Mutual EU-Japan adequacy decision now in force

23 January 2019

The EU and Japan have today announced a new personal data adequacy agreement between the two parties. This agreement will allow personal data to flow freely between the two parties on the basis that there are strong protective guarantees in place. Before the agreement was put in place, Japan agreed to put additional safeguards in […]

Read more

Google fined €50M in France for GDPR breach

21 January 2019

Reports are circulating that the French data protection authority, the CNIL, has issued a fine of €50M on Google for failure to comply with the GDPR.  The issue relates to the consents obtained from Google account holders in relation to the personalisation of advertising that was served to the user. The CNIL referenced the fact […]

Read more

Amazon mistakenly sends smart-device recordings to strangers

9 January 2019

A recent story from Germany highlights the precautions companies must take when complying with data subject requests under the GDPR. When complying with a right of access, Amazon accidentally disclosed the personal data of another Amazon user. Although no enforcement action has been taken by a GDPR authority in this case (yet), Amazon have opened […]

Read more

Brexiting the GDPR: New draft UK data protection regulations introduced

8 January 2019

The government has recently published draft legislation to deal with the UK’s post-Brexit GDPR regime, namely “The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019”. The new legislation proposes to introduce an amended version of the GDPR (creatively titled “the UK GDPR”), the Privacy and Electronic Communications Regulations 2003 (PECR), and […]

Read more