ICO issues more GDPR guidance and confirms that BCRs will continue
The guidance, issued on 21 November, puts together information about guidance previously issued by the ICO, and links to guidance […]
DPA
What’s wrong with WP29 guidelines on personal breach notification under GDPR?
Article 29 Working Party has published guidance on GDPR breach notification requirements to supervisory authorities and data subjects. It builds […]
Irish DPA issues a statement on Art 29 Working Party letter to WhatsApp
The Data Protection Commissioner (DPC) notes the publication of the Article 29 Working Party’s most recent letter to WhatsApp on […]
Stricter consent rules will pose challenges for data brokers
It will become harder for data brokers to sell personal data to businesses in a way that complies with the […]
ICO warns data broking industry after issuing £80,000 fine to unlawful data supplier
A firm trading in people’s personal information and describing itself as ‘the UK’s Premier Lead Generation Provider’ has been fined […]
Israeli DPA guidelines on workplace surveillance
On Oct. 17, Israel’s data protection authority, which recently changed its name to the Privacy Protection Authority (formerly the ILITA), […]
Most organisations are unclear about data storage and transfer arrangements
Most privacy notices displayed on websites and mobile apps do not explain to consumers the country in which collected personal […]
Dutch DPA: unlimited publication of WHOIS data violates privacy law
The unlimited publication of WHOIS-data of domain name registrants by Dutch registries is a violation of current Dutch privacy law. […]
Israeli DPA publishes guidelines on workplace surveillance
On Oct. 17, Israel’s data protection authority, which recently changed its name to the Privacy Protection Authority (formerly the ILITA), […]
EU privacy regulators increase pressure on WhatsApp over data sharing
EU privacy regulators rapped WhatsApp on the knuckles for not resolving concerns over the service’s sharing of user data with […]
French DPA Publishes a Compliance Pack Regarding Connected Vehicles
On October 17, 2017, the French Data Protection Authority (“CNIL”), after a consultation with multiple industry participants that was launched […]
Website privacy notices are too vague and generally inadequate
Organisations need to be more open, honest and transparent in their online privacy notices about how they handle people’s personal […]