TechGDPR’s review of international data-related stories from press and analytical reports. Legal processes and redress The EU Whistleblowing Directive is due to be implemented into national law by 17 December. It requires all EU Member States to implement legislation obliging all companies with 50 or more workers to put in place appropriate reporting channels to […]
Blog
Weekly digest Nov 29 – Dec 5, 2021: data volunteerism, cookie deluge, remote clinical trials, starling murmuration & privacy
TechGDPR’s review of international data-related stories from press and analytical reports. Legal processes and redress The EU Commission approved the political agreement reached between the EU Parliament and EU Member States on a European Data Governance Act. Three-way negotiations have now concluded, paving the way for final approval of the legal text. The Data Governance […]
Weekly digest November 22 – 28, 2021 “Privacy, DP, and Compliance news in focus”
TechGDPR’s review of international data-related stories from press and analytical reports. Legal processes and redress The EU Parliament Internal Market and Consumer Protection Committee has adopted its position on the Digital Markets Act (DMA). The document sets not-to-do rules for companies with “gatekeeper” status and significant market capitalization in the EU, (online intermediation services, social […]
Weekly digest November 15 – 21, 2021 “Privacy, DP, and Compliance news in focus”
TechGDPR’s review of international data-related stories from press and analytical reports. Legal processes and redress The Council of Europe strengthens its legal arsenal on disclosure of electronic evidence between governments and with service providers. A Second Additional Protocol to the “Budapest Convention“ will extend the rule of law further into cyberspace. As of today, the […]
Weekly digest November 8 – 14, 2021 “Privacy, DP, and Compliance news in focus”
TechGDPR’s review of international data-related stories from press and analytical reports. Legal processes and redress The EU commission warned Belgium about failing to ensure full independence of its data protection authority. The Commission considers that Belgium violates Art. 52 of the GDPR, which states that the data protection supervisory authority shall perform its tasks and […]
Weekly digest November 1 – 7, 2021 “Privacy, DP, and Compliance news in focus”
TechGDPR’s review of international data-related stories from press and analytical reports. Legal processes China’s Personal Information Protection Law, PIPL, came into effect on November 1. It largely blends the EU (GDPR) and California (CCPA) privacy rules for the handling of personal and sensitive information, including different legal bases, as well as general principles for data processors, […]
Weekly digest October 25 – 31, 2021 “Privacy, DP, and Compliance news in focus”
TechGDPR’s review of international data-related stories from press and analytical reports. Legal processes and redress The Administrative Court of Dusseldorf clarified a non-retroactive applicability of the GDPR. In 2016, charges were brought against the plaintiff, a decades-long civil servant for the police and secret services, for tax evasion followed by an alleged disclosure by the […]
Bring your own device and data protection
What constitutes “bring your own device” (BYOD) and what risks to GDPR compliance does it introduce? Bring your own device allows employees to use their own devices (smartphones, tablets, laptops) in the workplace but also allows them to access corporate tools from these devices. This means they are likely to carry corporate information or confidential […]
How to use legitimate interest under the GDPR?
How does the GDPR define legitimate interest? Does the legitimate interest legal base cover company interests only or can it also include third parties interests? There is no precise definition under the GDPR of what constitutes a legitimate interest and this precisely opens the room for a controller to argue that certain business activities, for […]
The impact of the GDPR on Big Data
You must have heard about the GDPR, and you might also have heard about big data, also defined as the three V:s (Volume, Velocity and Variety). The term is used to refer to the huge amount of digital information from individuals that public and private organisations collect, store and analyse for various purposes. In this […]