ICO consults on draft direct marketing code of practice
On 8th January 2020 the Information Commissioner’s Office (ICO) launched a consultation on their draft direct marketing code of practice. The Code itself will replace … Read more
Pharmacy receives ICO’s first GDPR fine
A pharmacy in London has become the first organisation to receive a GDPR fine in the UK from the Information Commissioner’s Office (ICO). The fine … Read more
Model clauses for EU-US transfers provide sufficient protections says non-binding decision
If you’ve followed the challenges of EU data protection legislation by privacy activist Max Schrems, you’ll have heard about his most recent challenge that the … Read more
German data protection regulator issues €9.5m fine for security failings
The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) has issued 1&1 Telecom with a €9,550,000 fine for security failings (English translation) in … Read more
ePrivacy Update: 29th November 2019
The ePrivacy Regulation (that sets the rules on digital marketing and the use of cookies) could be dead after all! A couple of weeks ago … Read more
Did you think the ePrivacy Regulation was dead? Think again
Back in the months leading upto GDPRmaggedon there was talk of a new ePrivacy Regulation that would replace PECR in the UK and streamline cookie … Read more
ICO publishes new guidance on special category data
The ICO have published new guidance on the the processing of special category data. Special category data is data considered to be more sensitive and … Read more
Third EU review of Privacy Shield confirms continued adequacy
The EU-US Privacy Shield decision was adopted in 2016. It protects the personal data rights of EU citizens when their data is processed by US organisations … Read more
Latvian “ICO” issues €7k fine for right of erasure failing
The Latvian Data Protection Authority (the Data State Inspectorate of Latvia (DSI)) has issued a fine of €7000 to an online retailer for non-conformity with … Read more
What a DPO in the education sector can learn from the latest children and privacy report
When the GDPR came into force it introduced specific controls relating to children: If you rely on consent as the lawful basis for processing personal … Read more