New data bridge for UK-US data transfers to help firms
Transfer of UK personal data to US simplified, UK data transfer rules back in step with EU, ICO offers qualified backing.
EU GDPR
Rule Collection
The General Data Protection Regulation or GDPR imposes data privacy and security obligations on organizations that handle the personal data of or provide goods or services to EU citizens or residents.
Overview
Rules in This Collection
Notable
Latest News
Further Reading
Notable
Amazon France Logistique fined €32m for intrusive employee monitoring
CNIL found that the company's monitoring and data collection were disproportionate and excessively intrusive.
Santa Claus is coming to town, but is he GDPR compliant?
"He’s making a list, he’s checking it twice, he’s gonna find out who’s naughty or nice" … but is Santa doing so in compliance with the GDPR?
Latest News
More on EU GDPR
-
Celito Tech's Ravi Monangi and Ethan Grammer on compliant growth in life science
We explored how small and mid-sized pharmaceutical and biotech companies can avoid costly early compliance mistakes and minimize risk as they scale.
-
GRIP Q&A: Tyler Thompson of Reed Smith on AI data privacy
Ahead of his talk at the AI Governance & Strategy Summit in Seattle, Tyler Thompson spoke to GRIP about AI strategy and future developments.
-
Telenor fined NKr 4m for DPO scheme and internal controls failures
Datatilsynet in Norway found that Telenor contravened EU GDPR with multiple failures.
-
Experts discuss collaboration on AI regulation and the value of data
The last of our reports from this year's Data Insights x Shoosmiths conference.
-
DeepSeek and personal data transfers to China
DeepSeek may disrupt laws on data protection and transfers on both sides of the Atlantic, as well as disrupting US markets.
-
Rise in sanctions and compliance orders by CNIL in 2024
The Commission nationale de l'informatique et des libertés issued 45 more sanctions in 2024 than in 2023.
-
European GDPR fines down 33% in 2024, but enforcement 'remains dynamic'
The Irish Data Protection Commission continues to take the lead on GDPR fines in Europe.
-
The GDPR needs to be reviewed, states Swedish Privacy Protection Authority
IMY argues that the regulation risks losing legitimacy if it is not refined.
