On 1 March 2022, the Department for Digital, Culture, Media & Sport (“DCMS”) released their most recent draft Telecommunications Security Regulations (“Regulations”) and an associated draft Code of Practice (“Code of Practice”) for consultation. The Regulations and Code of Practice form part of several new security measures introduced
Continue Reading UK: Draft Telecoms Security Regulations and Code of Practice released for consultation

By: Heidi Waem and Verena Grentzenberg

On 2 February 2022, the Belgian Data Protection Authority (Belgian DPA) rendered its long-awaited decision against IAB Europe with regard to the IAB Transparency and Consent Framework (TCF).

In this blogpost we will discuss:

  • The procedure
  • TCF, RTB and the TC String
  • The findings of


Continue Reading Belgian DPA decision on IAB Transparency and Consent Framework

Experiencing a global pandemic has provided us with many examples of the importance of scientific research to our lives.  Meanwhile, a sometimes popular (mis)conception is that data protection laws – and particularly the GDPR – are a barrier to the effective use of personal data for research. Consequently, new guidance from the UK’s Information Commissioner’s
Continue Reading UK: New guidance on processing personal data for scientific research purposes

By John Magee, Eilis McDonald, Nicole Fitzpatrick, Sarah Dunne & Laoise McMahon

The Data Protection Commission (DPC) has published its 2021 Annual Report, highlighting key observations, emerging guidance, and large-scale inquiries and decisions of 2021.

Primary areas of focus for the DPC in 2021 included the safeguarding of children’s data protection rights, progressing ongoing
Continue Reading Ireland: Large-scale inquiries progress as DPC budget and staff numbers ramp up

By: Andy Serwin ‖ Ross McKean ‖ Carolyn Bigg

In response to the heightened geo-political tensions resulting from Russia’s invasion of Ukraine and the package of economic sanctions imposed by the West, the risk of cyber-attacks by Russia and her proxies is high.  We may see an increase in economic extortion to generate revenue to

Continue Reading Ukraine Crisis – Heightened Cyber Threat – Be Prepared

Authors: Denise Lebeau-Marianna & Divya Shanmugathas

The French Supervisory Authority (the “CNIL”) regularly conducts investigations based on various triggering events such as a complaint, an article or its annual program that the CNIL regularly publishes on its website.

On 15 February 2022, published a post regarding its upcoming dawn raids for 2022.

As
Continue Reading France: the CNIL has released its annual dawn raid Program for 2022: three key priorities!

Authors: Andrew Serwin, Carol A.F. Umhoefer, Verena Grentzenberg, and Hayley R. Curry

Germany’s Data Protection Conference (DSK) recently made public an expert opinion on Section 702 of the US Foreign Intelligence Surveillance Act (FISA), which came under close scrutiny in the July 16, 2020 decision of the Court of Justice of the European Union
Continue Reading Expert opinion on US surveillance laws highlights FISA risk for data transfers to the US

The French Supervisory Authority (the “CNIL”) sent a Formal Notice to a web operator using Google Analytics ordering to comply. Though the decision has been taken against one web site it should apply to the use of Google Analytics in general.

It should be noted that the European Data Protection Supervisor (“EDPS
Continue Reading FRANCE: the CNIL is aligned with the Austrian Supervisory Authority – the use of Google Analytics leads to illegal transfers to the United States!

Following the ICO’s public consultation, launched in August last year, the final version of the international data transfer agreement (IDTA), as well as the international data transfer addendum to the European Commission’s standard contractual clauses for international data transfers (Addendum), has been laid before Parliament.

The IDTA aims to address

Continue Reading UK: International data transfer agreement and addendum laid before Parliament