Category: Data Protection Digest

The “Data Protection Digest” category offers a comprehensive insight into the ever-evolving landscape of data protection, compliance-related news, and pertinent issues affecting businesses and professionals. This bi-weekly series delivers critical updates on data protection, privacy regulations, and compliance matters, providing valuable resources for businesses seeking to stay informed and compliant in today’s data-centric environment.

Stay Informed with Data Protection Digest In each release of the “Data Protection Digest,” businesses and professionals gain access to timely and relevant updates on data protection regulations, privacy policies, and compliance-related news. The series offers in-depth analysis and insights into recent developments, ensuring that businesses are well-equipped to navigate the complexities of data protection and compliance.

Current Compliance-Related News The “Data Protection Digest” keeps businesses abreast of current compliance-related news, shedding light on crucial topics such as changes in terms of service and privacy policies, the impact of social media giants on child safety, and other pertinent issues. By staying informed through this series, businesses can proactively address compliance challenges and make informed decisions to safeguard their operations and data.

Expert Insights and Analysis Each edition of the “Data Protection Digest” is crafted to provide expert insights and analysis, enabling businesses to understand the implications of regulatory changes and industry developments. The series offers a deeper understanding of the legal, ethical, and operational aspects of data protection, empowering businesses to align with best practices and regulatory requirements.

Consultancy with TechGDPR For businesses seeking consultancy with TechGDPR, the biweekly digests serve as a valuable resource for staying informed and proactive in addressing data protection and compliance challenges. TechGDPR’s expertise in data protection and privacy regulations makes them an ideal partner for businesses looking to navigate the complexities of compliance and data governance.

Relevance for Businesses In today’s data-driven landscape, businesses face increasing pressure to comply with data protection regulations and privacy standards. It also equips businesses with the knowledge and insights necessary to adapt to regulatory changes, mitigate risks, and uphold data protection best practices.

By engaging with the content in this category, businesses and professionals can enhance their understanding of data protection, compliance, and privacy, positioning themselves for success in a rapidly evolving regulatory environment.

The “Data Protection Digest” category on TechGDPR’s blog is an invaluable resource for businesses and professionals seeking to stay informed, compliant, and proactive in addressing data protection and privacy challenges.

Data protection digest 18 Mar – 2 Apr 2025: 23andMe bankruptcy case, digital spring cleaning

23andMe genetic data The 23andMe genetic company filed for bankruptcy in the US after struggling with weak demand for its ancestry testing kits and a 2023 data breach that damaged its reputation, Reuters reports. US officials had questioned what would happen to the genetic data collected by 23andMe, although the company’s privacy policies state that […]

Data protection digest 3-17 Mar 2025: Combining FRIA with DPIA is possible, but not once the development of an AI system has begun

FRIA and DPIA: Before deploying a high-risk AI system, the organisations shall assess the impact that the use of such a system may have on fundamental rights, explains the Croatian data protection regulator AZOP. For this purpose, private and public entities shall carry out an assessment containing: If both a FRIA and a DPIA need […]

Data protection digest 16 Feb – 2 Mar 2025: Data Act to strengthen EU digital market, vigilance over US data transfers

The Data Act is almost here In February, the European Commission published a set of updated technical FAQs on the implementation of the legal provisions of the Data Act, applicable as soon as of 12 September 2025.  It enhances data sharing and enables a fair distribution of data value by establishing clear rules related to […]

Data protection digest 1-15 Feb 2025: an employer can’t track alleged ‘inactivity’ of workers via screengrabs and constant video monitoring

Constant video monitoring and screengrabs at work A company that used software designed to account for times of alleged “inactivity” and grabbed frequent photos of its employees’ computer screens was fined 40,000 euros by the French data protection regulator CNIL. The staff members were also continuously videotaped, both visually and audibly. In particular, the company […]

Data protection digest 16-30 Jan 2025: The intersection of information and operational technologies in the health sector

EU Health sector The Commission presented an EU Action Plan to improve health sector cybersecurity. It will include hospitals, clinics, care homes, rehabilitation centres, various healthcare providers, the pharmaceutical, medical and biotechnology industries, medical device manufacturers, and health research institutions. A significant challenge for the cybersecurity of the health sector is the intersection of information […]

Data protection digest 1-15 Jan 2025: mobile app permissions should work in conjunction with consent requirements – CNIL

Mobile app permissions Technical permissions in mobile app are very useful for privacy, explains the French regulator CNIL. They allow users to block access to certain data technically. However, these permissions are not designed to validate users’ consent, within the meaning of the GDPR.  Even when consent is required, a simple request for permission does […]

Data protection digest 16-31 Dec 2024: citizens’ privacy awareness is on the rise, yet attitude relies on income and obligations

Citizens’ privacy awareness: According to the latest survey by the Lithuanian data protection authority, a larger share of the public can correctly name an institution, (other than courts), that would help protect their rights in personal data protection.  The regulator’s name, (VDAI), was indicated by 29% of respondents. 15% of respondents believe that they have […]

Data protection digest 1 – 15 Dec 2024: DORA application deadline, new Meta fine, AI impact assessment

In this issue, we explore the DORA application deadline and its interference with the GDPR; how to conduct an AI impact assessment or integrate it into your existing privacy risk management processes; what constitutes US-restricted data transfer to countries of concern; and what expectations customers have about their data; a Real-Time Bidding explainer; a Sky […]

Data protection digest 16-30 Nov 2024: Electronic patient records as a holistic picture of your health?

Electronic patient records (ePA) in Germany From 2025, people covered by health insurance will be able to use the electronic patient records, (ePA in German), voluntarily and free of charge. This record can digitally gather information about the person’s medical history in a single place. Patients will decide how long someone is granted access to […]

Data protection digest 1 – 15 Nov 2024: digital product liability, emerging genomics, surveillance databases

EU Product Liability The new Product Liability Directive has been published in the Official Journal of the European Union and will take effect in 20 days. The new law extends the definition of “product” to digital manufacturing files and software, (not excluding AI manufacturers in the future). Also, online platforms can be held liable for […]

Do you need support on data protection, privacy or GDPR? TechGDPR can help.

Request your free consultation