On 3 October 2023, the UK’s Information Commissioner’s Office (ICO) published new guidance on workplace monitoring. The previous guidance was issued in 2011, as part of the ICO’s Employment Practices Code, and was badly in...more
On July 16, 2020, the Court of Justice of the European Union issued a decision that uprooted long-standing legal frameworks on which thousands of US and EU companies have relied to transfer personal data from the EU to the...more
In December 2017, the Article 29 Working Party released for comment a draft of its guidance on consent under the GDPR. Consent is one of the lawful bases for processing personal data and one of the permitted means by which...more
Who is covered by the General Data Protection Regulation (GDPR)?
If a company has EU-based employees whose behaviour it “monitors” it will need to take steps to ensure that it is compliant with the GDPR when it comes into...more
The people of the UK have voted to leave the European Union and at the moment it is fair to say that the only certainty is uncertainty for the foreseeable future. However, when it comes to data protection - there really is...more
At the start of February, the European Commission announced it had finally struck a deal with the US Department of Commerce on Safe Harbor's replacement. Below, we address some of the key questions organisations are asking...more
3/3/2016
/ Article 29 Working Party (WP29) ,
Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Data Protection Authority ,
EU ,
EU-US Privacy Shield ,
European Commission ,
European Economic Area (EEA) ,
Federal Trade Commission (FTC) ,
Personal Data ,
U.S. Commerce Department
Until its invalidation in October last year, many businesses relied on the EU-US Safe Harbor framework as a safe passage for transatlantic data flow. After months of negotiating, a new deal has been reached, renamed the...more
For companies relying on Safe Harbor to legitimise transfers of data from the EU to the US, the recent opinion of the Advocate General ("AG") in the European Court of Justice ("ECJ") case of Schrems v. Data Protection...more