The European Commission published a draft decision and some guidance on standard contractual clauses for transferring personal data outside the European...
After taking a week’s breather, it’s again an action by the ICO that draws my attention. On Tuesday, the ICO issued an enforcement notice to Experian. […]
When looking over what happened this week, there were a couple of things I could talk about: EDPB’s guidelines on relevant and reasoned objection under...
The Data Protection Authority of Hamburg (HmbBfDI) fined H&M, one of the largest global clothing retailers, €35.2 million for excessive monitoring of...
Reflecting back on my post from Friday on joint controllers, I thought it might be useful to reflect on a couple of instances where your data […]
On September 7, 2020 the European Data Protection Board (EDPB) publish guidelines on “data processing agreements vs Joint Controller Agreements”. I link...
This is the first of a weekly post where I will try to highlight whatever interesting happened, related to data protection and my thoughts on it. […]
New technology is always going to prompt questions about privacy for users. Free app users get so used to the convenience, and they eventually forget...
Many companies struggle to comply with GDPR, but how many of those end up being punished by regulators? The answer is very few. Despite the...
Whatever your feelings about it are, the GDPR exists to ensure companies Get Data Protection Right. It’s not there to tyrannize companies or threaten...
Those familiar with the General Data Protection Regulation will likely have come across the term “pseudonymisation”. The legislation requires the...
Although GDPR supervisory authorities can issue fines when companies disregard data protection, it’s really a last resort. We encourage you to view the...