UK’s ICO offers guidance on security and breach reporting for eID and trust services
Businesses that provide services designed to show that electronic data is authentic and can be trusted have been issued with […]
DPA
Is it possible to choose your lead supervisory authority under the GDPR?
The General Data Protection Regulation regulates cross-border processing of personal data. For many organizations, identifying their lead supervisory authority (LSA), […]
Spanish DPA fines Google €300,000 over Street View data collection
Seven years after Google raised hackles by collecting information about Wi-Fi access points with its Street View fleet, Spain’s privacy […]
Software development with Data Protection by Design and by Default
The Norwegian Data Protection Authority has developed these guidelines to help organisations understand and comply with the requirement of data […]
CNIL releases a free software for PIA
This user-friendly tool, available both in French and in English, unfolds the PIA methodology CNIL has been developing since 2015. […]
Privacy regulators and their many hats
National data protection authorities seem to get the most attention when they impose fines and penalties for violations of data […]
Bulgarian DPA introduces 10-step action plan for GDPR implementation
In the light of the upcoming EU General Data Protection Regulation (the “GDPR”) implementation in May 2018, the Bulgarian Personal […]
CNIL serves notice to cease serious breach of privacy of connected toys
The robot «I-QUE» and the doll «My Friend Cayla» are so called “connected toys”. They answer children’s questions on various […]
EDPS wants centralised regulator with muscle to police firms
EU lawmakers should create a new, centralised data protection authority to oversee investigations of privacy breaches that affect more than […]
ICO issues more GDPR guidance and confirms that BCRs will continue
The guidance, issued on 21 November, puts together information about guidance previously issued by the ICO, and links to guidance […]
What’s wrong with WP29 guidelines on personal breach notification under GDPR?
Article 29 Working Party has published guidance on GDPR breach notification requirements to supervisory authorities and data subjects. It builds […]
Irish DPA issues a statement on Art 29 Working Party letter to WhatsApp
The Data Protection Commissioner (DPC) notes the publication of the Article 29 Working Party’s most recent letter to WhatsApp on […]