Blog

Data protection digest 20 Jul – 2 Aug 2024: ‘legitimate interest’ criteria, surveillance pricing, Olympics and AI

This edition includes: the CJEU expands on the legitimate interest criteria, a summary of the most common mistakes by data controllers, AI tools enter Olympic venues in Paris, the US FTC expresses concern that user monitoring now permits AI-facilitated individualised pricing. Stay up to date! Sign up to receive our fortnightly digest via email. Legitimate […]

Difference between Fundamental Rights Impact Assessment & Data Protection Impact Assessment

Through the AI Act, the EU seeks to ensure that AI systems used within the Union are safe and transparent. The EU AI Act provides a regulatory framework focusing on safeguarding fundamental rights, in relation to high-risk AI systems. Companies making use of AI, regardless of their size or industry, must now comply with the […]

Data protection digest 5-19 Jul 2024: LLMs and personal data, social media monitoring, differential privacy

In this issue we highlight SOCMINT as a new standardised procedure, data processing in LLMs and supported AI systems, an updated standard data protection model, third-party tracking technologies in health and care, and much more. Stay up to date! Sign up to receive our fortnightly digest via email. LLMs and personal data The Hamburg Data […]

Data protection digest 18 Jun – 2 Jul 2024: end-to-end algorithmic audit, DPOs for small business, Vinted fine

In this issue we look at an end-to-end algorithmic audit, Vinted multimillion fine, Meta and Apple AI projects frozen in the EU, the fight against addictive feeds to minors in the US, and the Avanza Bank and Meta Pixel error case. Stay up to date! Sign up to receive our fortnightly digest via email. End-to-end […]

Does Server Location Really Matter Under GDPR? Understanding Data Localization in the Context of Data Protection Compliance

Many organizations wonder, “Does server location really matter under GDPR?”. This question arises from the complex landscape of data protection regulations. There is often a strong emphasis on the importance of the location of user data. However, in the context of the GDPR, data localization is not as important as many people think. Based on […]

Data protection digest 3 – 17 Jun 2024: software testing, email management, affordable data security

In this issue: security-focused software testing to find unexpected functionalities in recently developed applications; email management and metadata in the work context; Wikipedia must abide by the GDPR; and London hospitals suffer ransom attacks. Stay up to date! Sign up to receive our fortnightly digest via email. Software testing To help businesses and authorities address […]

Data protection digest 18 May – 2 Jun 2024: decentralised clinical research, Meta’s new virtual assistant

In this issue, the personal data lifecycle in decentralised clinical research, Meta’s new AI chatbot, protections for organisations against data scraping, failed backup testing and spreadsheet error real examples, and much more. Stay up to date! Sign up to receive our fortnightly digest via email. Decentralised clinical research To support sponsors in designing their decentralised […]

Data Privacy in Electric Vehicle Charging: ISO 15118 and GDPR

As electric vehicles (EVs) become more prevalent, the standards governing their communication and charging infrastructure grow increasingly crucial. One such standard is ISO 15118, which facilitates vehicle-to-grid (V2G) communication interfaces. While ISO 15118 brings significant advancements in terms of efficiency and user experience, it also raises important questions regarding privacy and data protection, especially in […]

Data protection digest 3 – 17 May 2024: Wi-Fi tracking, exam monitoring, data theft and extortion

In this issue, we explore the privacy implications of emerging technologies in commerce, education, industries and the workplace, such as Wi-Fi tracking, content moderation and algorithmic management. Stay up to date! Sign up to receive our fortnightly digest via email. Wi-Fi tracking The Spanish data protection regulator AEPD has published guidelines for personal data processing […]

Data protection digest 18 Apr – 02 May 2024: EU-US redress mechanism and European Health Data Space taking shape

As part of the new EU-US redress mechanism, data subjects in the EU/EEA will have access to specific complaint forms in the event that they suspect violations regarding their data transferred to the US, whether related to commerce or unlawful access to it by signals intelligence activities. Stay tuned! Sign up to receive our fortnightly […]

Do you need support on data protection, privacy or GDPR? TechGDPR can help.

Request your free consultation