CNIL releases a free software for PIA
This user-friendly tool, available both in French and in English, unfolds the PIA methodology CNIL has been developing since 2015. […]
DPA
Privacy regulators and their many hats
National data protection authorities seem to get the most attention when they impose fines and penalties for violations of data […]
Bulgarian DPA introduces 10-step action plan for GDPR implementation
In the light of the upcoming EU General Data Protection Regulation (the “GDPR”) implementation in May 2018, the Bulgarian Personal […]
CNIL serves notice to cease serious breach of privacy of connected toys
The robot «I-QUE» and the doll «My Friend Cayla» are so called “connected toys”. They answer children’s questions on various […]
EDPS wants centralised regulator with muscle to police firms
EU lawmakers should create a new, centralised data protection authority to oversee investigations of privacy breaches that affect more than […]
ICO issues more GDPR guidance and confirms that BCRs will continue
The guidance, issued on 21 November, puts together information about guidance previously issued by the ICO, and links to guidance […]
What’s wrong with WP29 guidelines on personal breach notification under GDPR?
Article 29 Working Party has published guidance on GDPR breach notification requirements to supervisory authorities and data subjects. It builds […]
Irish DPA issues a statement on Art 29 Working Party letter to WhatsApp
The Data Protection Commissioner (DPC) notes the publication of the Article 29 Working Party’s most recent letter to WhatsApp on […]
Stricter consent rules will pose challenges for data brokers
It will become harder for data brokers to sell personal data to businesses in a way that complies with the […]
ICO warns data broking industry after issuing £80,000 fine to unlawful data supplier
A firm trading in people’s personal information and describing itself as ‘the UK’s Premier Lead Generation Provider’ has been fined […]
Israeli DPA guidelines on workplace surveillance
On Oct. 17, Israel’s data protection authority, which recently changed its name to the Privacy Protection Authority (formerly the ILITA), […]
Most organisations are unclear about data storage and transfer arrangements
Most privacy notices displayed on websites and mobile apps do not explain to consumers the country in which collected personal […]