Swiss Re Ag · SIX:SREN

Swiss Re — Investor Presentation (October 2016)

21 slides from Swiss Re's investor presentation, Oct 5, 2016

  1. Slide 1: Drones, privacy intrusion and safeguarding data

    Drones, privacy intrusion and safeguarding data. Sally Annereau Senior data protection advisor 5 October 2016 Please treat all transactions and clients' names as confidential

  2. Slide 2: Contents

    Contents > Drone market > Characteristics and privacy challenges > Current EU legal framework – privacy – data protection > Assessing data protection and privacy risks > Enforcement and remedies > The General Data Protection Regulation (GDPR) – what the new EC law means for drone use? Please treat a

  3. Slide 3: The sky's the limit!

    The sky's the limit! > Rapidly expanding global market > Wide scope of applications > Proven benefits and developing opportunities > Future technology – micro drones imitating nature Please treat all transactions and clients' names as confidential

  4. Slide 4: Privacy challenges

    Privacy challenges > Video and still images > Wider drone payload applications – including high power zooms, facial recognition, motion detection, ANPR, Wi-Fi sensors, wider IOT connectivity > Capable of accessing all areas > Significant risks for enhanced surveillance > Public attitudes – 62% more

  5. Slide 5: Current EU privacy and dp framework

    Current EU privacy and dp framework > Council of Europe Convention on Human Rights – Article 8 > Charter of Fundamental Rights of Europe – Articles 7 (Privacy) and 8 (data protection) > Directive 95/46/EC (Data Protection) > Directive 2002/58/EC (Privacy and Electronic Communications) > National imp

  6. Slide 6: Right to private life

    Right to private life > Council of Europe Convention on Human Rights – Article 8 "Everyone has the right to respect for his family, his home and his correspondence" > Von Hannover v Germany (no2) ECHR a person's image constitutes one of the chief attributes of his or her personality, as it reveals t

  7. Slide 7: Reasonable expectation of privacy?

    Reasonable expectation of privacy? Consider: > Location? > Subject(s) - adult or child? > Potential exceptions – consent provided? – filming from afar? – sporting event (made clear from the programme) – Law enforcement or public interest > Test of proportionality is key Please treat all transactions

  8. Slide 8: Data Protection

    Data Protection > Personal data – information allowing for people to be identified directly or indirectly – Includes image, location, sound, behaviour > Applies to private entities and public authorities (excluding law enforcement and certain journalistic activity) > Purely family, domestic househol

  9. Slide 9: Key requirements - 1. Lawful processing

    Key requirements - 1. Lawful processing > Legitimate basis – consent? – contract necessity (where subject is a party or at their request) – necessary for legal or public interest reasons? – necessary to protect the vital interests of subject? – necessary for purposes of legitimate interests? Please

  10. Slide 10: Key requirements - 2. Proportionate processing

    Key requirements - 2. Proportionate processing > Impact assessments – users – manufacturers > Understanding the capabilities (and limitations) of the drone – recording features – field of vision – geo- ringfencing – data storage capabilities > Considering the environment and flight path Please treat

  11. Slide 11: Key requirements - 3. Transparent processing

    Key requirements - 3. Transparent processing > Clear and transparent communication – who is the controller of the personal data? – what the purpose of the processing? – what data being processed? – who is it shared with? – how individuals can exercise rights (e.g. access, correction, erasure) Please

  12. Slide 12: Communication options

    Communication options > Advance flight notices > Onsite notices > Drone identification > Operator visibility > Online information resources Please treat all transactions and clients' names as confidential

  13. Slide 13: Key requirements - 4. Security

    Key requirements - 4. Security > Appropriate technical and organisational measures against – accidental or unlawful destruction – accidental loss, alteration, unauthorised disclosure or access > Includes – remote device cyber-attacks – transmission of captured images/content – storage of data (both

  14. Slide 14: E.Gs Current potential DPA financial sanctions

    E.Gs Current potential DPA financial sanctions Country Financial penalties UK Up to £500,000 Spain Up to Eur 600.000 Ireland Up to Eur 250,000 per offence Denmark Minimum fine generally DKK 10,000 -25,000 Increases of DKK 100 for each further act of violation France Up to Euro 300,000 for an individ

  15. Slide 15: GDPR: New EU DP law (from 25 May 2018)

    GDPR: New EU DP law (from 25 May 2018) Scope Breach Notification New Rights • Broader definition, personal data • To DPA and potentially subjects • Right to be forgotten • Extended to those who are not in • Within 72 hours of awareness • Data Portability the EU if processing relates to EU data subje

  16. Slide 16: Tougher enforcement and penalties under the GDPR

    Tougher enforcement and penalties under the GDPR Article 83 - examples of infringements and corresponding fines: Infringement of below requirements which can Infringement of below requirements which can attract a fine of up to 2% of total global annual attract a fine of up to 4% of total global annu

  17. Slide 17: Enforcement powers under the GDPR

    Enforcement powers under the GDPR > Article 58 - Supervisory Authorities' powers include (investigative and corrective): – to order the controller and the processor to provide any information it requires – obtain access to all personal data and all information necessary to perform its tasks; – obtai

  18. Slide 18: Other GDPR remedies and penalties

    Other GDPR remedies and penalties > Article 77 – right to lodge a complaint with a DPA > Article 79 - right to bring civil claims > Article 80 - potential to join class action suits through a not for profit representative. > Article 82 - right to compensation Please treat all transactions and client

  19. Slide 19: Any questions?

    www.taylorwessing.com/globaldatahub Any questions? Please treat all transactions and clients' names as confidential

  20. Slide 20: About Taylor Wessing

    About Taylor Wessing Taylor Wessing is a leading international law firm, working with clients in the world’s most dynamic industries. We take a single-minded approach to advising our clients; to help them succeed by thinking innovatively about their business issues. Our focus on the industries of to

  21. Slide 21: Basic Copyright Notice & Disclaimer

    Basic Copyright Notice & Disclaimer ©2016 This presentation is copyright protected. All rights reserved. You may download or print out a hard copy for your private or internal use. You are not permitted to create any modifications or derivatives of this presentation without the prior written permiss

Swiss Re — Investor Presentation (October 2016) on 6ix