Topic
Data Processing
189 published works
Ogletree Deakins Insights
European Court of Justice Ruling on Works Agreements: Reinforcing GDPR Compliance in the Workplace
By By Simon J. McMenemy, Benjamin W. Perry
Quick Hits Data processing activities prohibited by GDPR cannot be legitimised by a works agreement. All data processing must be lawful, transparent, and fully compliant with European data protection law.…
Privacy World
Rogue AI Usage and High-risk Data Processing Runs Rampant
By Alan Friel
Inside AI Policy reports that a survey of U.S. office workers indicates that across industries approximately half of survey respondents said that they do or would use AI contrary to…
Inside Privacy
German Court Upholds Board Member’s Dismissal For GDPR Breach
By Moritz Hüsch
On 31 July 2024, the German Higher Regional Court of Munich (OLG München) delivered a judgment providing key insights into the repercussions board members may encounter for violating the General…
Corporate and Commercial Law Blog
A game changer for data processors? The ICO issues a significant fine against a processor
The recent cyberattacks on major UK retailers have put cybersecurity back in the spotlight. But a more significant development for data protection practitioners has been flying under the radar: the…
Privacy Compliance & Data Security
How Legitimate Is Your Interest When It Comes To Developing AI Models?
By Odia Kagan
The European Data Protection Board's recent opinion on AI models can be useful in several ways. Last week, I covered EDPB's take on what the consequences could be for the…
SALT Shaker
Texas Comptroller holds hearing on proposed data processing rule
By Michele Borens, Jeremy Gove
On Friday, December 6, 2024, the Texas Comptroller held a public hearing in Austin, TX regarding the proposed changes to the data processing regulation (section 3.330) published in the Texas…
Privacy Matters
EU: Engaging vendors in the financial sector: EDPB clarifications mean more mapping and management
By Linzi Penman, Eilis McDonald, Megan Ho
The European Data Protection Board ("EDPB") adopted an opinion on 7 October 2024, providing guidance for data controllers relying on processors (and sub-processors) under the GDPR. The two key themes…
Eye On Privacy
How Legitimate Is Your Business Interest? The EDPB Has Some Thoughts
By Liisa Thomas, Kathryn Smith, James O'Reilly*
The European Data Protection Board issued draft guidelines last month that outline when processing can be considered done for “legitimate interest.” The public has until November 20 to provide comments…
The Relativity Blog
Relativity and Cellebrite: Partnering Up to Transform Mobile Data Collection, Processing, and Review
By Relativity
Still, more than a decade into the ubiquity of smartphones, capturing their data for review and analysis in legal matters is no walk in the park. What makes it so…
Inside Privacy
UK ICO Launches a Consultation on “Consent or Pay” Business Models
On 6 March 2024, the ICO issued a call for views on so-called “Consent or pay” models, where a user of a service has the option to consent to processing…