Automated Decisions – A Right for Individuals or A Prohibition for Controllers?
The complexity of the EU General Data Protection Regulation is often alleviated by the guidance of regulatory authorities who contribute […]
GDPR
Scope of rules on profiling not confined to solely automated processing
Laws that place restrictions on the ‘profiling’ of individuals do not just apply to data processing completed entirely automatically, EU […]
Small businesses at risk of being overwhelmed by data protection burden
With eight months until the introduction of the General Data Protection Regulations (GDPR), the countdown is well and truly on […]
Survey reveals lack of awareness of GDPR among company directors
Two in five company directors in the UK do not know whether new EU data protection laws will apply to […]
Businesses will be considered ‘aware’ of data breaches under GDPR when their data processors notice the breach
Businesses that outsource the processing of personal data to other companies will be said to be aware of data breaches […]
Europe’s new privacy regime: What’s an ad tech company to do?
There’s no question the GDPR has anyone who’s paying attention “on their feet.” Talk to any privacy consultant or vendor […]
WP29 releases draft breach notification guidelines
The EU’s General Data Protection Regulation imposes stricter obligations on data controllers and processors to ensure the security of personal […]
IAPP-EY Annual Governance Report 2017
This third annual study of data governance in organizations, surveying modern privacy operations about the present and future of the […]
What’s new in the WP29 guidelines on DPIAs?
The Article 29 Working Party has published this week its “last revised” guidelines on data protection impact assessments and determining […]
How to comply with provisions on joint controllers under the GDPR
The concept of joint controllers in EU law, in contrast to a distinction between controllers and processors, has not been […]
MEPs push for stronger data protection by EU institutions and agencies
Civil Liberties MEPs on Thursday passed amendments to new EU rules on the processing of personal data by the EU […]
Infrastructure companies must become data guardians in the era of ‘infratech’
Infrastructure companies need to become adept at handling and using data and managing cyber risk to exploit opportunities in ‘infratech’ […]