On 2 August 2021, the Italian supervisory authority (Garante) announced that is has imposed a fine of EUR 2.5 million against a food delivery company Deliveroo Italy s.r.l. (Deliveroo) for violation of several requirements of...more
On 8 July 2021, the European Data Protection Board (EDPB) announced the outcomes of its plenary session that took place on 7 July. ...more
French CNIL issues guidance for organisations on transfer impact assessments, German DSK releases statement on supplementary measures and SCCs, and Hessian DPA comments on data transfer obligations (23 June 2021)....more
On 15 June 2021, the Court of Justice of the European Union (CJEU) issued its judgment addressing the operation of the GDPR one-stop-shop mechanism (OSS) in cross-border cases and the powers of national supervisory...more
The European Commission announced its proposal for a regulation that will amend the EU eIDAS Regulation and establish a framework for a European Digital Identity (the Proposal)(3 June 2021). ...more
The UK has left the European Union (EU), the transition period is over, the UK and EU have agreed a new Trade and Cooperation Agreement (the TCA), so what now for data protection? We look at the key consequences of Brexit for...more
On 22 February 2021, the Presidency of the Council of the European Union (the Presidency) released the first compromise text of the proposal for a Regulation of the European Parliament and of the Council on European Data...more
The General Data Protection Regulation takes effect from 25 May 2018, and will require significant planning and preparation by UK pension schemes. Although many of the basic concepts set out in the GDPR will be familiar,...more
The challenge and risks -
The topic of cybersecurity is seldom out of the press these days, occupying the minds of business leaders and politicians alike. From a business perspective, the ideal outcome would be to...more
After over three years of discussions at many levels, it is now clear that the proposed EU data protection framework will be revised, and that it will be in the form of a Regulation – the General Data Protection Regulation....more