Statute
GDPR
4,254 published works
The Data Advisor
European Commission Proposes “EU KIDS Act” to Restrict Children’s Access to Online Services
By Cédric Burton, Rossana Fol, Tom Evans, Michaela Novakova
On September 17, 2026, the European Commission (EC) published a proposed “EU KIDS Act,” which would impose minimum-age requirements to access social media and video-sharing platforms, subject to mandatory age…
Privacy Compliance & Data Security
What a German Court’s Ruling on a Public Facebook Profile Means for U.S. Data Brokers
By Odia Kagan
A recent decision from a German labor court offers an interesting perspective on the use of personal information collected from publicly available social media profiles. While the case arose in…
Blog of Digital Law and New Technologies
Protecting Minors in the Age of Artificial Intelligence
By Marta Díaz
The rapid expansion of artificial intelligence (AI) is transforming the way people interact with technology. Generative AI tools, virtual assistants, recommendation algorithms and biometric recognition systems have become part of…
The Formiti Privacy News Blog
Thailand PDPA Article 37: Why a GDPR Mirror Fai…
By Formiti
Don't rely on GDPR strategies for Thailand PDPA Article 37. Learn why your business needs a dedicated local representative to avoid severe 2026 penalties.
IT Law Blog
GDPR data breach: action plan and notification of the supervisory authority
By Publisher
When it comes to data breaches, the first cases that usually come to mind are the Ashley Madison case, the activities of the Lizard Squad group, or the Equifax attack.…
Arnold & Porter: News & Perspectives
Data Protection Update: What In-House Counsel, HR, and Compliance Professionals Need to Know When Dealing With Employees in the UK
We are pleased to invite you to an update webinar on data protection when dealing with employees, covering a raft of recent changes, including The Data (Use and Access) Act…
Cov Africa
Kenya Issues New Cross-Border Data Transfer Guidance: Familiar Concepts, but Important Local Differences
By Dan Cooper, Deon Govender, Ahmed Mokdad
On September 8, 2026, Kenya’s Office of the Data Protection Commissioner (“ODPC”) published new Guidance Notes for Cross-border Data Transfers (“Guidance”), providing organizations with more detailed guidance on the application…
Inside Privacy
Kenya Issues New Cross-Border Data Transfer Guidance: Familiar Concepts, but Important Local Differences
By Dan Cooper, Deon Govender, Ahmed Mokdad
On September 8, 2026, Kenya’s Office of the Data Protection Commissioner (“ODPC”) published new Guidance Notes for Cross-border Data Transfers (“Guidance”), providing organizations with more detailed guidance on the application…
Privacy Compliance & Data Security
FTC v. Kochava: A Blueprint for Sensitive Data Governance
By Odia Kagan
Is the FTC going soft on data privacy? Is it safe to say that companies need to worry about processing sensitive data only in states with privacy laws? Recent Federal…
The Formiti Privacy News Blog
GDPR Representative Versus DPO Explained
By Formiti
GDPR representative versus DPO explained: when Article 27 representation applies, when a DPO is required, and how both roles work together.