EU GDPR

The Federal Palace or Bundeshaus showing international data transfers and GDPR

International Transfers of Personal Data and Privacy Contracting: How Switzerland Wins Over UK Both in Terms of Business-Friendliness and EU Convergence

November 2, 2022

Both countries, while accepting the EU standard contractual clauses as a compliance transfer mechanism still requires the clauses to be amended to reflect their own legal requirements. The big difference is that the Swiss requirements are very simple.

Globe with data flow showing privacy enhancing technology and UK data reform bill

Data Protection Insights

Privacy Enhancing Technology Can Solve the UK’s Data Reform Bill Protection Concerns

November 1, 2022

Instead of introducing an entirely new regime, the UK Government should explore the use of privacy enhancing technology to enable organisations to share and analyse personal data in a privacy-preserving manner, to create opportunities and unlock the power of data using innovative and trustworthy applications.

People talking in front of Facebook building showing corruption complaint against Irish DPC for GDPR case

Data Protection News

Irish DPC Faces Corruption Complaint From Activist Group

November 30, 2021

Privacy activism group noyb, which has made headlines for its high-profile cases against Facebook in the EU, has brought a corruption complaint against the Irish DPC over its handling of a case that dates back years.

European Parliament building with flags waving showing privacy commissioner complain of GDPR

Data Protection News

Outgoing Privacy Commissioner Calls GDPR “Broken,” Says That Basic Model “Can’t Work”

July 1, 2021

After 12 years at the head of the Hamburg data protection commission, Johannes Caspar is stepping down. The privacy commissioner returns to academia disillusioned with the GDPR, calling it "broken" and lamenting infighting.

Toddler baby boy sitting in car seat and watching a video from Youtube showing children's privacy violation

Data Privacy News

YouTube Faces $3.2 Billion UK Lawsuit Over Children’s Privacy Violations

September 25, 2020

Children’s privacy violations is a problem that is common to big tech companies in targeted advertising: screening out minors who are entitled to enhanced data protection rights.

Hammer and gavel on Euros showing privacy complaints targeting data transfers

Data Protection News

Flood of Privacy Complaints Following Schrems II Decision Target Data Transfers to US

August 27, 2020

Max Schrems, chairperson of noyb, has directed his organization to file over 100 privacy complaints against major businesses engaging in data transfers with the US.

Data Protection Insights

Tracking the Trackers: Cookies Are Subject to Opt-In Under GDPR and a Sale Under the CCPA

August 26, 2020

Those little automated data tracking mechanisms are subject to special treatment, consent, opt in and opt out requirements. Have you properly accounted for cookies for GDPR and CCPA?

Young woman wearing surgical mask using smart phone app showing lack of data protection impact assessment for UK Test and Trace, in violation of GDPR

Data Protection News

UK Test and Trace Program Has Yet to Undergo a Data Protection Impact Assessment, May Be in Violation of the GDPR

August 7, 2020

Privacy advocate groups allege that UK Test and Trace rushed the process and did not conduct the necessary data protection impact assessment that the GDPR requires for collection of personal data on this sort of scale.

Statue of the Goddess of Justice against EU flag showing reliance on SCCs with Privacy Shield gone

Data Protection Insights

So the Shield Is Gone, What About SCCs?

August 5, 2020

While confirming that SCCs are valid with the Privacy Shield gone, the CJEU underlined that they can only be relied upon when risks have been properly assessed and cannot amount to a “tickbox exercise.

EU flags waving in front of European Parliament building showing invalidation of Privacy Shield

Data Privacy Insights

EU-US Privacy Shield Invalidated With Immediate Effect

August 3, 2020

In a landmark decision for the EU-US data transfer regime, the European Court has struck down the EU-US Privacy Shield but given respite to Standard Contractual Clauses.