CNIL Launches Public Consultation on Transparency and International Data Transfers under the GDPR
On September 19, 2017, the French Data Protection Authority (“CNIL”) launched an online public consultation on two topics identified by […]
guidance
A Guide to Common Types of Two-Factor Authentication on the Web
Two-factor authentication (or 2FA) is one of the biggest-bang-for-your-buck ways to improve the security of your online accounts. Luckily, it’s […]
ICO GDPR guidance on Contracts and liabilities between controllers and processors
On 1 August we reported on the launch of the International Regulatory Strategy Group’s “Article 28 GDPR ready contractual terms” […]
What’s New on Surveillance Self-Defense?
Since 2014, our digital security guide, Surveillance Self-Defense (SSD), has taught thousands of Internet users how to protect themselves from […]
Demonstrating Responsible Use for Legitimate Interests Is Necessary Now
To address the gap in the practical use of legitimate interests to demonstrate accountability, the IAF has developed a legitimate […]
GDPR: setting the record straight on data breach reporting
Misleading press stories have claimed that all breaches will need to be reported to the Information Commissioner’s Office and customers […]
GDPR consent and fair processing
The General Data Protection Regulation (GDPR) (EU) 2016/679 of 27 April 2016 which comes into force in May 2018, will […]
What U.S. multinational employers must do to prepare for the impending GDPR
Because the GDPR was drafted with the primary intention of protecting consumers who participate in the “digital economy,” determining how […]
Privacy International publishes the Guide to International Law and Surveillance
The guide covers array of relevant topics such as the (il)legality of mass surveillance operations, the law surrounding data retention, […]
Belgian DPA provides guidance on record keeping under GDPR
By Patrick Van Eecke and Buki Owa The Belgian Data Protection Authority recently published a template that can be used […]
ICO points businesses towards alternatives to consent as a basis for processing personal data
Businesses should consider whether they could or should rely on an alternative to consent to process personal data. That is […]
ICO guidance: a good re-SAR-lt for controllers?
Subject access requests (“SARs”) are viewed either as an essential right or a huge administrative burden, depending on whether you […]