Live Blog

The European Data Protection Board (EDPB) has recently published its Guidelines on Pseudonymisation under the General Data Protection Regulation (GDPR). These guidelines provide critical insights into how pseudonymisation can be used effectively as a safeguard for data protection. Below, we unpack the key takeaways and their implications for organizations handling personal data.

The DUA Bill has shifted in tone from its predecessor and now seeks to promote enabling greater use of data to grow the economy, improve public services and make people’s lives easier. According to the UK government, the DUA Bill is largely focused on making better use of data across many sectors of the UK’s economy and improving public sector services.

On October 24th, 2024, the Irish DPA, the Data Protection Commission (DPC) published its decision to fine LinkedIn 310 million Euros for multiple violations of the GDPR, related to the processing of personal data for behavioural analysis and targeted advertising. What are the key takeaways from this decision for those not working for large social media companies?

The implementation of the ePrivacy Regulation (ePR) will transform how electronic communications are managed and protected in the European Union (EU). Both the digital landscape and legal frameworks are evolving, and this brings our online interactions to a newer level each day. Therefore, the European Union (EU) takes the steps to ensure individuals data are protected. One of the key legislative tools in this effort is the ePrivacy Regulation (ePR), which is set to replace the outdated ePrivacy Directive (ePD).

Failing to conduct a TIA when required can result in significant fines and damage to a company’s reputation. By being proactive about international data transfers, organizations can avoid risks. This helps them keep the trust of their customers and partners.

The European Data Protection Board (EDPB) has just released its much-anticipated guidelines on the processing of personal data based on legitimate interest. This legal basis, outlined in Article 6(1)(f) of the GDPR, allows data controllers to process personal data when they have a legitimate interest, provided they meet specific criteria.

It’s becoming increasingly common for employees to use digital assistants at work, whether to answer customer queries or summarize large documents. While these tools can save time and reduce mundane tasks, they also come with significant risks.

Numerous websites utilize cookies, which are generally divided into ‘essential’ (functioning website) and ‘non-essential’ (for example, store important information and user preferences) categories. The regulation of cookies falls under the ePrivacy Directive, translated into national laws of EU Member States. The ePrivacy Directive mandates that websites offer transparent information about cookie usage and seek consent for placing non-essential cookies.

The much-anticipated EU AI Act was published in the EU’s Official Journal on 12th July 2024 and promises to reshape the landscape of artificial intelligence across Europe. As we stand at the cusp of this groundbreaking legislation, it’s crucial to understand the roadmap ahead. Here, we detail the key dates and milestones leading up to the full implementation of the EU AI Act, ensuring you’re well-prepared for the changes to come.