A draft set of EDPB guidelines on the calculation of administrative fines under the GDPR is likely to lead to some further consistency among supervisory authorities on how fines are calculated – however, if adopted, the guidance leaves clear room for the current divergent approaches to continue.

On 12 May 2022, the European Data Protection
Continue Reading Europe: EDPB Guidelines on calculation of fines under GDPR – a case of evolution, not revolution?

Today, through the Queen’s Speech, the UK Government has set out its legislative program for the next Parliamentary term. The speech outlined 38 proposed laws, including the Data Reform Bill.

The introduction of the Data Reform Bill will reform the UK’s current data protection framework, bringing in potentially significant changes to the UK GDPR and
Continue Reading UK: Data Reform Bill: post-Brexit data reforms

Authors: Carolyn Bigg, Yue Lin Lee, Gwyneth To and Jing Qin Cho

Companies providing cybersecurity services (“CSPs“) in Singapore will now have to obtain a licence for the provision of such services by 11 October 2022.

The licensing framework took effect from 11 April 2022.

The licensing framework is part of the Cybersecurity
Continue Reading Singapore: Cybersecurity service providers’ mandatory licensing by October 2022

On 1 March 2022, the Department for Digital, Culture, Media & Sport (“DCMS”) released their most recent draft Telecommunications Security Regulations (“Regulations”) and an associated draft Code of Practice (“Code of Practice”) for consultation. The Regulations and Code of Practice form part of several new security measures introduced
Continue Reading UK: Draft Telecoms Security Regulations and Code of Practice released for consultation

By: Heidi Waem and Verena Grentzenberg

On 2 February 2022, the Belgian Data Protection Authority (Belgian DPA) rendered its long-awaited decision against IAB Europe with regard to the IAB Transparency and Consent Framework (TCF).

In this blogpost we will discuss:

  • The procedure
  • TCF, RTB and the TC String
  • The findings of


Continue Reading Belgian DPA decision on IAB Transparency and Consent Framework

By John Magee, Eilis McDonald, Nicole Fitzpatrick, Sarah Dunne & Laoise McMahon

The Data Protection Commission (DPC) has published its 2021 Annual Report, highlighting key observations, emerging guidance, and large-scale inquiries and decisions of 2021.

Primary areas of focus for the DPC in 2021 included the safeguarding of children’s data protection rights, progressing ongoing
Continue Reading Ireland: Large-scale inquiries progress as DPC budget and staff numbers ramp up

By: Andy Serwin ‖ Ross McKean ‖ Carolyn Bigg

In response to the heightened geo-political tensions resulting from Russia’s invasion of Ukraine and the package of economic sanctions imposed by the West, the risk of cyber-attacks by Russia and her proxies is high.  We may see an increase in economic extortion to generate revenue to

Continue Reading Ukraine Crisis – Heightened Cyber Threat – Be Prepared

Authors: Denise Lebeau-Marianna & Divya Shanmugathas

The French Supervisory Authority (the “CNIL”) regularly conducts investigations based on various triggering events such as a complaint, an article or its annual program that the CNIL regularly publishes on its website.

On 15 February 2022, published a post regarding its upcoming dawn raids for 2022.

As
Continue Reading France: the CNIL has released its annual dawn raid Program for 2022: three key priorities!

Following the ICO’s public consultation, launched in August last year, the final version of the international data transfer agreement (IDTA), as well as the international data transfer addendum to the European Commission’s standard contractual clauses for international data transfers (Addendum), has been laid before Parliament.

The IDTA aims to address

Continue Reading UK: International data transfer agreement and addendum laid before Parliament

The government has announced that it is launching the International Data Transfer Expert Council (‘the Council‘). The Council, which is part of the UK’s National Data Strategy, will meet quarterly to cover issues such as future data adequacy partnerships, the development of new data transfer tools, and how governments can work together
Continue Reading UK: Government launches International Data Transfer Expert Council