While confirming that SCCs are valid with the Privacy Shield gone, the CJEU underlined that they can only be relied upon when risks have been properly assessed and cannot amount to a “tickbox exercise.
In a landmark decision for the EU-US data transfer regime, the European Court has struck down the EU-US Privacy Shield but given respite to Standard Contractual Clauses.
What are the key steps that businesses can consider taking to ensure the business continuity of their GDPR privacy compliance programs during COVID-19 pandemic?
GDPR has changed the global business landscape in three important ways since its implementation but has also fallen short in some areas from original intention.
France’s data protection watchdog CNIL has published a set of guidelines to provide GDPR guidance on web scraping for direct marketing and recommended actions to businesses.
European Digital Rights (EDRi) is highlighting a lack of resources for DPAs to enforce GDPR terms which leads to a pattern of uneven fines and actions in the privacy law.
An open letter was published to express concerns over Irish DPA’s way of handling cases and also the confidential meetings between the authority and Facebook to discuss “consent bypass”.
Even though India PDPB has replicated quite a few concepts from GDPR, there are still significant variants that require specific actions for companies to be in compliance.
One big lesson from GDPR failures is the need for a data-centric approach towards privacy and data protection. What are the four steps that can help companies move towards compliance?
GDPR fines are occurring at an increasing frequency. This GDPR fines tracking tool lists details for both completed fines and ongoing cases for uses as a research aid.
