On 4 September, the Court of Justice of the European Union (CJEU) delivered an important judgement in European Data Protection Board (EDPS) vs Single Resolution Board (SRB), providing fresh clarification on the status of pseudonymised data under the EU General Data Protection Regulation (GDPR).
White label banking is a fast-growing area, but it also brings regulatory challenges. This blog explores the key GDPR considerations for organisations operating in the EU […]
How can organisations share personal data about at-risk children in the UK responsibly and compliantly? This blog explores that question in light of the independent report, […]
As businesses expand globally, transferring personal data across borders has become a routine part of operations. However, these transfers carry inherent risks that require careful consideration […]
Organisations that collect, process and store the personal information of Quebec individuals must ensure their existing privacy programs are in line with the provisions of Quebec’s […]
A Data Processing Agreement (DPA), also called a Data Processor Agreement, is a legally binding contract between a data controller (usually your organisation) and a data processor […]
EU and UK-based organisations regularly need to transfer personal data to different countries for a variety of reasons – project collaborations, partnerships, service providers etc. With […]
From IT solutions to DPO services, accounting, and customer services, the global outsourcing sector is expanding to support the needs of organisations across all industry sectors. […]
Outlining risk reduction for CROs, sponsors & partners conducting clinical trials Clinical Trials are vital to the research and development cycle in life sciences organisations, and […]
Introduction & anonymisation techniques Effective anonymisation is an issue for many organisations, however the process remains a crucial tool in safeguarding privacy rights and ensuring […]