Filters
What does the new EU digital resilience regime mean for UK businesses?
Prachi Vasisht looks at the impact of the EU's digital resilience and cyber security laws on UK businesses which also operate in the EU.
6 of 8 Insights
Security is the best policy – documenting digital security compliance in an increasingly regulated landscape
Jo Joyce looks at the types of policies needed and what they should include to ensure compliance with digital resilience and cyber security laws.
4 of 8 Insights
The IAF's process to help address GDPR lawfulness in AI development and use: how to demonstrate a legitimate interest
What does the recent CJEU decision in Schrems v Meta mean for data aggregation practices in online advertising?
Christopher Bakier and Julia Pranz look at the CJEU's views on data minimisation and special data processing in the context of targeted digital advertising.
3 of 6 Insights
CNIL fines health data management software supplier for GDPR and French Data Protection Act failings
Laura Huck looks at the CNIL's analysis of the controller and processor role and at the distinction between anonymisation and pseudonymisation of health data.
2 of 6 Insights
CJEU sheds light: commercial interests can serve as legitimate interests
Dominique Lensink looks at the CJEU's confirmation that the Dutch DPA's interpretation of legitimate interests was too strict.
5 of 6 Insights
Dutch DPA imposes record-breaking fine of EUR 290 million on Uber for unlawful international data transfers
Sharif Ibrahim and Solange Baris take a high-level look at the Dutch DPA's decision to sanction Uber.
1 of 6 Insights
Bindl v Commission - The EGC on international data transfers and non-material damages
Susan Hillert looks at the implications of the European General Court ruling in Bindl v Commission.
6 of 6 Insights
The „authorised representative“ under the EU AI Act
Data and cyber security - 2024 roundup
CRA & PLD – new security requirements for digital products