Category: GDPR

CJEU’s Advocate General Henrik Saugmandsgaardøe publishes his opinion in the so-called ‘Schrems II’ case. New Year, new regulation concerns? Two weeks before the end of 2019, Court of Justice of the European Union’s (CJEU) Advocate General delivered his opinion in the case known as ‘Schrems II’, concerning the validity of the Standard Contractual Clauses (SCCs).

The right to be forgotten is regulated in Article 17 GDPR, which grants individuals the right to request, on certain grounds, erasure of their personal data. “Right to be Forgotten”. A famous one over the last few years, right? The case known as Google Spain v. Costeja Gonzalez is the origin of this concept. Let’s

On December 2nd, the European Data Protection Board (EDPB) adopted its opinion on the UK data protection Supervisory Authority draft accreditation requirements for a code of conduct monitoring body. Earlier this year, the United Kingdom Supervisory Authority (UK SA) submitted its draft decision containing the accreditation requirements for a code of conduct monitoring body to

From now until February 12, 2020, the ICO will facilitate a public consultation on draft right of access guidance. Over a year and a half ago, the GDPR was officially implemented within the EU and UK with an aim of giving greater control to individuals over their personal data. Article 15 of the GDPR specifically

The European Data Protection Board (EDPB) adopted draft guidelines on data protection by design and by default according to article 25 GDPR. Did you struggle with the decision of turning the settings on or off by default when you created your company App? Do you normally feel tempted to gather more data than necessary from

Real Estate company fined millions for violations of the General Data Protection Regulation (GDPR) in relation to its archive systems. Is your company’s archive system compatible with the GDPR? The answer to this could cost you thousands, hundreds of thousands, or even millions! Indeed this is a lesson that Berlin-based Real Estate company, Deutsche Wohnen

Withdrawal of consent requests could have dire consequencesfor your company if they are not immediately and seamlessly processed. Withdrawal of consent should be just as easy as giving consent.  So says the President of the Polish Data Protection Authority. This assessment came as a result of the review of practices by company ClickQuickNow. According to

Spanish Data Protection Authority (AEPD) has launched new guidance on hash function as a personal data pseudonymisation technique. GDPR refers pseudonymization of personal data as one of the appropriate technical and organisational measures that may be taken by data controllers in order to ensure a level of security appropriate to the risk. However, it does