News

Brexit - Government guidance on data protection, see here.

The ICO guide to GDPR has been updated today (11 September 2018) to reflect the decision of the EEA Joint Committee that the GDPR applies to the EFTA states (Iceland, Norway and Liechtenstein) with effect from 20 July 2018. See here.

The ICO has published updated guidance on international transfers. See here.

See here.

See here.

Tietosuojavaltuutettu v Jehovan todistajat — uskonnollinen yhdyskunta, has applied a broad interpretation (a) to what constitutes a filing system and (b) concerning joint controllers under Directive 95/46/EC. See here.

See here.

Liability for data breach to claimants not identified directly, definition of ‘personal data’, damages for distress. See here.

Article 29 Working Party, see here.

GDPR is in full effect from today, and the ICO has published updated guidance on What is personal data? See here.

The Data Protection Act 2018 has received Royal Assent. See here.

The ICO have expanded their guidance on data protection by design and default, and published detailed guidance on automated decision-making and profiling. The ICO have also published a new page on codes of conduct, and a new page on certification. See here.  

The ICO has published detailed guidance on the right to be informed. See here.

See here. and Right to object, see here.

See here.  

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/consent/

The Bar Council has advised that barristers should not generally be agreeing contracts with solicitors under which they are identified as data processors. See here.  

The EU has published some minor corrections to GDPR in a Corrigendum - see pages 90-98 for the English provisions. See here.

The ICO has issued updated guidance on Security. See here.

The ICO has issued updated guidance on Accountability and governance. See here.

See here.

See here.

The Law Society has published Preparing for the GDPR: A guide for law firms. See here.

See the Working Party 29 Position Paper on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR here.

The Article 29 Working Party has published a Working Document on the approval procedure of the Binding Corporate Rules for controllers and processors. See here.

See here.

See here. There is also an explanatory memorandum http://www.legislation.gov.uk/uksi/2018/480/pdfs/uksiem_20180480_en.pdf.   There are three tiers of charges in this new instrument: Tier 1 (Micro Organisations), £40; Tier 2 (Small and Medium Organisations), £60; and Tier 3 (Large Organisations, £2900). There is a £5 ...

GDPR: The ICO has added a Lawful Basis Interactive Guidance Tool to the website. See here.

The ICO has issued updated guidance on information security under GDPR. See here.

The ICO has expanded the GDPR guidance on Data protection impact assessments. See here.

See here.

See here.

The ICO has issued further guidance on the right to be informed. See here.

The ICO has expanded its guidance on Data Protection Officers. See here.

See here.

The Article 29 Working Party letter on the impact of FATCA on accidental American citizens and compliance with data protection legislation. See here.

The Government has announced a new charging structure for data controllers to ensure the continued funding of the Information Commissioner’s Office (ICO) See here.

EU General Data Protection Regulation (GDPR) website launched. See here.

See here.