On 10 July, the European Commission adopted its adequacy decision for the EU-US Data Privacy Framework (the DP Framework). It thereby declared that the United States (the US) ensures an adequate level of protection for personal data transferred
Lara White (UK)
The ICO urges organisations to start using privacy enhancing technologies to share personal data safely, securely and anonymously
On 19 June 2023, the UK Information Commissioner’s Office (the ICO) published guidance on privacy enhancing technologies (or PETs) (the Guidance). The Guidance sits alongside the ICO’s recommendation that organisations should, if they haven’t already, start using PETs…
New commitments in principle regarding UK to USA data transfer mechanism
On 8 June 2023, the UK Secretary of State for Science, Innovation, and Technology and the US Secretary of Commerce issued a joint Statement confirming that the UK and the USA have committed in principle to establishing a “data bridge”…
Privacy notices – the ICO follows the lead of the EU data protection authorities in their interpretation of Article 13 UK GDPR
Introduction
On 15 May, the ICO published the monetary penalty notice (MPN) in relation to the £12.7 million fine it imposed on TikTok in April. This MPN and its accompanying annexes set out details of TikTok’s non-compliance with…
Schrems II – Irish DPC finally issues its decision – suspension order, deletion/ repatriation of data and fine
Introduction:
On 22 May, the Irish Data Protection Commissioner (the DPC) published its decision against Meta Platform Ireland Ltd (Meta Ireland) in relation to Facebook’s transfer of user’s personal data to the US (the Decision). In…
The AI Act – A step closer to the first law on Artificial Intelligence
On 11 May 2023, members of the European Parliament passed their compromise text of the AI Act (the AI Act) at the committee stage, taking this law a step closer to being finalised.
The compromise text (the Parliament …
Everyone is using ChatGPT what does my organisation need to watch out for
In December 2022, OpenAI released ChatGPT, a powerful AI-powered chatbot that could handle users’ questions and requests for information or content in a convincing and confident manner. The number of users signing up to use the tool increased very rapidly…
UK AI White Paper
At last, UK Government publishes its White Paper on AI – “A pro-innovation approach to AI regulation” – an opportune start, but as expected, a framework with detail to follow…
The Department for Science, Innovation and Technology, has finally published…
EDPB Guidelines on international transfers: 6 key takeways
EDPB Guidelines on the interplay between Article 3 and the provisions in Chapter V of the General Data Protection Regulation on international data transfers
On 14 February 2023, the European Data Protection Board (EDPB) published its Guidelines on…
New guidance on direct marketing
Introduction
On 5 December 2022, the Information Commissioner’s office (ICO) published its new guidance on direct marketing (the Direct Marketing Guidance).
The Direct Marketing Guidance is accompanied by various resources, including checklists, FAQs, an online training module…