New data bridge for UK-US data transfers to help firms
Transfer of UK personal data to US simplified, UK data transfer rules back in step with EU, ICO offers qualified backing.
EU GDPR
Rule Collection
The General Data Protection Regulation or GDPR imposes data privacy and security obligations on organizations that handle the personal data of or provide goods or services to EU citizens or residents.
Overview
Rules in This Collection
Notable
Latest News
Further Reading
Notable
Amazon France Logistique fined €32m for intrusive employee monitoring
CNIL found that the company's monitoring and data collection were disproportionate and excessively intrusive.
Santa Claus is coming to town, but is he GDPR compliant?
"He’s making a list, he’s checking it twice, he’s gonna find out who’s naughty or nice" … but is Santa doing so in compliance with the GDPR?
Latest News
More on EU GDPR
-
DeepSeek and personal data transfers to China
DeepSeek may disrupt laws on data protection and transfers on both sides of the Atlantic, as well as disrupting US markets.
-
Rise in sanctions and compliance orders by CNIL in 2024
The Commission nationale de l'informatique et des libertés issued 45 more sanctions in 2024 than in 2023.
-
European GDPR fines down 33% in 2024, but enforcement 'remains dynamic'
The Irish Data Protection Commission continues to take the lead on GDPR fines in Europe.
-
The GDPR needs to be reviewed, states Swedish Privacy Protection Authority
IMY argues that the regulation risks losing legitimacy if it is not refined.
-
EDPB opinion on AI models and use of personal data
The opinion considers anonymity, legitimate interest and deploying an AI model with unlawfully processed personal data.
-
DSARs: How to understand your obligations beyond data
UK and EU courts are increasingly saying that it's not enough to point to a privacy notice to satisfy the extra GDPR requirements.
-
Finnish DPO fines Posti €2.4m for GDPR violations with electronic mailbox
The company allegedly illegally processed customer data when creating a new electronic mailbox for two million customers that haven't requested the service.
-
GDPR: When can data controllers rely on ‘legitimate interests’ to conduct data processing?
New guidelines from the EDPB on the processing of personal data.
