Dutch DPA imposes record-breaking fine of EUR 290 million on Uber for unlawful international data transfers
Sharif Ibrahim and Solange Baris take a high-level look at the Dutch DPA's decision to sanction Uber.
More
EU case digest
We look at some of the key ECJ and DPA rulings around the processing of personal data in the EU last year, and at the lessons to be learned.
CNIL fines health data management software supplier for GDPR and French Data Protection Act failings
Laura Huck looks at the CNIL's analysis of the controller and processor role and at the distinction between anonymisation and pseudonymisation of health data.
MoreWhat does the recent CJEU decision in Schrems v Meta mean for data aggregation practices in online advertising?
Christopher Bakier and Julia Pranz look at the CJEU's views on data minimisation and special data processing in the context of targeted digital advertising.
MoreJudgment of the ECJ in case C-21/23 (Lindenapotheke)
David Klein looks at the ECJ Lindenpotheke ruling which clarifies the right of competitors to sue for GDPR breaches and what constitutes health data.
MoreCJEU sheds light: commercial interests can serve as legitimate interests
Dominique Lensink looks at the CJEU's confirmation that the Dutch DPA's interpretation of legitimate interests was too strict.
MoreBindl v Commission - The EGC on international data transfers and non-material damages
Susan Hillert looks at the implications of the European General Court ruling in Bindl v Commission.
MoreThe UK's Data (Use and Access) Bill
EU AI Act obligations
(UK) GDPR – what you really need to know
Cyber security – weathering the cyber storms
Children's data and online harms
Facial recognition technology, biometrics and monitoring
Financial data
AI and data - what does the UKs approach to regulating AI mean in the context of data protection and cyber security?
International update 2023
Digital advertising and data privacy
GDPR enforcement
Cyber security
The UK's Data Protection and Digital Information Bill
Managing HR data
Managing HR data is an ongoing exercise for employers. We look at data protection requirements for HR data in light of current and incoming law and in the context of recent developments, covering SARs, the EU Whistleblowing Directive, employee monitoring and data breaches as well as top tips for employers.
MoreData sharing
Data exports continue to be high on the agenda but data sharing (of personal and non-personal data) is being looked at much more widely by the EU and the UK in the context of providing individuals with control over their data, opening up the potential of big data, and breaking down barriers to competition. We look at incoming EU legislation relating to data sharing with particular focus on the draft Data Act, as well as at the ICO's Code of Practice on Data Sharing, Privacy Shield 2.0 and data sharing requirements for the UK's Pensions Dashboard.
MoreHealth data – getting the right balance between innovation and data protection
Personal health data attracts special protection but also benefits from exemptions under UK and EU data protection law. Have legislators and regulators got the balance between innovation and privacy right or do the rules overly restrict advances in healthcare provision and research?
MoreData protection, freedom of expression, journalism and the media
We look at the UK's implementation of the GDPR journalistic exemption, at the ICO's recently published draft Code of Practice on journalism, the use of data protection law in media cases, and at the tensions between the right to privacy and to freedom of expression.
MoreInternational update – it's not all about GDPR
Update
Data transfers – a clearer picture?
Data breaches
Data exports
UK and EU data policy
Health data
Data transfers after Schrems II and Brexit transition
HR data: an update
Processing personal data associated with the COVID-19 pandemic
Data protection by design and default
Digital Legislation Tracker
To help you stay on top of developments we've built a high-level legislation tracker looking at areas relevant to digital businesses across the EU, UK and Germany.
Access Tracker
Webinars
Our international team of experts discuss key data privacy issues and developments. Listen to our latest webinars and access our full library.
View recordingsTools
Digital Legislation Tracker SCC generator Draft EU ePrivacy Regulation – preliminary guidance and commentaryInsights by sector & service
GDPR compliance Cyber security & data breaches Data governance HR data Health data Data exports New digital products & data Policy agreements & transactions Data subject rights Dealing with DPAs ePrivacy (cookies) Marketing & dataInsights by location
China England & Wales EU France Germany UAEAll insights
Filters
Global Data Hub - EU case digest
Click here to find out more
Bindl v Commission - The EGC on international data transfers and non-material damages
Susan Hillert looks at the implications of the European General Court ruling in Bindl v Commission.
20 January 2025
6 of 6 Insights
Global Data Hub - EU case digest
Click here to find out more
What does the recent CJEU decision in Schrems v Meta mean for data aggregation practices in online advertising?
Christopher Bakier and Julia Pranz look at the CJEU's views on data minimisation and special data processing in the context of targeted digital advertising.
20 January 2025
3 of 6 Insights
Global Data Hub - EU case digest
Click here to find out more
CNIL fines health data management software supplier for GDPR and French Data Protection Act failings
Laura Huck looks at the CNIL's analysis of the controller and processor role and at the distinction between anonymisation and pseudonymisation of health data.
20 January 2025
2 of 6 Insights
Global Data Hub - EU case digest
Click here to find out more
CJEU sheds light: commercial interests can serve as legitimate interests
Dominique Lensink looks at the CJEU's confirmation that the Dutch DPA's interpretation of legitimate interests was too strict.
20 January 2025
5 of 6 Insights
Global Data Hub - EU case digest
Click here to find out more
Dutch DPA imposes record-breaking fine of EUR 290 million on Uber for unlawful international data transfers
Sharif Ibrahim and Solange Baris take a high-level look at the Dutch DPA's decision to sanction Uber.
20 January 2025
1 of 6 Insights
Global Data Hub
Click here to find out more
What's changing and what's the same in the UK's Data (Use and Access) Bill from a GDPR compliance perspective?
Victoria Hordern looks at the main changes to the UK's data protection regime under the DUA Bill.
19 November 2024
2 of 7 Insights
Global Data Hub
Click here to find out more
Say hello to the Information Commission, wave goodbye to the Information Commissioner's Office
Debbie Heywood looks at the changes to the UK data regulator's governance and powers under the draft Data (Use and Access) Bill in relation to the UK GDPR and DPA18.
19 November 2024
5 of 7 Insights
Global Data Hub
Click here to find out more
The proposed Digital Identification Verification regime under the UK's Data (Use and Access) Bill
Prachi Vasisht looks at the proposals for the DVS framework and the Trust Services regime under the DUA Bill.
19 November 2024
7 of 7 Insights
Global Data Hub
Click here to find out more
ePrivacy reforms in the UK's Data (Use and Access) Bill
Megan Lukins looks at proposed changes to the UK's ePrivacy regime under the DUA Bill.
19 November 2024
6 of 7 Insights
