New data bridge for UK-US data transfers to help firms
Transfer of UK personal data to US simplified, UK data transfer rules back in step with EU, ICO offers qualified backing.
EU GDPR
Rule Collection
The General Data Protection Regulation or GDPR imposes data privacy and security obligations on organizations that handle the personal data of or provide goods or services to EU citizens or residents.
Overview
Rules in This Collection
Notable
Latest News
Further Reading
Notable
Amazon France Logistique fined €32m for intrusive employee monitoring
CNIL found that the company's monitoring and data collection were disproportionate and excessively intrusive.
Santa Claus is coming to town, but is he GDPR compliant?
"He’s making a list, he’s checking it twice, he’s gonna find out who’s naughty or nice" … but is Santa doing so in compliance with the GDPR?
Latest News
More on EU GDPR
-
GDPR: When can data controllers rely on ‘legitimate interests’ to conduct data processing?
New guidelines from the EDPB on the processing of personal data.
-
Podcast: Alice Wallbank from Shoosmiths on data privacy and cyber security issues
We spoke about: CrowdStrike outage, Ashley Madison data breach, prevalence of cyberattacks, government oversight and regulation.
-
Norway aims to become the world's most digitized country
A new strategy from the government sets out clear goals for the “digital Norway of the future.”
-
Irish DPC fines Meta €91m for password storage failures
Meta Ireland stored social media users passwords in ‘plaintext’ without encryption.
-
IMY and Swedish banks in GDPR project to reduce money laundering
The Swedish Data Protection Authority and four banks will investigate better information sharing to fight financial crime.
-
Electricity and gas firm fined €5m for unsolicited contacts and using old data
More than 2,300 customers were contacted, with some 'relationships on paper' endorsed with false signatures.
-
Navigating cybersecurity compliance: NIS2 UK/US stakeholder impact
Increasing reliance on digital platforms and a growing threat from bad actors means regulators are giving more attention to cybersecurity compliance.
-
Norwegian university fined for GDPR violations when using Microsoft Teams
Around 16,000 registered users connected to the university were affected, included Ukrainian refugees.
