many. Also, under GDPR, only need to be reported if affect a certain number of people and majority are small companies. #dpi19
Ryan: The idea of "when it doubt, report it" may be poor advice, companies may need to look a little more closely at whether it's reportable re: the fact the DPAs are so overwhelmed with breaches. #dpi19
