The Spanish data protection authority – AEPD – has published a Model Data Protection Impact Assessment ‘DPIA) Report for the Private Sector. it includes the factors that must be taken into account by the private sector in order to perform a DPIA, including the description of the data processing activity, its purpose and legal basis, as well as risk mitigating measures.
Google’s ‘deceptive’ account sign-up process targeted with GDPR complaints
Consumer rights groups in Europe have filed a series of privacy complaints against Google, accusing them of deceptive design around