New data bridge for UK-US data transfers to help firms
Transfer of UK personal data to US simplified, UK data transfer rules back in step with EU, ICO offers qualified backing.
EU GDPR
Rule Collection
The General Data Protection Regulation or GDPR imposes data privacy and security obligations on organizations that handle the personal data of or provide goods or services to EU citizens or residents.
Overview
Rules in This Collection
Notable
Latest News
Further Reading
Notable
Amazon France Logistique fined €32m for intrusive employee monitoring
CNIL found that the company's monitoring and data collection were disproportionate and excessively intrusive.
Santa Claus is coming to town, but is he GDPR compliant?
"He’s making a list, he’s checking it twice, he’s gonna find out who’s naughty or nice" … but is Santa doing so in compliance with the GDPR?
Latest News
More on EU GDPR
-
EDPB opinion on AI models and use of personal data
The opinion considers anonymity, legitimate interest and deploying an AI model with unlawfully processed personal data.
-
DSARs: How to understand your obligations beyond data
UK and EU courts are increasingly saying that it's not enough to point to a privacy notice to satisfy the extra GDPR requirements.
-
Finnish DPO fines Posti €2.4m for GDPR violations with electronic mailbox
The company allegedly illegally processed customer data when creating a new electronic mailbox for two million customers that haven't requested the service.
-
GDPR: When can data controllers rely on ‘legitimate interests’ to conduct data processing?
New guidelines from the EDPB on the processing of personal data.
-
Podcast: Alice Wallbank from Shoosmiths on data privacy and cyber security issues
We spoke about: CrowdStrike outage, Ashley Madison data breach, prevalence of cyberattacks, government oversight and regulation.
-
Norway aims to become the world's most digitized country
A new strategy from the government sets out clear goals for the “digital Norway of the future.”
-
Irish DPC fines Meta €91m for password storage failures
Meta Ireland stored social media users passwords in ‘plaintext’ without encryption.
-
IMY and Swedish banks in GDPR project to reduce money laundering
The Swedish Data Protection Authority and four banks will investigate better information sharing to fight financial crime.
