What’s this all about? The much-awaited EU-US Data Privacy Framework (“the DPF”) finally arrived earlier in the summer. Following the European Court of Justice’s ruling over three years ago that the EU-US Privacy Shield data transfer system was invalid the EU and the US have been working to find a replacement system. The result is Read more »

Introduction In the recent decision concerning the UK law firm Swinburne, Snowball and Jackson (“the law firm”) the UK Information Commissioner’s Office (“the ICO”) issued an official reprimand with regard to various infringements of UK GDPR security provisions committed by the law firm and also expressed its concerns about the firm’s late reporting to the Read more »

What’s this all about? The UK data protection regulator the Information Commissioner’s Office (“the ICO”) recently issued “Guidance on Email and Security” (“the Guidance”), which focuses on emails sent to multiple recipients (bulk email). This article looks at this in brief. Why the need for guidance? According to the ICO “Failure to use BCC correctly Read more »

Introduction The issue of whether a fine for an infringement of the EU General Data Protection Regulation (“EU GDPR”) committed by a subsidiary should be based on the turnover (sales) of the subsidiary’s parent company is currently before the European Court of Justice (“the European Court”). If the European Court gives an affirmative answer to Read more »