The European Commission’s decision of 4 June 2021 finalises the new SCCs for transferring personal data from the EEA.
After invalidation of the Privacy Shield by Europe’s top court, many businesses came to rely upon...more
Those of us who have been grappling with how best to approach GDPR compliance in outsourcing and other commercial contracts will be all too familiar with Article 28 of the GDPR, which sets out a number of minimum contract...more
When precisely is a data controller lawfully permitted to process personal data?
If a data controller does not have the consent of a data subject to process his or her data, when does the “legitimate interest”...more