News

Appeal relating to data subject access rights did not survive death of the data subject. See here.

Consideration of various issues in relation to a Subject Access Request under the Data Protection Act 1998, including an unsuccessful claim of legal professional privilege and what constitutes ‘personal data’. See here.

These Regulations make provision in relation to Brexit. http://www.legislation.gov.uk/uksi/2019/419/contents/made

These Regulations make amendments in relation to the application of the EU-US Privacy Shield to the UK post-Brexit. http://www.legislation.gov.uk/uksi/2019/485/pdfs/uksi_20190485_en.pdf

See here.

See here.

See here.

See here.

The European Data Protection Board have published Opinion 5/2019 on the interplay between the ePrivacy Directive and the GDPR, in particular regarding the competence, tasks and powers of data protection authorities. See here.

Californian District Court decision ordering disclosure of emails despite objection based on GDPR. See here.

Brexit - Data Protection Commission (Ireland) Guidance on Transfers of Personal Data from Ireland to the UK in the Event of a 'No-Deal' Brexit See here.

See here.

See here.

See here.

See here.

See here.

The ICO’s Guide to Data Protection covers the Data Protection Act 2018 and the GDPR as it applies in the UK. The guide combines the existing ICO guides to the GDPR and Law Enforcement Processing, with the addition of new ...

Brexit: The US Department of Commerce has published guidance on its Frequently Asked Questions page on the application of the Privacy Shield to data transfers from the UK post-Brexit. It addresses both the deal and no-deal positions, and outlines steps ...

The European Commission has published its second review of the EU-US Privacy Shield. The Commission concludes that the United States continues to ensure an adequate level of protection for personal data transferred under the Privacy Shield from the Union to ...

Draft regulations to maintain the legislative framework post-Brexit have been published. See here.

Brexit: The ICO has issued updated guidance as the prospect of a withdrawal with no deal appears increasingly likely. See here.

See here.

Brexit: HM Government has issued updated guidance as the prospect of a withdrawal with no deal appears increasingly likely. See here.

See here.

The Information Commissioner’s Office has published expanded guidance on contracts, published guidance on controllers and processors and published detailed guidance on controllers and processors and contracts and liabilities. See here.

See here.

See here.

See here.

See here.

See here.

For Passwords in online services, see here. For Encryption, see here.

Speech by Emma Bate, General Counsel, ICO, covering recent action and ICO’s latest thinking on international data transfers. See here.

Morrisons’ unsuccessful appeal against a finding of vicarious liability for a data breach by a rogue employee, despite the adequacy of its data security measures. See here.

The Information Commissioner has fined Heathrow Airport £120,000 following loss of an unencrypted USB stick containing personal data, some of it sensitive personal data.  Only 2% of staff had received data protection training and there were inadequate controls over downloading ...

Consent: Successful appeal against monetary penalty notice imposed by the Information Commissioner relating to direct marketing by electronic communications contrary to the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR).  Note: The facts predate the changes to the definition ...

See here.