Employers are increasingly reliant on technology to assist with all kinds of functions – from strengthening security to streamlining recruitment processes. ...
Subject Access Requests (SARs) are on the rise as more and more data is collected for social, personal and work purposes. In particular, we have noticed a significant increase within the context of employment and/or workplace disputes. ...
Many organisations have been struggling with a GDPR grey area since the Schrems II litigation....
The EU has finally adopted the UK adequacy decision. In addition, British Airways settles its data breach case, and the ICO has fined a charity for poor policies and inadequate training. ...
In this month’s Data Protection Round-Up: key takeaways from the ICO Data Protection Practitioners Conference, guidance on anonymisation, and a government response to new cyber security legislation....
In this month’s Data Protection Round-Up: a lack of awareness for the Children’s Code, new ICO guidance is in the offing and the Government’s Digital Markets Unit takes shape. ...
With the understandable focus on measures to ease lockdown, keeping up with data protection announcements is unlikely to be at the forefront of everyone’s minds. ...
Mandatory ethnicity pay gap reporting could become the norm, as calls for its introduction intensify. ...
The WhatsApp privacy confusion – what is actually going on and should you continue to use the app?...
“This is the best possible outcome for UK organisations processing personal data from the EU” stated Information Commissioner, Elizabeth Denham. ...
In light of the new social media guidance the BBC imposed on its own employees, employers should be carefully considering whether or not their own social media policy sufficiently protects their interests....
Following extensive consultation that began in December 2019, the Information Commissioner’s Office (ICO) has finally published their updated guidance on the Right of Access, namely the ability for an individual to submit a Data Subject Access Request (DSAR) to a processor of their personal data. ...
Following an investigation by the Data Protection Authority of Hamburg, fashion retailer H&M has been fined the equivalent of £32.1m for illegally monitoring of its employees....
The Court of Appeal recently handed down its decision in the case of R v Bridges [2020] EWCA Civ 1058, the first case of its kind in the world dealing with law enforcement use of live facial recognition. ...
The CJEU yesterday handed down its long awaited decision on questions put to it regarding Data Protection ...
Increasingly, the information we need and use every day is stored, accessed and controlled online. We have become accustomed to the convenience and efficiency of being able to access significant swathes of information about ourselves, our business and the world at the tap of a button. ...
It has been some months since the High Court delivered its judgment in R v Bridges concerning the use by South Wales police (SWP) of live facial recognition (LFR) in a public place. For further details see our case analysis here. (link) The claimant has since appealed the decision in the Court of Appeal and the SWP is still under investigation by the Information Commissioners Office (ICO)....
Despite the consultation period for their draft Right of Access Guidance remaining open until the 12th February, the Information Commissioner’s Office (the “ICO”) has amended its published guidance on the timescales for Data Subject Access Request (“DSAR”) compliance. ...
Amidst the hype of the GDPR in 2018, one other area of data protection reform progressed relatively under the radar – the ePrivacy Regulation. Surprising given the potential impact this could have on an organisations’ marketing practices....
Advocate General, Henrik Saugmandsgaard Øe of the Court of Justice of the European Union (CJEU) has just handed down his opinion in response to a referral by the High Court of Ireland for preliminary rulings of law. The High Court case in question related to complaints made by Max Schrems against Facebook Ireland and Facebook Inc concerning the transfer of Mr Schrems' personal data to the United States (U.S)....