Getting to data nirvana – regulatory silo-busting to optimize risk management
“Getting to Data Nirvana” is our four-step approach to help you integrate your legal, regulatory and compliance work streams into your organisation’s overall data strategy. The job of the legal and...
View ArticleGetting to data nirvana – a user’s guide to data lakes and GDPR
A data lake is an infrastructure that permits different data sets from within a group to be combined and analysed together. To analyse a data lake under GDPR, it is helpful to think of a data lake in...
View ArticleFour key lessons when facing data class actions in Europe
Could the GDPR give rise to forum shopping and are there any pre-litigation strategies that should be considered? Here, we review four key elements that should be kept in mind in respect of data class...
View ArticleThe General Data Protection Regulation timidly opens the doors to data class...
More than 15 years after the adoption of the Data Protection Directive1, the European Commission noticed that the current legislative framework on data protection did not adequately deal with the risks...
View ArticleWho Will Get the First Big GDPR Fine and How to Avoid It?
In July, Eduardo Ustaran spoke at Privacy Laws & Business’ International Conference in Cambridge about the sort of activities likely to prompt regulators into exercising their increased fining...
View ArticleEDPB Joins the Dots of ePrivacy and GDPR
On 12 March 2019 at its Eighth Plenary Session, the European Data Protection Board (“EDPB”) adopted its Opinion 5/2019 on the interplay between the ePrivacy Directive (“ePD”) and the General Data...
View ArticleThe EDPB’s Narrow View of Contractual Necessity
The European Data Protection Board (EDPB) has adopted the narrowest possible interpretation of ‘contractual necessity’ as a ground for processing of personal data. The Guidelines 2/2019 on the...
View ArticleCJEU: Consent on the Internet Means ‘Opt-In’
On 1 October 2019, the Court of Justice of the European Union (CJEU) handed down a crucial decision impacting the way that consent is obtained on the internet. The judgment relates to Case C-673/17...
View ArticleHogan Lovells calls for an alternative approach to regulating privacy in the...
LONDON, 25 November 2019 – Hogan Lovells has published a study evaluating the ongoing legislative proposal for a new ePrivacy Regulation, a law aimed at updating the current ePrivacy framework in the...
View ArticleGetting Cookie Consent Right
One could be forgiven for thinking that knowing how to comply with a legal obligation that has been in place for nearly a decade would be clear cut. However, widespread practice tells us that this is...
View ArticleAG Says ePrivacy Applies to Government Access to Communications Data
On January 15, the Court of Justice of the European Union’s (CJEU) Advocate General (AG) Manuel Campos Sánchez-Bordona delivered his Opinion on four references for preliminary rulings on the topic of...
View ArticleGetting Customer Communications Right in Times of Coronavirus
Across the world, large retail stores and small businesses alike are shutting their doors. International flights and sporting events, conferences and concerts (and everything in between) are being...
View ArticleMaking COVID-19 Apps Data Protection Compliant
The role of COVID-19 contact tracing apps in the exit strategy of the current lockdown that is gripping much of the world is increasingly becoming a focus of attention. While that role is being hotly...
View Article