New data bridge for UK-US data transfers to help firms
Transfer of UK personal data to US simplified, UK data transfer rules back in step with EU, ICO offers qualified backing.
Rules Navigator
- Regulation
- Technology
- Resources
Latest News
EU GDPR
Rule Collection
The General Data Protection Regulation or GDPR imposes data privacy and security obligations on organizations that handle the personal data of or provide goods or services to EU citizens or residents.
Overview
Rules in This Collection
Notable
Latest News
Further Reading
Notable
Amazon France Logistique fined €32m for intrusive employee monitoring
CNIL found that the company's monitoring and data collection were disproportionate and excessively intrusive.
Santa Claus is coming to town, but is he GDPR compliant?
"He’s making a list, he’s checking it twice, he’s gonna find out who’s naughty or nice" … but is Santa doing so in compliance with the GDPR?
Latest News
More on EU GDPR
-
What you need to know about the EU Data Act and its extraterritorial scope
The Act applies widely across industries, including both EU and non-EU organizations that manufacture or offer connected products across the EU.
-
GRIP Extra: CFTC/SEC again extend Form PF compliance, AMF pushes for stronger ESMA oversight
Our in-brief roundup of notable stories from the last week.
-
GRIP Extra: FDA targets "deceptive" pharma advertising, Canada's OFSI toughens penalty stance
Our in-brief roundup of notable stories from the last week.
-
Podcast: Shruti Goel on VTO technology, biometric data, privacy and agentic AI
With a wealth of experience in retail data and privacy, Shruti Goel of Shoosmiths shares her insight on new technologies and data compliance.
-
Danish furniture chain fined DKr 1.5m for GDPR failures
The company failed to delete customer data, and the judgment highlights the important practice of calculating fines of GDPR violations.
-
Lithuania VDAI reports more complaints and higher fines in 2024
The largest fine of the year was issued to Vinted for violating provisions of the EU GDPR.
-
Litigating privacy: How African courts are defining data governance
From Meta’s legal challenges in Nigeria to judicial interventions in Kenya and South Africa, courts are increasingly at the forefront of interpreting digital rights.
-
Navigating data protection compliance in Africa’s top tech investment hubs
How data protection regimes in Nigeria, South Africa, Kenya, and Egypt affect investment structuring, technology deployment, and operational scalability.
