Consumer loan checks Consumer loan checks can reveal people’s lifestyles. The Dutch Data Protection Authority AP concluded this after reviewing a bill concerning consumer loans. It believes that lenders can assess a person’s ability to meet payment obligations with less information about them. It’s unlikely that all the information in a bank statement, including sender, […]
Tag: International transfers
International transfers involve moving personal data across borders. The GDPR requires appropriate safeguards like Standard Contractual Clauses (SCCs) to ensure compliance and protect data privacy. Learn more about GDPR compliance and how TechGDPR can help you on your journey.
Feel free to reach out to TechGDPR directly to learn more!
International transfers involve moving personal data across borders. The GDPR requires appropriate safeguards like Standard Contractual Clauses (SCCs) to ensure compliance and protect data privacy. Learn more about GDPR compliance and how TechGDPR can help you on your journey.
Feel free to reach out to TechGDPR directly to learn more!
Data protection digest 19 Oct – 2 Nov 2025: New AI Act and GDPR study & personal data stored on Blockchain
Blockchain applications and data protection The Bank of England, in its October statement, confirmed that many firms in the financial sector are already using AI, exploring opportunities to use quantum computing, and piloting DLT applications. One example is stablecoins built on DLT networks, which are already being used at scale by individuals and businesses worldwide […]
Data protection digest 17 Sep – 3 Oct 2025: New Danish court ruling may change practice for GDPR compensations
GDPR compensations In Denmark, an individual has been awarded financial compensation for non-material damage resulting from a data breach (Art. 82 of the GDPR). A High Court ruled on 20 August, that a woman should receive approx. 335 euros in compensation after a municipality mistakenly shared her health information with a third party. The decision […]
Data protection digest 1-15 Sep 2025: The Data Act is fully applicable, “bossware” takes over workspaces
The Data Act As of 12 September, the Data Act has become directly applicable in the EU. It offers harmonised rules on fair access to and use of data. The new rules cover manufacturers, users, data holders, data recipients, public sector bodies, and data processing services. It is designed to empower users, both consumers and […]
GDPR Compliance for AI: Managing Cross-Border Data Transfers
Artificial intelligence (AI) is based on large and varied datasets to train models and enhance functionality. Though AI often works across borders, data protection regulations such as the EU General Data Protection Regulation (GDPR) impose stringent controls on transferring personal data abroad. The question is evident: how do businesses employ global AI systems and continue […]
Data protection digest 2-16 June 2025: Data controller, processor, how to properly identify your GDPR role
GDPR role, how to determine? The French privacy regulator CNIL reviews the criteria and practical consequences of determining the GDPR role of data controllers and processors. The qualification does not always depend on a contractual choice but on the facts: who decides what, and who executes what, concerning personal data. The controller is the natural […]
AI and the GDPR: Understanding the Foundations of Compliance
Artificial intelligence (AI) is a fast evolving group of technologies which presents both great benefits and risks. Ensuring that these technologies align with data protection laws is not just a matter of best practice; it’s a legal necessity. It is arguably the most comprehensive data protection framework in the world, the General Data Protection Regulation […]
Data protection digest 16-30 Jan 2025: The intersection of information and operational technologies in the health sector
EU Health sector The Commission presented an EU Action Plan to improve health sector cybersecurity. It will include hospitals, clinics, care homes, rehabilitation centres, various healthcare providers, the pharmaceutical, medical and biotechnology industries, medical device manufacturers, and health research institutions. A significant challenge for the cybersecurity of the health sector is the intersection of information […]
Data protection digest 1 – 15 Dec 2024: DORA application deadline, new Meta fine, AI impact assessment
In this issue, we explore the DORA application deadline and its interference with the GDPR; how to conduct an AI impact assessment or integrate it into your existing privacy risk management processes; what constitutes US-restricted data transfer to countries of concern; and what expectations customers have about their data; a Real-Time Bidding explainer; a Sky […]
Data protection digest 1 – 15 Nov 2024: digital product liability, emerging genomics, surveillance databases
EU Product Liability The new Product Liability Directive has been published in the Official Journal of the European Union and will take effect in 20 days. The new law extends the definition of “product” to digital manufacturing files and software, (not excluding AI manufacturers in the future). Also, online platforms can be held liable for […]
- 1
- 2
- 3
- 4
- Next Page »