DPO liability and potential insurance coverage
Could data protection officers (DPOs) conceivably be exposed to staggering personal liability for data protection violations by their employers or […]
GDPR News
Google reboots advertising tools to give users more control over their data
The new features come as internet companies such as Google and Facebook are facing a global backlash around their handling […]
EU court could settle ICANN data gathering dispute
The internet’s global domain name organisation, the Internet Corporation for Assigned Names and Numbers (ICANN), has appealed a recent ruling […]
Implementing appropriate security under the GDPR
Security of processing is a foundational principle of the GDPR. Under Article 5(1)(f), personal data shall be “processed in a […]
Looking to Canada for input on the GDPR’s data retention requirements
One of the core principles of data processing set forth in Article 5(e) of the EU General Data Protection Regulation […]
Apple to Close iPhone Security Hole That Law Enforcement Uses to Crack Devices
Apple is closing a technological loophole that let authorities hack into locked iPhones, infuriating law enforcement officials and reigniting a […]
Alexa and other smart speakers may endanger privacy rights
Legal experts say internet-connected smart speakers are the latest example of how technology and devices endear themselves to consumers before […]
No cross-checking on consent needed under PSD2
Banks do not need to check whether their customers have given other companies permission to access information from their payment […]
London cops’ facial recognition doesn’t work
London cops’ facial recognition kit has only correctly identified two people to date – neither of whom were criminals – […]
The California Consumer Privacy Act of 2018 is not at all like the GDPR
There seems to be a rise in fearmongering about the next big potential privacy legislation on the horizon after GDPR […]
GDPR implementation bills: The election problem
It is by now no secret that a lot of EU countries won’t have implementing acts ready in time for […]
How not to write your GDPR-‘compliant’ data protection notice
GDPR requires companies to have a robust data processing notices. However, “obfuscating their data collection and processing activities on the […]