Data Notes

Belgian Court of Appeal asks for GDPR guidance in Facebook case

A royal curveball – using the GDPR in privacy disputes

Driving Data Compliance

The Importance of Adequate Consent under the GDPR: HMRC Forced to Delete Five Million Records

EDPB guidance on when processing is "necessary for the performance of a contract"

The German FCO/Facebook decision: implications for data privacy regulation

The German competition authority, the Federal Cartel Office ("FCO") last week announced the results of its investigation into Facebook for a novel abuse …

Happy International Data Privacy Day!

Japan Adequacy Decision Adopted by the EU Commission

On 23 January 2019, the EU Commission adopted a decision confirming the adequacy of Japanese data protection laws for the purpose of transferring …

Brexit Withdrawal Agreement: Impact for data protection

Following a UK Cabinet meeting on 14 November 2018, the UK Government has announced support for the text of a draft Withdrawal Agreement and an outline …

General Data Protection Regulation: first enforcement notice shows extra-territorial reach

The UK data protection regulator, the Information Commissioner’s Office (ICO), has issued its first enforcement notice under the EU’s new strict data …

Court of Appeal confirms Morrisons vicariously liable for employee's deliberate actions in first successful UK class action for data breach

The Court of Appeal has today dismissed an appeal against the High Court's decision that Morrisons was vicariously liable for its employee’s …

Data breaches: new Article 29 Working Party guidance

In anticipation of the GDPR, various guidance has been published by the Article 29 Working Party, the body of national EU data regulators. Of most …