Topic
Data Processing
189 published works
Inside Privacy
Irish DPC Finds Against WhatsApp
On Thursday, September 2, 2021, the Irish Data Protection Commission (“DPC”) published its decision in the long-awaited inquiry it initiated into the data processing of WhatsApp Ireland Limited (“WhatsApp”) in…
The Data Advisor
CJEU Confirms Exceptions to One-Stop-Shop Mechanism Under the GDPR
By Jan Dhont, Nikolaos Theodorakis, Joanna Jużak
On June 15, 2021, the Court of Justice of the European Union (CJEU) confirmed[1] that non-leading supervisory authorities (SAs) can initiate national judicial proceedings concerning cross-border data processing in two…
Privacy & Information Security Law Blog
CIPL Publishes White Paper on How the Legitimate Interest Ground for Processing Enables Responsible Data Use and Innovation
CIPL recently published a white paper on How the Legitimate Interest Ground for Processing for Processing Enables Responsible Data Use and Innovation, which explains the growing importance of the legitimate…
Inside Privacy
South Africa: Guidance on POPIA Exemptions and Registration of Information Officers
By Mosa Mkhize, Deon Govender, Dan Cooper
South Africa’s Information Regulator (the “Regulator”) issued, on June 22, 2021, a Guidance Note on Exemptions from the Conditions for Lawful Processing of Personal Information (“Guidance Note”), arising under sections…
Creating a Bridge Across the Atlantic Blog
The Newly Enacted Colorado Privacy Act is Expanding Consumer Rights to Their Data By Requiring Businesses to Be More Transparent
Consumer Rights to Privacy Expanding State by State Consumer rights to their data are expanding in the U.S state by state. First it was California, then it was Virginia and…
The Data Advisor
EU Commission Publishes Template Data Processing Agreement
By Laura Brodahl, Laura De Boel, Jan Dhont, Christopher Foo, Joanna Jużak, Nikolaos Theodorakis
On June 4, 2021, the European Commission published its long awaited new set of Standard Contractual Clauses for outsourced data processing (DPA SCCs). These DPA SCCs are a contract template…
Data Privacy Dish
Is an outsourced call center a processor or controller under the GDPR?
A controller refers to the entity that determines the “purpose and means” of how personal data will be processed. Determining the “purpose” of processing refers to deciding why information will…
Technology Law Dispatch
Processing personal data in the context of connected vehicles
By Cynthia O’Donoghue, Sarah O'Brien
Earlier this year, following its public consultation, the European Data Protection Board (EDPB) approved its guidelines on the processing of personal data in the context of connected vehicles and mobility…
Data Privacy Dish
Is a merchant’s bank a processor or controller under the GDPR?
A controller refers to the entity that determines the “purpose and means” of how personal data will be processed. Determining the “purpose” of processing refers to deciding why information will…
Data Privacy Dish
Is an accountant a processor or controller under the GDPR?
A controller refers to the entity that determines the “purpose and means” of how personal data will be processed. Determining the “purpose” of processing refers to deciding why information will…