Loading

Category: Data Protection

Data Protection

Pseudonymisation guidelines adopted by the EDPB, along with steps to enhance collaboration with competition authorities

The EDPB released new guidelines on pseudonymisation and a position paper on data protection and competition law to strengthen GDPR compliance. In January 2025, the European Data Protection Board (EDPB) made a significant regulatory announcement during its plenary meeting, by adopting new pseudonymisation guidelines, as well as issuing a position paper on the interplay between

The ICO provides tips on data protection

Prioritizing data protection for your business in 2025: ICO provides tips As you undertake business operations this year, there’s one crucial element that shouldn’t be overlooked—data protection. Getting data protection right from the start will not only ensure compliance with data privacy laws but also help you build trust with customers, suppliers, and partners alike.

CNIL imposed a fine of €240,000 on KASPR for multiple GDPR violations

CNIL of France has imposed a fine of €240,000 on KASPR for multiple GDPR violations linked to the unlawful collection and retention of personal data.  KASPR, a company offering a Chrome extension to extract professional contact details from LinkedIn and other online sources, has faced regulatory action for its practices. Through its database of approximately

Coolblue was fined €40,000 for violating GDPR by unlawfully processing personal data via cookies

Coolblue was fined €40,000 by the Dutch DPA for unlawfully processing personal data via cookies, by failing to obtain explicit consent.   The Dutch Data Protection Authority (AP) recently imposed a €40,000 fine on Coolblue for unlawfully processing personal data via cookies in 2020. The violation stemmed from Coolblue’s failure to obtain explicit consent from

Draft Measures for the Certification of the Protection of Personal Information Exported Abroad published by China’s CAC

The Cyberspace Administration of China (CAC) released the draft Measures for Cross-Border Data Transfer which clarify Personal Information Protection Certification.   On January 3, 2025, the Cyberspace Administration of China (CAC) released a draft document titled “Measures for the Certification of the Protection of Personal Information Exported Abroad” (hereinafter, draft measures). These measures, comprising 20

GDPR’s role in responsible AI development: CEPD publishes opinion on AI models

The CEPD’s recent opinion on AI models highlights the GDPR’s role in responsible AI development. The European Data Protection Board (CEPD) issued an opinion on December 18, 2024, emphasizing the importance of GDPR principles in the ethical development and deployment of AI models. This comprehensive opinion, requested by the Irish Data Protection Authority (DPA), focuses

A year of Data Protection Law: 2024 review

Throughout this year, the EU and the UK have experienced several notable developments in data protection. In this article, we will highlight some of the key milestones of 2024.   The year began with an ever relevant reminder, advising UK organisations on the transfer of personal data to the US under the UK GDPR, stressing

New EU Product Liability Directive

Council of the EU has adopted a new EU Product Liability Directive, offering greater legal clarity to both businesses and consumers.  The European Union has unveiled a significant update to its product liability laws through the new Product Liability Directive. This directive officially came into force on December 8, 2024., replacing the 1985 law, bringing

A Polish catering company was fined €54,600 for a data breach after an employee lost a flash drive with sensitive data.

A Polish catering company was fined €54,600 for failing to protect personal data after an employee lost a flash drive containing sensitive information, revealing vulnerabilities in the company’s data security. The Polish Data Protection Authority (UODO) recently fined Res-Gastro M. Gaweł Sp. k., a catering company in Kolbuszowa, Poland, €54,600 for failing to implement adequate

Aphaia participates in the event organised by NAIR Center about AI and society in Pamplona

Aphaia’s Managing Partner Cristina Contero Almagro offered a presentation about the Future and Regulation of Artificial Intelligence in Spain at the “AI and Society: Challenges and Opportunities” event organised by NAIR Center in Pamplona on 21st November.   On 21st November, Pamplona became the center of critical discussions about the intersection of artificial intelligence (AI)