Demonstrating Responsible Use for Legitimate Interests Is Necessary Now
To address the gap in the practical use of legitimate interests to demonstrate accountability, the IAF has developed a legitimate […]
opinion
Acxiom’s European Privacy Officer (Mostly) Demystifies GDPR
GDPR was supposed to establish what sort of data sites can collect without asking for an opt-in. However, a part of […]
GDPR consent and fair processing
The General Data Protection Regulation (GDPR) (EU) 2016/679 of 27 April 2016 which comes into force in May 2018, will […]
CIPL Issues Comments on the Proposal for an EU ePrivacy Regulation
The Centre for Information Policy Leadership (“CIPL”) issued a white paper on the Proposal for an ePrivacy Regulation. The White […]
Three Types of Data in the GDPR
The paper aims to determine how the General Data Protection Regulation (GDPR) could be read in harmony with Article 29 […]
Data protection is not just a matter of law
Updating the 1998 UK Data Protection Act is necessary because in May 2018 a sweeping new EU general directive on […]
Behavioral advertising industry slams ePrivacy plans
In scenes reminiscent of the last days of GDPR drafting, lobbyists from the advertising industry queued up to give European […]
Bărbulescu ruling: Workplace privacy is alive and kicking
On Sept. 5, the European Court of Human Rights handed down a landmark judgement about privacy and monitoring at the […]
Common GDPR myths, debunked
A flurry of “GDPR experts” have surfaced over the last year to help businesses navigate the forthcoming European data privacy […]
EU states’ data retention laws still violating privacy rights, report warns
Two legal judgements at the highest level in Europe in recent years have reaffirmed that all Member States’ data retention […]
Chief privacy officers may not be eligible to serve as data protection officers
People who currently serve as chief privacy officers for businesses operating in the EU may not necessarily be able to […]
Do I need to report this breach?
How does a data controller know, in the case of a personal data breach, whether it must report the breach […]