-
NIS Law: the new incident notification procedure 31/07/2019
Incident notification obligation according to the NIS Directive The law of 7 April 2019 (the ‘NIS law’) states that the Operators of Essential Services (OES) and the Digital Service Providers (DSP) shall, amongst other things, notify any incident that have a significant impact on their networks and information systems or on the provision of their services. This law transposes into Belgian law the Directive (EU) 2016/1148 of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union (the ‘NIS Directive’). For more information about this law, see our previous news ... -
Skype: a telecom operator according to the ECJ 24/06/2019
Is Skype a telecom operator ? A hard question for the ECJ The article 9(1) of the Law of 13 June 2005 on electronic communications (‘LEC’), transposing into Belgian law the Directive 2002/21/EC of 7 March 2002 on a common regulatory framework for electronic communications networks and services (‘Framework Directive’), provides for a notification obligation for the electronic communications services providers before starting their activity. Facts In May 2016, the Belgian Institute of Postal Services and Telecommunications (‘the IBPT’ in french) imposed a fine of €223.454 on Skype for refusing to notify itself as a telecom operator for the SkypeOut ... -
GDPR : Should non-EU companies designate a DPO/a representative/both? 18/06/2019
Even if your company is not established in the EU, you probably have heard about the famous “GDPR“. This European regulation entered into force in May 2018. It contains the rules regarding the processing of personal data. Like every company, you process personal data everyday (from clients, employees, ….). And, as a company willing to be compliant, you are asking questions: does this EU regulation apply to me? If so, do I have to appoint a specific agent in the EU to comply? Don’t panic! Here is a little summary of what the GDPR provides for the data controller or ... -
NIS Directive: finally transposed into Belgian law! 13/06/2019
That’s it, the NIS Directive has finally been transposed into Belgian law! Brief outline The Draft Act transposing into Belgian law the Network and Information Security Directive (the “NIS Directive”) (Directive (EU) 2016/1148 of 6 July 2016) has finally been adopted. As previously reported here, the objective of the Directive is to achieve a high level of cybersecurity in the EU. The text of the Draft Act provided that the law would enter into force as soon as it was published in the Belgian Official Gazette. It is now done! Indeed, the law of 7 April 2019 establishing a framework ... -
RGPD : Quand faire une analyse d’impact en Belgique ? 04/06/2019
Le 1er avril dernier est entrée en vigueur la liste des cas dans lesquels l’Autorité de protection des données belge estime qu’une analyse d’impact doit obligatoirement être réalisée. Petit récapitulatif : Cadre Pour rappel, le RGPD exige qu’une analyse d’impact soit réalisée par le responsable du traitement (et pas par le sous-traitant, qui doit simplement l’assister) lorsqu’un traitement est “susceptible d’engendrer un risque élevé pour les droits et libertés des personnes concernées”. Que cela signifie-t-il concrètement ? RGPD Ce concept de risques élevés est explicité par le RGPD pour 3 cas précis : l’évaluation systématique et approfondie d’aspects personnels fondés sur ... -
Non-concurrence : le profil Linkedin peut-il servir de preuve ? 28/05/2019
LinkedIn vous informe de la carrière de vos ex-employés. Ce site peut-il servir de preuve à une violation de la clause de non-concurrence ? Utilité de la clause de non-concurrence Un employeur peut prévoir une clause de non-concurrence dans les contrats conclu avec son personnel, dans les conditions autorisées par la loi. Une telle clause permet de se protéger contre le départ abrupts de travailleurs à la concurrence. Eventuellement, l’employeur peut décider d’activer cette clause à l’issue du contrat. Ce sera le cas, s’il constate que son ancien employé ne respecte pas cette interdiction de concurrence. L’employeur peut demander des ...