In April 2023 the CJEU issued an important ruling. In SRB v EDPS (Case T-557/20) which has bearing on one of the important questions DPOs...

Many systems use ‘Sentiment analysis’, which involves analyzing some form of activity or communication and extracting some useful data as...

Websites have been using Cookie Consent Banners that appear to comply with GDPR but use subtle ways to make it more likely that users...

In a previous post we discussed the status, in general, of ‘disease risk’ genetic data, and we saw that it is generally going to be...

On June 6, 2020 the Spanish data protection authority, the AEPD (Agencia Española de Protección de Datos), published a fine imposed on...

Data minimization is a principle of personal data processing under GDPR (Article 5(1)(c)). In M&A, the acquiror tends to send the target...

All mergers and acquisitions - M&A - are prefaced by a due diligence process. In most cases, this starts with a discrete investigation,...

Transparency is a data processing principle (GDPR Article 5(1)(a)), and the GDPR Chapter III obligations stem from that principle....

A. Vital Interest and massive personal data sharing With the scary spread of COVID-19, data protection is not typically everyone’s...

DISCLAIMER: same as on other blog posts. This isn't legal advice. This isn't even advice... Session replay data is information about how...

DISCLAIMER: same as on other blog posts. This isn't legal advice. This isn't even advice... Prior to GDPR’s going into force in May...

Hedge funds and asset managers are constantly seeking Alpha, that is, an edge that enables them to beat the market. They have always...

Our organization runs and hosts various events. We take photos and use them for our marketing material. Do we need to get participants’...

So the infamous 'Right to be Forgotten' (RTBF), also called 'Right to Erasure' is now law. It is commonly thought to be an innovation of...

Until recently, for most of us, cookies were something best enjoyed fresh out of the oven and with plenty of chocolate chips. However,...

What is the GDPR Article 27 - EU Representative? Many clients active in the EU but without an EU presence are required by GDPR to appoint...

Fingerprint readers and GDPR Many of our clients have fingerprint clocking-in/out systems. Is this a GDPR problem? Specifically, GDPR...

DISCLAIMER: SEE AT THE END OF THIS BLOG.... As Big Data, Artificial Intelligence (AI) and the Internet of Things (IoT) grow, so do the...

DISCLAIMER: SEE AT THE END OF THIS BLOG.... Dr Ludmila Leshziner was working as a physician in an old-age home, when the administration...

DISCLAIMER: SEE AT THE END OF THIS BLOG.... A few years ago, an unfortunate fellow by the name of Ryneš had suffered several attacks on...