Category: Data Protection

The pharmacy left 500,000 documents in unlocked containers at the back of its premises. Failing to ensure the security of special category of personal data may trigger large fines under the GDPR. Are your devices password-protected? Do you make sure that you only use cloud services that encrypt the data? If your answer to these

CJEU’s Advocate General Henrik Saugmandsgaardøe publishes his opinion in the so-called ‘Schrems II’ case. New Year, new regulation concerns? Two weeks before the end of 2019, Court of Justice of the European Union’s (CJEU) Advocate General delivered his opinion in the case known as ‘Schrems II’, concerning the validity of the Standard Contractual Clauses (SCCs).

The right to be forgotten is regulated in Article 17 GDPR, which grants individuals the right to request, on certain grounds, erasure of their personal data. “Right to be Forgotten”. A famous one over the last few years, right? The case known as Google Spain v. Costeja Gonzalez is the origin of this concept. Let’s

On December 2nd, the European Data Protection Board (EDPB) adopted its opinion on the UK data protection Supervisory Authority draft accreditation requirements for a code of conduct monitoring body. Earlier this year, the United Kingdom Supervisory Authority (UK SA) submitted its draft decision containing the accreditation requirements for a code of conduct monitoring body to

From now until February 12, 2020, the ICO will facilitate a public consultation on draft right of access guidance. Over a year and a half ago, the GDPR was officially implemented within the EU and UK with an aim of giving greater control to individuals over their personal data. Article 15 of the GDPR specifically

The European Data Protection Board (EDPB) adopted draft guidelines on data protection by design and by default according to article 25 GDPR. Did you struggle with the decision of turning the settings on or off by default when you created your company App? Do you normally feel tempted to gather more data than necessary from

Real Estate company fined millions for violations of the General Data Protection Regulation (GDPR) in relation to its archive systems. Is your company’s archive system compatible with the GDPR? The answer to this could cost you thousands, hundreds of thousands, or even millions! Indeed this is a lesson that Berlin-based Real Estate company, Deutsche Wohnen