Hello

News Items

UK government's new Data Use and Access Bill is broad in scope
ICO makes series of recommendations on AI to recruiters
New framework helps organisations assess their data protection compliance
EDPB adopts Opinion on relationship between controllers and their processors/sub-processors

Articles

Expert comment - Bridget Treacy, Tamarillo Consulting
What are the implications of the ICO's first processor fine under the UK GDPR - Duc Tran, Of Counsel and Kamilla Khairul Anuar, Herbert Smith Freehills LLP
Recent CJEU decisions - Emma Erskine-Fox and Flora Ragless-Green, TLT LLP
Back to Basics - DSARs: Navigating the pitfalls and ensuring compliance - Rachael Perry, Bevan Brittan LLP
Ensuring data protection, security and AI ethics in AI Systems - Hamsa Hassan and Dr Hussain Aldawood, NEOM and University of Newcastle Australia and World Economic Forum
Identifiability - DSG v IC considered - Ashley Roughton

October/November 2024
Volume 25, Issue 1

News Items

Protecting children from online harms remains priority, says ICO
Cookie crackdown continues in earnest
IBM report reveals average cost of a data breach in 2024
UK signs Council of Europe treaty on AI risks

Articles

Expert comment - Bridget Treacy, Tamarillo Consulting
Processing Biometric Data in the Workplace - Tim Hickman, White & Case LLP
The Problem with Data Sharing - Eleonor Duhs, Bates Wells
The Evolving Personal Data Breach Notification Regime in the EU - Adam Finlay, McCann FitzGerald
The European Commission's Second Report on the GDPR - Hannah Perry, Mason Hayes & Curran

September 2024
Volume 24, Issue 8

News Items

Government unveils vision for cyber security, data protection and AI
ICO acts against platforms to improve children’s privacy practices
EU AI Act now in force and Commission consults on
Code of Practice
ICO reprimands Electoral Commission

Articles

Expert comment - Bridget Treacy, Tamarillo Consulting
UK GDPR compliant school social media use — recommended guidance - Claire Bessant, Northumbria University, School of Law
Access rights: GDPR vs the EU Data Act - Katie Hewson and Sarah O'Brien, Stephenson Harwood LLP
Safeguarding Critical Infrastructure and Digital Services — recent UK and EU developments - Peter Warcup and Nina Lazic, Osborne Clark LLP

July/August 2024
Volume 24, Issue 7

News Items

Data Protection and Digital Information Bill - future unknown
ICO reviews public sector approach trial
ICO to investigate 23andMe data breach with Canadian regulator
Meta halts AI rollout in UK and Europe

Articles

Expert comment - Bridget Treacy, Tamarillo Consulting
Learning from the (security) mistakes of others - Peter Given, DAC Beachcroft LLP
Emerging approaches to the regulation and enforcement of AI use (a UK perspective) - Gareth Oldale and Emily Holdsworth, TLT LLP
DPIAs - how to avoid 'box ticking' mentality - Rachael Perry, Bevan Brittan LLP
The EU AI Act's Enforcement provisions - Part 3 - Tim Hickman and Aishwarya Jha, White & Case LLP
'Impressions' from inaccurate data - a case of interest - Ashley Roughton

June 2024
Volume 24, Issue 6

News Items

Organisations need to do more to prevent cyber attacks, says ICO
Generative AI, fourth call for evidence
EDPB Adopts Opinion on facial recognition in airports
ICO outlines Strategic Approach to regulating AI

Articles

Expert comment - Bridget Treacy, Tamarillo Consulting
Pay or OK? 'No way, not today', says the EDPB (well, sort of) - Emma Erskine-Fox, TLT LLP
Legitimate Interests and the Right to Object in the context of AI training models - Hannah Perry, Mason Hayes & Curran
The EU Digital Operational Resilience Act - what is it and what to do now - Peter Given, DAC Beachcroft LLP
The EU AI Act (Part 2) - Tim Hickman and Thomas Harper, White & Case LLP
Health bodies and processing that is in the 'public interest' - finally, a case! - Ashley Roughton

April/May 2024
Volume 24, Issue 5

News Items

New detailed fining guidance in UK
ICO seeks clarity on 'pay or okay' model
Regulator planning to continue cookie crackdown
EU strikes deal on European Health Data Space

Articles

Expert comment - Bridget Treacy, Tamarillo Consulting
Are you afraid of the dark? Protecting children from the harms of dark patterns - Karishma Brahmbhatt and Steve Wood, Allen & Overy
Online safety and data protection: where the two meet - Matthew MacLachlan, Shoosmiths
CJEU confirms the broad definition of 'personal data' and 'joint controllership' - but how long's a piece of (TC) String? - Georgia Philippou and Emma Erskine-Fox, TLT LLP
The EU AI Act (Part 1) - Tim Hickman and Aishwarya Jha, White & Case LLP

March 2024
Volume 24, Issue 4

News Items

Lack of staff training at fault in
police body breach
Home Office’s electronic monitoring of
migrants deemed overly intrusive
Updated Opinion on age
assurance
content moderation technologies
and processes

Articles

Is applying for EU and UK Binding Corporate Rules becoming easier? - Nuria Pastor and Anna Rawlinson, Fieldfisher
ICO's second Tech Horizons report: what does it tell us? - Sarah O'Brien, Stephenson Harwood LLP
The ICO's Consultation on Generative AI: plugging the regulatory gap - Andrew Kimble, Jenny Gibbs, Jess Mant and Katie Simmonds, Womble Bond Dickinson
The notion of Main Establishment - the EDPB's new Opinion - Hannah Perry, Mason Hayes and Curran

January/February 2024
Volume 24, Issue 3

News Items

EU court lowers requirements for imposing fines for breaches
Police breach a result of outdated approach, review finds
EU approves Data Act
G7 publishes code of conduct on AI

Articles

Fundamental changes to the UK GDPR - what they mean in practice - Elearnor Duhs, Bates Wells
What are the implications of Clearview AI's win? - Katie Hewson, Daniel Jones and Nelson Kiu, Stephenson Harwood LLP
Anonymisation through separation: what recent cases teach us about the EU's anonymisation standards - Lore Leitner, Gabe Maldoff and Mickey Lee, Goodwin
The Online Safety Act 2023 - what to do now - Matthew MacLachlan, Shoosmiths

December 2023
Volume 24, Issue 2

News Items

'Christmas Tree' Data Bill moved forward in UK Parliament
How the ICO will fine - new draft guidance
Clearview AI successfully overturns ICO fine; ICO to appeal
UK holds AI Safety Summit

Articles

The New Guidance on Workplace Monitoring - Ann Bevitt, Cooley LLP
Data Scraping and Data Protection - Key Things to Consider - Duc Tran, Of Counsel and Erin Bibb, Herbert Smith Freehills LLP
The UK-US Data Bridge - advantages and challenges - Sharon Lamb, Pilar Arzuaga and Michaela Novakova, McDermott Will & Emery UK LLP
Higher fines through the back door - Ellis Parry, Data Privacy Compliance Solutions Limited

October/November 2023
Volume 24, Issue 1

News Items

UK-US Data Bridge approved
Sending bulk communications by email - new guidance
Norway to extend ban on Meta's tracking ads without consent
Poland opens privacy probe of ChatGPT
Share information to protect children, says ICO

Articles

Implementing AI - what you need to know - Stephanie Pritchett and Ben Wootton, Pritchetts Law LLP
Subtle but helpful - changes to the right of access under DPDI 2 - Olivia Whitcroft, OBEP
The ICO's draft Biometric Data Guidance - what it means for you - Emma Erskine-Fox, TLT LLP
Assessing the Assessments - Robert Bond

September 2023
Volume 23, Issue 8

News Items

Europe adopts adequacy decision on EU-US Framework
PSNI data breach: review launched
European Parliament and Council release agreed text on Data Act
UK government announces proposed ban on financial cold callers
UK escalates inquiry into how to regulate AI

Articles

Harmful design in digital markets — key do’s and don’ts - Bridget Treacy
Cybersecurity Standards and Certifications - what's the right fit? - Nick Soni, CyberStreet
International data transfers — the new ‘normal’- Liz Fitzsimons, Eversheds Sutherland
Damages for actions for breach of privacy or misuse of data - the Yao case - Ashley Roughton

July/August 2023
Volume 23, Issue 7

News Items

UK government to chart an alternative approach to AI
UK Data Bill developments
Government revokes pieces of data protection regulation
ICO developing guidance on neurotechnology
EU tech groups call for amendment to proposed EU Data Act

Articles

AI at work - current uses and practical guidance - Andrew Kimble, Katie Simmonds and Jenny Gibbs, Womble Bond Dickinson
What does the Meta decision mean for the future of international transfers - Emma Erskine-Fox, TLT
Pseudonymous or anonymous, that is the question - ALi Vaziri, Lewis Silkin LLP
The rise of GDPR private enforcement - trends and developments - Jack Thorne and Pilar Arzuaga, McDermott Will & Emery UK LLP

June 2023
Volume 23, Issue 6

News Items

John Edwards meets with European colleagues
Meta fined and ordered to stop data transfers to the US
AI Act edges closer
CJEU delivers key ruling on compensation available under EU GDPR
Advocate General gives two key opinions
Representative claim against Google and DeepMind dismissed in UK

Articles

How to achieve transparency in privacy policies (really) - Ellis Parry, Data Privacy Compliance Solutions Limited
8 Hallmarks of effective Data Protection by Design and Default - Robert Maddox and Stephanie Thomas, Debevoise & Plimpton LLP
DPO functions under the spotlight - Gareth Oldale and Alastair Edmondson, TLT LLP
AI - comparing global approaches and 5 compliance keys - Gita Shivarattan, EY

April/May 2023
Volume 23, Issue 5

News Items

UK government publishes new Data Protection Bill
Immigration exemption incompatible with GDPR
ICO publishes updated guidance on AI and data protection
UK government publishes AI White Paper
CNIL unveils areas of focus for 2023
ICO considers live facial recognition technology

Articles

Health data — regulatory trends and developments - Sharon Lamb, Dr Deniz Tschammler, Daniel F Gottlieb, Lorraine Maisnier-Boche and Pilar Arzuaga, McDermott Will & Emery
Are crypto wallet addresses personal data? - Daniel Owen, Bristows LLP
The UK Data Protection Digital Information Bill and the identifiability test - Sophie Stalla-Bourdillon, Immuta

March 2023
Volume 23, Issue 4

News Items

Commission proposes new Regulation to fix GDPR
Recommendations for use of cloudbased services by the public sector
DPOs and conflict of interest — new guidance from CJEU
AI Chatbot stopped over GDPR concerns
Supervisory Authorities support fair cookie banners

Articles

Cookie banners: when is consent not consent? - Vicki Bowles, VWV
Role of the DPO — lessons from recent decisions - Ronan Hayes, BCMGlobal
EU/US Privacy framework — is it enough? - Marie C. Daly, Covington
Reigning in recommended content: a data protection lawyer’s take on the DSA - Hannah Perry, Mason Hayes and Curran LLP
Instagram, Facebook and WhatsApp at the EDPB - Alex Jameson, Bird & Bird

January/February 2023
Volume 23, Issue 3

News Items

European Commission publishes adequacy decision for EU-US transfers
CJEU gives right to be forgotten ruling
Government releases first of its kind Code
New direct marketing guidance and checklists

Articles

Data retention and disposal in non-corporate communication channels — time to bin WhatsApp? - Louisa Williams & Jennifer Cleaver, TLT LLP
The Evergreen programme — myth or reality? - Kate Brimsted, Bryan Cave Leighton Paisner LLP
Watching you, watching me — the ICO’s new guidance on employee monitoring - Ann Bevitt, Cooley LLP
Compensation awards — the Driver case - Ashley Roughton
CNIL clarifies re-use of personal data by data processors - Stella Manga Chesnay, Founder of SMC Compliance, and PDP’s French Correspondent

December 2022
Volume 23, Issue 2

News Items

EDPB offers clarity on breach notifications and Lead Supervisory Authorities
CJEU makes ruling on data subjects’ withdrawal of consent to third parties

Articles

Evolution of a Profession: the Data Protection Officer (Part 3), Gordon Wade and Isobel Murphy, TikTok (3rd October)
The Online Safety Bill — broader implications, by Matthew MacLachlan, Shoosmiths
The UK government’s approach to regulating AI — a lighter touch, by Duc Tran and Tariq Salameh, Herbert Smith Freehills

October/November 2022
Volume 23, Issue 1

News Items

Competition bodies may consider data protection breaches in their probes
California signs new children’s Bill into law
HMRC reveals £200m programme to achieve data-protection compliance

Articles

Evolution of a Profession: the Data Protection Officer (Part 2), Gordon Wade and Isobel Murphy, TikTok
Direct Marketing — developments and potential changes, Peter Given and Shimon Simon, EY
Data protection in a developing metaverse, Daniel Owen, Bristows
Monitoring employee health data: the limits, safeguards and lessons from Covid-19, Morgane Conaty, Barrister

September 2022
Volume 22, Issue 8

News Items

CJEU significantly expands the scope of Article 9 GDPR
China imposes £1bn fine for data violations
Commission urges Slovenia to fulfil its obligations under the GDPR

Articles

Evolution of a Profession: the Data Protection Officer (Part 1), Gordon Wade and Isobel Murphy, TikTok
Navigating M&A — Knowing your Compliance Blindspots, Sara Jameel and Gita Shivarattan, Ernst & Young LLP
Insights from the recent EDPS conference, Marie C. Daly, Covington
Data localisation — the Asia experience, Carolyn Bigg, DLA Piper
Mental Health Apps Part 2: are they in good health?, Lorna Cropper, Alexandra Hague and Minhaal Datoo, Fieldfisher

July/August 2022
Volume 22, Issue 7

News Items

Opinion urges end to excessive data collection from rape victims
CNIL advises on use of Google Analytics
CJEU rules on compatibility of German law on DPOs with GDPR

Articles

Calculating fines under the GDPR — the EDPB approach, Bridget Treacy
The importance of swift action to mitigate a data breach - Morgane Conaty, Irish Chief State Solicitor’s Office
Complex times ahead for data protection - Oisin Tobin, Mason Hayes & Curran
Mental Health Apps Part 1: are they in good health? - Lorna Cropper, Alexandra Hague and Minhaal Datoo, Fieldfisher

June 2022
Volume 22, Issue 6

News Items

Latest GDPR and UK GDPR fines
EDPB consults on subliminal privacy eroding practices
Privacy group gives statement on 4 year anniversary of the GDPR

Articles

Conducting Transfer Impact Assessments — practical tips - James Clark and Benji Payne, DLA Piper
Applying Article 23 — exceptions are exceptions, not the rule - Ann Bevitt and Yasmin Roland, Cooley (UK) LLP

April/May 2022
Volume 22, Issue 5

News Items

UK government releases draft Telecoms Security Regulations and Code of Practice
Report critical of support given to hospitality groups
Hamburg regulator welcomes Google’s ‘reject all’ cookie button plan

Articles

To transfer or not to transfer, that is the question - Erik Steiner and Victoria Hordern, Taylor Wessing
Expanding the transfer toolkit: Codes of Conduct for Transfers - Sara Jameel and Peter Given, EY Law
The new Guidelines on access requests — is the bar now too high? - Davinia Brennan, Matheson
‘Data: a new direction’ — but is it the right one? - Kathryn Wynn, Pinsent Masons LLP

March 2022
Volume 22, Issue 4

News Items

New draft of EU Data Act proposes Schrems II style restriction
Supreme Court ruling represents blow for UK media
Use of Google Analytics leads to illegal transfers to the US

Articles

The ICO’s Data Sharing Code — fit for a digital age? - Duc Tran and Sara Lee, Herbert Smith Freehills LLP
Soriano v Forensic news — implications for extra territoriality - James Henderson, Hunton Andrews Kurth
Critical lessons in accountability from Portugal - Monica Almeida, Heward Mills
An analysis of the DMSC proposals – Robert Bond
When employers are not responsible for their employees’ data breaches - Ashley Roughton, Barrister

January/February 2022
Volume 22, Issue 3

News Items

Significant GDPR and UK GDPR fines
UK publishes cyber security strategy
Clearview AI breaks EU data privacy rules, says CNIL

Articles

Taking stock: data litigation after Lloyd v Google - Philip Tansley, Hamish Corner and Matthew MacLachlan, Shoosmiths
CJEU data protection case law in 2022 - Gordon Wade, TikTok
The draft AI Act: the good, the bad and the ugly - Sandy Tsakiridi, HSBC

December 2021
Volume 22, Issue 2

News Items

Latest GDPR fines
UK regulator questions Apple, Google, and 40 other organisations over app age ratings
Draft Cybersecurity Directive adopted

Articles

Handling Subject Access Requests: Then and Now - Olivia Whitcroft, OBEP
Untying the Gordian knot? The EDPB’s new guidelines on territorial scope - Peter Given and Laura Stewart, EY
List of monetary penalties levied by UK Information Commissioner – PDP
Lloyd v Google — its got to actually hurt - Ashley Roughton, Barrister
Single-factor authentication: now a CISA ‘bad practice’ - Ali Vaziri, Lewis Silkin LLP

October/November 2021
Volume 22, Issue 1

News Items

Police illegally processed personal data with facial recognition software
Slovenian SA orders deletion of 88 photos
Swiss SA recognises the new EU SCCs

Articles

Understanding the ICO’s Data Transfer Risk Assessment tool - James Henderson, Hunton Andrews Kurth
Data protection and the growing political dimension - Oisin Tobin, Mason Hayes & Curran
List of monetary penalties levied by UK Information Commissioner – PDP
Privacy as an integral part of ESG criteria — too soon, or just in time? - Monica Simoes de Almeida
What are Trusted Third Parties? (Part 2) - Hamsa Hassan, London Ambulance Service NHS Trust and Sophie Stalla-Bourdillon and Alfred Rossi, Immuta

September 2021
Volume 21, Issue 8

News Items

ICO consults on international data transfer agreement
Pharmacy’s UK GDPR fine reduced on appeal
UK approves first certification schemes
Garante publishes updated guidelines on cookies and other tracking technologies
Scope of data subject access requests widened in Germany
China’s GDPR passed

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Out with the old, in with the new? A first look at the proposed UK approach to IDTs - Victoria Hordern, Bates Wells
UK data protection litigation — a burgeoning market that needs rebalancing - Ashley Hurst & Jamie Halpin, Osbourne Clarke
Codes of Conduct for International Transfers - Kristof Van Quathem & Anna Sophia Oberschelp de Menesesat, Covington & Burling LLP
What are Trusted Third Parties? (Part 1) - Hamsa Hassan, Sophie Stalla-Bourdillon & Alfred Rossi, London Ambulance Service NHS Trust & Immuta

July/August 2021
Volume 21, Issue 7

News Items

UK receives adequacy status, with review after 4 years
EDPB releases final recommendations on supplementary measures
New SCCs adopted
EDPB and EDPS call for ban on facial recognition
New opinion on use of live facial recognition technology in UK
CJEU’s ruling confirms possibility of parallel GDPR investigations

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Managing data protection in digital identities - Emma Erskine-Fox, TLT LLP
Mobile applications and privacy law (Part 2) - Peter Given, Darryl Webb & Ronke Euler-Ajayi, Womble Bond Dickinson (UK) LLP
The new SCCs — a (non exhaustive) cheat sheet - Oisin Tobin, Mason Hayes & Curran
Brazilian law — a comparison with the GDPR - Monica Simoes de Almeida

June 2021
Volume 21, Issue 6

News Items

MEPs: No adequacy for UK before amendments
UK Investigatory Powers regime dealt blow by European Court’s decision
ICO works on bespoke SCCs
WhatsApp to sue Indian government
European coalition makes complaints about Clearview AI
UK Home Office loses immigration data case

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
The EU AI Regulation proposal - Oisin Tobin, Mason Hayes & Curran
Mobile applications and privacy law (Part 1) - Peter Given, Darryl Webb & Ronke Euler-Ajayi, Womble Bond Dickinson LLP
GDPR fines across the EU and their implications - Stephanie Pritchett, Ben Wootton, Partners & Hilary Homer, Pritchetts Law LLP
SCCs for UK organisations - Victoria Hordern, Bates Wells
Facial recognition and privacy: finding the right balance (Part 2) - Konstantinos Kouroupis

April/May 2021
Volume 21, Issue 5

News Items

UK ministers rock the boat on adequacy
New German decision gives guidance on supplementary measures
Government and regulator agree on future procedure for adequacy decisions
CNIL to begin checking cookie policy compliance
Ikea France on trial for snooping on staff and customers
German legal dispute over Facebook data use sent to European Court of Justice

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Appointing an EU/EEA Representative — key considerations - Patrick Wheeler & Rhiannon Thompson, Collyer Bristow LLP
DPIAs — in light of everything - Olivia Whitcroft, OBEP
The Twitter fine — an analysis - Oisin Tobin, Mason Hayes & Curran
Facial recognition and privacy: finding the right balance (Part 1) - Dr Konstantinos Kouroupis, Frederick University
Book Review: Data Protection Strategy: Implementing Data Protection Compliance (Third Edition) - Stephanie Pritchett & Hilary Homer, Pritchetts Law LLP

March 2021
Volume 21, Issue 4

News Items

New EU guidelines on breach notification
UK close to securing adequacy
e-Privacy Regulation progresses to next stage
Amendments to Singapore’s Personal Data Protection Act now in force
EDPB answers key questions on health research data

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
DSARs: are the courts flexing their muscles
(again)? - Ann Bevitt, Cooley (UK) LLP
The technical fix for international data transfers - a word of caution - Sophie Stalla-Bourdillon & Alfred Rossi, University of Southampton & Immuta
Delving into the ICO’s AI guidance - Emma Erskine-Fox, TLT LLP
Consent in the UK healthcare sector - overcoming the challenges - Hamsa Hassan, NHS

January/February 2021
Volume 21, Issue 3

News Items

Experts recommend cautious optimism with UK adequacy
New Data Sharing Code published in UK
ICO issues new guidance for employers using algorithms for recruitment decisions
EU releases new draft of the ePrivacy Regulation
Trade Agreement - direct marketing and other affects

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Adapting to the UK GDPR - 8 pressing concerns - Patrick Wheeler & Mette Marie Kennedy, Collyer Bristow LLP
5 data protection and privacy predictions for 2021 - Gareth Oldale, TLT LLP
Graduating from the Sandbox - a look at the first four exit reports - Ali Vaziri, Lewis Silkin LLP
The proposed Digital Services Act Package - what you need to know - Professor Dr. Patrick Van Eecke & Enrique Gallego Capdevila, Cooley LLP

December 2020
Volume 21, Issue 2

News Items

Key considerations as Brexit transitional period comes to close
EDPB issues Schrems guidance and Commission adopts SCCs
Apple faces privacy case in Europe over iPhone tracking ID
Cancer mission Board Member urges MEPs to review EU data protection rules
Dutch regulator has its first GDPR fine overturned

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
SCCs and Supplementary Measures - a bumpy road ahead for international data transfers - Victoria Hordern & Michael Charalambous, Bates Wells
All I want for Christmas is not to be sued (by you and you and you…)! - Kate Brimsted, Bryan Cave Leighton Paisner
Outsourcing using processors - the new EDPB guidelines - Peter Given & Ronke Euler-Ajayi, Womble Bond Dickinson (UK) LLP
Clarifying the right of access - Olivia Whitcroft, OBEP

October/November 2020
Volume 21, Issue 1

News Items

ICO consults on monetary penalty decision-making
CJEU rules that bulk data retention schemes are illegal
ICO’s new guidance on DSARs may move needle in favour of employers
EU Parliament wants tighter rules on behavioural ads
CNIL makes targeted advertising a priority

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
The Age Appropriate Design Code - Rosemary Jay, Hunton Andrews Kurth
Data processing addenda - Oisin Tobin, Mason Hayes & Curran
Learning from others’ mistakes - two common security failings in five data breaches - Ali Vaziri & Tamsin Hoque, Lewis Silkin LLP

September 2020
Volume 20, Issue 8

News Items

CJEU invalidates Shield; Germany issues specific guidance
Police facial recognition use unlawful - landmark ruling in UK
NOYB file 101 complaints to EU Supervisory Authorities
Latest GDPR fines
Age Appropriate Design Code now in force in UK

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Bidding farewell to Privacy Shield as SCCs live to tell the tale - Emma Erskine-Fox, TLT LLP
EDPB’s guidance on consent - what’s new? - Alex Jameson, Bates Wells
Data protection contracts - what tends to be missing and what to do about it - Rocio de la Cruz, Gowling WLG
Facial recognition - South Wales Police re-considered - Ashley Roughton, Barrister

July/August 2020
Volume 20, Issue 7

News Items

GDPR receives its first assessment
UK regulator addresses perplexing privacy questions for hospitality sector
Dutch regulator issues record fine for violating data subject rights
Australia and UK open probe into Clearview
Record-breaking fine imposed in Hungary

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Top ten data protection considerations when outsourcing - Molly Waiting, Bates Wells
AI ethics in the post-GDPR world: Part 2 - Sandy Tsakiridi, HSBC
Consent on the facts - not always an easy question - Ashley Roughton, Barrister
Libra versus Central Bank Digital Currency - the stablecoin conundrum - Tripti Dhar, Reina Legal

June 2020
Volume 20, Issue 6

News Items

GDPR anniversary marked by vitriol over top regulator’s slow pace
Belgian ruling prompts serious concerns about dual role DPOs
France approves contact-tracing app
Lawsuit seeking billions in damages filed against EasyJet
Grandmother ordered to delete pictures of her grandkids on social media

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Legal responsibilities of processors - a guide - Olivia Whitcroft, OBEP
Belgian SA challenges the independence of DPOs - Bridget Treacy & Jonathan Wright, Hunton Andrews Kurth
Working from home - dos and don’ts for controllers - Robert Bond, Bristows
AI ethics in the post-GDPR world: Part 1 - Sandy Tsakiridi, HSBC

April/May 2020
Volume 20, Issue 5

News Items

Tracing apps take centre stage for EU Supervisory Authorities
ICO adjusts regulatory approach during coronavirus economic downturn
Former model ordered to pay £25,000 in privacy related damages
Supreme Court rules on the legality of sharing personal data with the US
Cabinet Office at risk of further data breaches, review concludes

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Understanding the ICO’s Age Appropriate Design Code - Emma Erskine-Fox, TLT LLP
A guide to data processing during a pandemic - Olivia Whitcroft, OBEP
Data protection and adtech in Europe: where next? - Julia Kaufmann & Joanna de Fonseka, Baker & McKenzie
The Supreme Court’s judgment in Morrisons - a comment - Ashley Roughton, Barrister

March 2020
Volume 20, Issue 4

News Items

EU plans for new rules on AI ‘could be clearer’, say experts
UK government sets out post-Brexit data protection intentions
Chinese authorities clamp down with regulation following coronavirus related breaches
Airline fined £500,000 in UK
EDPS issues Opinion on EU - UK future data protection relationship

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Special category data - exploring the new ICO guidance - James Clark & Jo Nevin, DLA Piper UK LLP
EDPB’s guidelines on territorial scope - clarifications and uncertainties - Peter Given, Womble Bond Dickinson (UK) LLP
UK enforcement: Top five focus areas - Ann Bevitt & Amy Collins, Cooley (UK) LLP
Schrems II - why the AG’s Opinion might not all be good news - Oisin Tobin, Mason Hayes & Curran
Data protection in Japan - Part 2 - Christopher Wells & Narumi Ito, Morgan, Lewis & Bockius Tokyo

January/February 2020
Volume 20, Issue 3

News Items

London pharmacy fined after ‘careless’ storage of patient data
Advocate General gives Standard Contractual Clauses a boost
SCCs for contracts between controllers and processors published
EDPS issues opinion on scientific research
Europe celebrates 14th Data Protection Day

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Blockchain and the GDPR - friends or foes? - Sandy Tsakiridi, HSBC
The ICO’s new Direct Marketing Code - Nick Graham & Monika Sobiecki, Dentons
ISO Standards - a guide for privacy professionals - William Stallings, Author
Data protection in Japan - Christopher Wells & Narumi Ito, Morgan, Lewis & Bockius Tokyo

December 2019
Volume 20, Issue 2

News Items

e-Privacy: Council to begin again after own Committee rejects draft
EDPB publishes final version of Guidelines on Territorial Scope
First multi-million GDPR fine in Germany
European Parliament under investigation over election data sharing
Twitter launches a Privacy Center to centralise data protection efforts

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Accountability - moving from theory to practice - Bridget Treacy, Hunton Andrews Kurth
How ‘intelligent’ is Artificial Intelligence? - Vivienne Artz, Refinitiv
BYOD and social media in the workplace - managing the risks - Robert Bond, Bristows
Brexit - if it ain’t broke, why break it? - Kathryn Wynn, Pinsent Masons
GDPR - 3 areas of ambiguity - Oisín Tobin, Mason Hayes & Curran

October/ November 2019
Volume 20, Issue 1

News Items

CJEU rules on cookie consent
Floodgates on data breach class action suits may have just been opened in UK
Facebook agrees to pay Cambridge Analytica fine to UK
Third Privacy Shield Report released
Mastercard institutes criteria for data privacy

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Data Scraping - what are the privacy implications? - Fiona Campbell, Fieldfisher
Data ethics - why should you care? - Karishma Brahmbhatt, Allen & Overy
7 tips to increase your impact, influence and leadership - Nick Williams, Author, Trainer and Speaker
Facial recognition tested by the UK courts - Ashley Roughton, Barrister
Damages in data protection cases - have the floodgates opened? - Ashley Roughton, Barrister

September 2019
Volume 19, Issue 8

News Items

ICO amends guidance on SAR response times
Dutch data regulator says despite changes, Windows 10 still breaches user privacy
Sweden issues first GDPR fine
UK regulator launches investigation into facial recognition
Facebook’s global digital currency plan is problematic on privacy, say regulators

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Contracting under the GDPR: Five not-so-easy pieces - James Clark, DLA Piper
Joint controller relationships - more prevalent than previously thought - Duc Tran & Laura Adde, Herbert Smith Freehills LLP
Why you may not be processing Special Category personal data lawfully in the UK - Rocio de la Cruz, Gowling WLG
Confused by EU cookie rules? The ICO and CNIL are here to help (sort of) - John O’Brien, Reed Smith LLP

July/August 2019
Volume 19, Issue 7

News Items

UK’s first GDPR fines surprise many
The CJEU’s hearing on Schrems II signals potential chaos ahead
Facebook fined $5 billion, critics say it’s a ‘early Christmas present’
Commission weighs in on Artificial Intelligence as debate continues in UK
The first GDPR fines in Romania

Articles

Expert comment - Bridget Treacy, Hunton Andrews Kurth
Making sense of marketing in a digital world - focus on cookies - Liz Fitzsimons, Eversheds Sutherland (International) LLP
Data Subject Access Requests - three illuminating UK cases - Kate Brimsted & Tom Evans, Bryan Cave Leighton Paisner
Taking action: enforcement of data protection by design and by default - Peter Given & Amy Eames, Womble Bond Dickinson (UK) LLP
Just a processor? The fan pages and Fashion ID cases - Ann Bevitt & Amy Collins, Cooley (UK) LLP

June 2019
Volume 19, Issue 6

News Items

As adtech complaints mount, a vision for enforcement is lacking
CNIL takes proactive steps to address ePrivacy Regulation delay
EU-US Privacy Shield complaint to be heard by Europe’s top court in July
Singapore’s regulator shifts more accountability to businesses
ICO accepting enquires regarding certification schemes

Articles

Tricky transparency requirements and how to overcome them - Krysia Oastler, PwC
Probing the rules on automated decision making - Duc Tran, Herbert Smith Freehills LLP
Adtech and transparency: an area of focus for regulators - Joanne Vengadesan & Michael Ridge, Penningtons Manches LLP
Contractual necessity for online services - clarity at last? - Oisín Tobin, Mason Hayes & Curran
Rudd v Bridle and another - pleading guidance in data protection cases - Ashley Roughton, Northwall Cyber LLP

April/May 2019
Volume 19, Issue 5

News Items

Polish case sets standard for publicising privacy notes
Online platforms to face new duty of care in the UK
Regulators are working on a ‘matrix’ for calculating fines
Bank embraces data protection audit in Sweden
EDPS to investigate EU institutions’ Microsoft cloud deals for GDPR compliance
German court rules that protection of whistle-blower confidentiality does not override subject access

Articles

‘Sufficient guarantees’ and technical due diligence when appointing processors - Manish Soni, Herbert Smith Freehills LLP
Data protection by design and data analytics: can we have both? - Sophie Stalla-Bourdillon, Immuta
Cookie consent revisited - Oisin Tobin, Mason Hayes & Curran
The troublesome position of the Polish Supervisory Authority regarding BCRs - Damian Karwala, CMS Poland
Post GDPR enforcement in Germany - a sneak peek - Benjamin Beck & Ulrich Worm, Mayer Brown

March 2019
Volume 19, Issue 4

News Items

EDPS, EDPB and various SAs all talk Brexit
EU regulators consult on codes of conduct and monitoring bodies
Committee describes Facebook as ‘digital gangster’ of the online world
Code sets benchmarks for AI use by UK health bodies
Thailand’s new data law approved
Singapore to introduce data sharing requirement

Articles

Anonymising personal data: where do we stand now? - Sophie Stalla-Bourdillon, Immuta
CNIL’s fine to Google - lessons to be learned - Rob Corbet, Arthur Cox
Expanding the GDPR’s journalism exemption - is all the world a stage? - Hugh McCarthy, Arthur Cox
Cooper: a basis for processing - Ashley Roughton, Northwall Cyber LLP

January/February 2019
Volume 19, Issue 3

News Items

Government’s Brexit legislation focuses minds on preparations
Google becomes first tech to receive GDP fine (and it’s large)
Japan attains adequacy
Campaigners given go ahead to challenge immigration exemption in UK
EU advisor’s advice limits scope of ‘right to be forgotten’
Dutch DPA investigates the data processing agreements of 30 organisations

Articles

Brexit - the guidance so far. Keep calm and carry on? - John O’Brien, Reed Smith
Consent versus legitimate interest: Part 2 - Mark Watts, Bristows
How to use dashboard cameras in a compliant way - Anna Rak-Kozerska & Lore Leitner, Wilson Sonsini Goodrich & Rosati
Practical strategies for dealing with Data Subject Requests - James Clark, DLA Piper
The GDPR right to be forgotten and employee images - David Whincup, Squire Patton Boggs

December 2018
Volume 19, Issue 2

News Items

UK government publishes plans for ‘no deal’ Brexit
Irish regulator opens fresh GDPR investigation into Facebook
Director liability for nuisance calls introduced in UK
EU e-Privacy reforms hit stalemate
Marriott data breach a Chinese effort?
Airbnb ordered to disclose data on hosts in Munich

Articles

Data protection by Design and by Default: from theory to practice - Bridget Treacy, Hunton Andrews Kurth LLP
Consent vs legitimate interest: Part 1 - Mark Watts, Bristows
Reconciling innovation and regulation: mission impossible? - Fiona Maclean & Olga Phillips, Latham & Watkins
Dealing with Data Subject Requests - practical tips - Lore Leitner, Wilson Sonsini Goodrich & Rosati

October/November 2018
Volume 19, Issue 1

News Items

Commissioner: “I’m at a crossroads now”
“Look beyond passwords”, says ICO
ICO prosecution results in a first-ever prison sentence
First GDPR fine issued, and it’s pretty modest
CNIL publishes useful assessment on blockchain
ICO prosecution results in a first-ever prison sentence

Articles

Making sense of Data Protection by Design and by Default - Bridget Treacy, Hunton Andrews Kurth LLP
Brexit: key impacts on data protection - James Clark & Alexandra Greaves, DLA Piper UK LLP
How a company can survive a personal data breach - John O’ Brien, Reed Smith LLP
Spot the difference: the change in the definition of ‘personal data’ in the UK - Krysia Oastler, PwC

September 2018
Volume 18, Issue 8

News Items

New guidance on international data transfers
Campaigners launch legal challenge against UK Data Protection Act
UK regulator calls for views on creating a regulatory “sandbox”
Google says CNIL is ‘out on a limb’ with right to be forgotten case
Internet Association calls for national data protection rules in US
British Airways data breach hackers identified

Articles

What has the GDPR (ever) done for Subject Access Requests? - Kate Brimstead & Tom Evans, Bryan Cave Leighton Paisner
When to report your data breach - Rob Corbet, Arthur Cox
UK data subjects’ rights - Part 1 - Estelle Dehon, Cornerstone Barristers
While your back was turned… the Asia data protection outlook in 2018 - Carolyn Bigg, DLA Piper

July/August 2018
Volume 18, Issue 7

News Items

Eight months until Brexit and still no adequacy deal
UK regulator issues interim report into political campaigns’ use of data analytics
European Union and Japan agree on adequacy
Singapore pilots data protection scheme as country suffers large-scale hack
Spanish government approves new decree-law on data protection
Dixons Carphone says data breach affected 10 million

Articles

GDPR certifications — what you need to know - Krysia Oastler, PwC
California’s Consumer Privacy Act and the GDPR - where do they overlap? - James Clark & Jim Halpert, DLA Piper
ICO’s Regulatory Action Strategy - what you need to know - Emily Carter, Kingsley Napley
A practical guide to conducting Data Protection Impact Assessments - Sandy Tsakiridi, Fieldfisher

June 2018
Volume 18, Issue 6

News Items

EDPB gets down to business
Directors could be made personally liable for nuisance calls in UK
Barnier: ‘You’re either in or you’re out’
e-Privacy Regulation update
National data strategy to be developed in the UK
Facial recognition technology is ‘dangerously inaccurate’

Articles

iConsent and pesky emails - why ‘do nothing’ is the sanest approach - Ashley Roughton, IP Chambers
The future of international data transfers - Eduardo Ustaran, Hogan Lovells
How much control makes a controller? - Roisín Cregan & Sekou Taylor, Macfarlanes
Ireland’s Data Protection Act 2018 - Rob Corbet, Arthur Cox

April/May 2018
Volume 18, Issue 5

News Items

Regulator releases raft of GDPR guidance
Article 29 working party issues various GDPR guidance
Government given six months to rewrite Snooper’s Charter
Facebook fails its attempt to stall progress of Model Clauses case
Sharing of school pupils’ data put on hold
UK businessman wins takedown request case

Articles

GDPR series: Certifications, Seals and Marks - Bridget Treacy, Hunton Andrews Kurth
GDPR series: Automated decisions - what controllers need to know - Krysia Oastler, PwC
What public bodies should take from Procurement Policy Note 03/17 - Christopher Knight, 11KBW
GDPR series - Challenges in informing individuals in health setting - Adam Tuckett, SCW CSU
GDPR series: Personal liability for DPOs - Rob Corbet, Arthur Cox

March 2018
Volume 18, Issue 4

News Items

Welcome clarifications in breach notification guidance
UK PM’s ‘ambitious’ data protection plan not unreasonable, say experts
France’s draft data protection law close to being finalised
UK regulator publishes introduction to Data Protection Bill
Regulator publishes first ever technology strategy
Elizabeth Denham tells marketers they need consent for electronic marketing

Articles

GDPR series: Outsourcing contracts - all changed, changed utterly? - John O’Brien, Reed Smith LLP
GDPR series: new obligations on data processors - Laura Dietschy, Cooley (UK) LLP
GDPR series: the Right to be Forgotten - Hugh McCarthy, Arthur Cox
Ireland’s take on the GDPR - Rob Corbet, Arthur Cox

January/February 2018
Volume 18, Issue 3

News Items

Guidance takes strict interpretation of GDPR consent
Latest Bill amendments — legitimate interests; protection for researchers
If you knew about security flaws before GDPR, they will be enforced under the new rules’ says ICO
New guidance on children’s data
ICO issues joint largest ever fine against mobile phone retailer
ICO updates GDPR guidance

Articles

GDPR series: How to engage third party suppliers in a GDPR compliant way - Krysia Oastler, PwC
GDPR series: How to legitimise your profiling activities - Fedelma Good, Samantha Sayers & Olivia Wint, PwC
GDPR series: transparency - Manish Soni, Macfarlanes LLP
Handling SARs now and after May (a UK perspective) - Ann Bevitt & Nihara McCormack, Cooley LLP
The proposed changes to the UK Investigatory Powers Act - Graham Smith, Bird & Bird

December 2017
Volume 18, Issue 2

News Items

EU DPAs to go after Uber
Shield strife
UK government seeks views on updates to Communications regime
European Commission intervenes in US dispute with Microsoft over access to data stored in Ireland
UK regulator issues guidance on security and breach reporting for eID and trust services
Guide to law enforcement provisions of Data Protection Bill published
UK supermarket found responsible for actions of rogue employee
Google faces landmark mass legal action in UK

Articles

Working Party threatens to take legal action over Privacy Shield
E-privacy in Europe - changes afoot - Mark Webber & Richard Lawne, Fieldfisher LLP
IDTs - transparency, adequacy and GDPR derogations - Hugh McCarthy, Arthur Cox
Group actions for data breaches - the case of Morrisons supermarket - Timothy Pitt-Payne QC, 11KBW
GDPR series: International data transfers - a high level review - Kirill Albrecht & Karen Lee Lust, Reed Smith LLP

December 2017
Volume 18, Issue 2

News Items

EU DPAs to go after Uber
Shield strife
UK government seeks views on updates to Communications regime
European Commission intervenes in US dispute with Microsoft over access to data stored in Ireland
UK regulator issues guidance on security and breach reporting for eID and trust services
Guide to law enforcement provisions of Data Protection Bill published
UK supermarket found responsible for actions of rogue employee
Google faces landmark mass legal action in UK

Articles

Working Party threatens to take legal action over Privacy Shield
E-privacy in Europe - changes afoot - Mark Webber & Richard Lawne, Fieldfisher LLP
IDTs - transparency, adequacy and GDPR derogations - Hugh McCarthy, Arthur Cox
Group actions for data breaches - the case of Morrisons supermarket - Timothy Pitt-Payne QC, 11KBW
GDPR series: International data transfers - a high level review - Kirill Albrecht & Karen Lee Lust, Reed Smith LLP

October/November 2017
Volume 18, Issue 1

News Items

Working Party’s guidance on profiling creates uncertainty
Privacy Shield: verdict is out
Commissioner sets out thinking on Data Protection Bill
Latest fines in UK
UK proposals for child data consent could be illegal, says peer
Change in the law needed to liberate data for new pensions dashboard, says industry
High Court judge grants data protection injunctions over video content

Articles

The new UK Data Protection Bill - complex but with few surprises - Bridget Treacy, Hunton & Williams
GDPR series: Creating and reviewing data protection policies Part 2 - externalfacing policies - Ann Bevitt, Cooley (UK) LLP
GDPR series: Anonymisation and pseudonymisation - James Clark, DLA Piper
GDPR series: When should a DPO be appointed? - Rob Corbet, Arthur Cox
GDPR series: Record of processing activities - Lynn Wyeth, Leicester City Council

September 2017
Volume 17, Issue 8

News Items

ICO ruffles feathers with latest GDPR ‘myth buster’
UK seeks adequacy-style decision from EU
French regulator fines Hertz for data breach
German media groups aim to create data alliance
Nationwide reaches $5.5 million in settlement of breach investigation
ICO warns NHS employees after former worker fined

Articles

GDPR series: Children and parental consent - James Fenelon, Bird & Bird
GDPR series: Creating and reviewing data protection policies Part 1 — Internalfacing policies - Ann Bevitt, Cooley LLP
GDPR series: the new data subject rights - Calum Docherty, Fiona Maclean & Danielle van der Merwe, Latham & Watkins
Changes to Subject Access Requests in the UK - Alexander de Gaye, Fieldfisher

July/August 2017
Volume 17, Issue 7

News Items

Brexit plans need work, says Committee
Clampdown on social media job snoops
UK Commissioner delivers first Annual Report
ICO’s first ‘International Strategy’
Industry group issues guidance on GDPR legitimate interests
Germany first EU Member State to enact new Data Protection Act

Articles

GDPR series: Data security and response planning - Manish Kumar Soni, PwC
List of monetary penalties levied by UK Information Commissioner
China’s new cybersecurity law: what you need to know - Carolyn Bigg, DLA Piper Hong Kong

June 2017
Volume 17, Issue 6

News Items

With less than a year to go, GDPR prep tools are thick and fast
Privacy Shield: what’s your view?
ICO releases Strategic Plan
Latest fines in UK
Europe concerned about uncertainties of new cybersecurity law in China
Bavarian DPA tests GDPR implementation
Danish government to present report on EU data protection rules

Articles

GDPR series: demystifying DPIAs - Samantha Sayers & Kayleigh Clark, PricewaterhouseCoopers LLP
Direct marketing and privacy: striking that balance - Nicola Flannery, Deloitte Risk Advisory Ireland
Brexit, the Great Repeal Bill and data protection law - Peter Given, & Matt Harris, Bond Dickinson LLP
New Data Protection Bill in Ireland - what’s covered, what’s not - Rob Corbet, Arthur Cox
US broadband privacy rules - troubling times ahead - Sana Khan, Rapid Ratings International Inc.

April/May 2017
Volume 17, Issue 5

News Items

Data Protection Impact Assessments get scrutinized
DPAs approve of new e-Privacy rules, but note concerns
GDPR guidance finalised
First EU-US Privacy Shield review to take place in September 2017
Latest fines in UK
Italian regulator issues record fine in EU
CJEU rules that personal data use permission extends throughout EU
Trump nullifies FCC broadband consumer privacy rules

Articles

GDPR series: A design for life? Designing the future of privacy - Nicola Flannery, Deloitte Risk Advisory
GDPR series: International data transfers 2.0 - Eduardo Ustaran, Hogan Lovells
GDPR series: The role of the DPO - overcoming a GDPR hurdle - Katalina Bateman, Reed Smith LLP
UK regulator’s guidance on GDPR consent - is the definition any clearer? - Chantelle Taylor, Reed Smith

March 2017
Volume 17, Issue 4

News Items

EU-US Privacy Shield threatened with suspension
UK data protection future—talks begin
Microsoft attracts attention of EU DPAs with Windows 10 privacy settings
UK regulator consults on new guidance on consent
Australia passes data breach notification law
Supreme Court in Japan rules on right to be forgotten
UK government launches Digital Strategy

Articles

GDPR series: practicalities of managing the controller - processor relationship - Jenai Nissim, TLT LLP
GDPR series: preparing for One Stop Shop - Bridget Treacy, Hunton & Williams
GDPR series: fining powers of the supervisory authority - Curtis McCluskey, Reed Smith

January/February 2017
Volume 17, Issue 3

News Items

Denham: accountability is key to GDPR compliance
Trump Order prompts panic that Privacy Shield will be invalidated
Article 29 Working Party releases GDPR action plan for 2017
Supreme Court rules that Parliament must have Brexit vote
US Court of Appeals refuses to rehear Microsoft warrant case
UK regulator issues eleven charities with Notice of Intent to fine
Direct marketing complaints on rise in Hong Kong

Articles

GDPR series: the new right to data portability - Nicola Fulford & Krysia Oastler, Kemp Little LLP
GDPR series: building a compliance programme - James Clark, DLA Piper
GDPR series: accountability - a blueprint for GDPR compliance - Kate Brimsted, Reed Smith
The right to be forgotten - a decision from the Irish Circuit Court - Gavin Woods & Gemma O’Farrell, Arthur Cox

December 2016
Volume 17, Issue 2

News Items

Yahoo admits to second staggering data breach
New e-Privacy rules leaked
ICO appoints new Deputy Commissioner
Commission issues further information on so-called Umbrella Agreement
New class action mechanism for data protection in France is wide in scope
New data protection law imminent in Spain

Articles

Directors’ liability - the direction of travel - Dyann Heward-Mills, Baker Mckenzie
GDPR series: the risks with data profiling - Ann Bevitt & Laura Dietschy, Cooley (UK) LLP
The UK Investigatory Powers Act - what it means for your business - Graham Smith, Bird & Bird
GDPR series: personal data - an expanding concept? - Davinia Brennan, A&L Goodbody
The new cyber security law in China - Carolyn Bigg, PDP’s Asia correspondent & Of Counsel, DLA Piper Hong Kong

October/November 2016
Volume 17, Issue 1

News Items

EU DPAs demand answers from Yahoo and Whatsapp
UK government confirms that GDPR will be implemented
UK regulator issues record fine against TalkTalk
FTC publishes new guide on handling data breaches
Commission proposes changes to data transfer mechanisms
Legal challenge to Privacy Shield

Articles

GDPR series: How to operationalise profiling for your organisation - Samantha Sayers & James Drury-Smith - PricewaterhouseCoopers Legal LLP
The ICO’s new Privacy Notices Code of Practice - a review - Peter Given, & Matt Harris, Bond Dickinson
Witness the fitness (to Practice): mixed personal data and Section 7 DPA - Christopher Knight, 11KBW
Ireland’s Data Protection Bill - Rob Corbet, Arthur Cox
Profile of an Information Commissioner: Elizabeth Denham - Polly Ralph (Barrister), PwC UK
Book Review - Data Protection & Privacy - jurisdictional comparisons - Monica Salgado, PricewaterhouseCoopers Legal LLP

September 2016
Volume 16, Issue 8

News Items

Working Party wants e-Privacy framework harmonised with GDPR
Privacy Shield - initial take up slow
German regulator threatens legal challenge against EU-US Privacy Shield
WhatsApp announces intention to share data with Facebook
Mandatory breach notification on agenda once again in Australia
US announces new cyber response framework
Latest enforcement actions in UK

Articles

The future under the e-Privacy Directive - Yuli Takatsuki, Fieldfisher (Silicon Valley)
People, processes, technology - a how to guide to data mapping - Nicola Fulford & Krysia Oastler, Kemp Little LLP
Pulling back the curtain on targeted social media advertising - Alison Deighton, TLT LLP
The role of the DPO - what you need to know - Anita Bapat & James Henderson, Hunton & Williams

July/August 2016
Volume 16, Issue 7

News Items

There's no getting around it: new UK law will be closely aligned with GDPR
Privacy Shield passed - but is it Schrems proof?
Christopher Graham launches his last Annual Report
Bavarian DPA publishes guidance on GDPR
CNIL launches consultation on GDPR
EU Council adopts NIS Directive
New rules on trust service providers incoming in UK

Articles

The Privacy Shield explained - Part 3 - Eduardo Ustaran, Hogan Lovells
A practical guide to impact assessments - Nicola Fulford & Krysia Oastler, Kemp Little LLP
Brexit and the future of data protection - Anya Proops QC - 11KBW
How to build a GDPR programme - a multidisciplinary approach - Monica Salgado - PWC Legal LLP

June 2016
Volume 16, Issue 6

News Items

Data Protection Regulation: the countdown begins
Model Clauses to get ‘Schrem’d’
So long; farewell: from Christopher Graham
US and EU sign Umbrella Agreement
EDPS issues Annual Report
EU Council adopts NIS Directive
New UK Digital Economy Bill

Articles

The Privacy Shield explained - Part 2 - Eduardo Ustaran, Hogan Lovells
The REFIT of the e-Privacy Directive - what can we expect? - Mark Webber, Fieldfisher (Silicon Valley) LLP
Data protection clauses in contracts - adapting to the GDPR - Rob Corbet, Arthur Cox
Preparing for the GDPR - advice for employers - Ann Bevitt & Chris Stack, Cooley (UK) LLP
SBrexit - a data protection perspective - James Mullock, Bird & Bird

April/May 2016
Volume 16, Issue 5

News Items

‘Let’s just put this to bed’: UK Commissioner on Privacy Shield
Law change in UK means nuisance callers may soon be thing of the past
ICO updates guidance on direct marketing
European Parliament adopts Data Protection Regulation
Parliamentary Committee approves Denham appointment
New compounding of data privacy offences regulations in Malaysia
German DPAs make resolution on healthcare apps

Articles

The Privacy Shield explained - Part 1 - Eduardo Ustaran, Hogan Lovells
Shifts in the key conditions for processing - James Clark, DLA Piper
Dual certification: a tale of two frameworks - Daniel Cooper, Covington & Burling LLP
The European Data Protection Board - more than a mere rebranding exercise - Bridget Treacy, & Adam Smith, Hunton & Williams
Sanctions under the GDPR - Rob Corbet, Arthur Cox
The right to be forgotten: the Asian experience - Carolyn Bigg, DLA Piper Hong Kong

March 2016
Volume 16, Issue 4

News Items

Schrems says Privacy Shield is ‘lipstick on a pig’
Judicial Redress Act becomes reality
Working Party begins grappling with GDPR implementation
Data protection issues source of landmark anti-competition probe in Germany
The impact of a ‘leave’ vote in the EU remains unclear
Apple and FBI go head to head in court battle over gunman’s iPhone
UK continues war on nuisance callers and issues largest ever fine

Articles

Monitoring employees’ emails - how far is too far? - Davinia Brennan, A&L Goodbody
The EU-US Privacy Shield - is it strong enough? - Alison Deighton, TLT LLP
The GDPR’s impact on the cloud service provider as a processor - Mark Webber, Fieldfisher (Silicon Valley)
ICO’s guidance on Wi-Fi location analytics - things you need to know - Lorna Cropper & Brian Davidson, Fieldfisher

January/February 2016
Volume 16, Issue 3

News Items

After four years of waiting, language of reform agreed
President signs federal Cybersecurity Information Sharing Act into law
EDPS begins year on intentional note
Government should be championing encryption, says Commissioner
UK government announces new rules to crack down on nuisance calls

Articles

EU General Data Protection Regulation: things you should know - Eduardo Ustaran, Hogan Lovells International LLP
The right to be forgotten - under spotlight - Rosemary Jay & Stuart Taylor, Fieldfisher
The NIS Directive - a practical perspective - Mark Webber & Stuart Taylor, Fieldfisher
Seven key data protection New Year’s Resolutions companies should be making - Ann Bevitt & Amy Collins, Cooley (UK) LLP
Just how fair will processing notices need to be under the GDPR? - Suzanne Rodway, RBS

December 2015
Volume 16, Issue 2

News Items

UK regulator hones in on nuisance callers, issuing fine after fine
Freedom of Member States to legislate on data retention to be clarified
CJEU rules on unfair processing
Proposed powers to monitor bank accounts in France
Belgian court makes ground - breaking order to Facebook
Tracking shop customers using wifi signals breaks privacy rules, says CPB

Articles

FTC v Wyndham: a sea change in regulating cyber security practices - Kurt Wimmer & Caleb Skeath, Covington & Burling LLP
Safe Harbor - is the EU guilty of double standards? - Rob Corbet, Arthur Cox
What Weltimmo said - the future of enforcement in the EU - Christopher Knight, 11 KBW
Asset deals and customer data in Germany - a warning for other Member States? - Silvia C. Bauer, Luther law firm (Germany)
Cyber risk and cyber security - current state of play - Annette Hogan, McCann Fitzgerald
2015 in review - key events and trends - Monica Salagdo, PricewaterhouseCoopers Legal LLP

October/November 2015
Volume 16, Issue 1

News Items

Safe Harbor invalid; Model Clauses and BCRs still stand
European Court rules on which regulators can fine companies
Significant progress on draft law enforcement Directive
California passes sweeping new digital privacy law
UK regulator issues largest ever nuisance calls fine
Facebook goes on EU ‘privacy offensive’

Articles

The demise of the US-EU Safe Harbor - Bridget Treacy & James Henderson, Hunton & Williams
The Taylor Wessing case - uncertainty over subject access? - Davinia Brennan, A&a;L Goodbody (Dublin)
Protecting children’s data - guidance for UK data controllers - Samantha Sayers & Olivier Proust, Of Counsel, Fieldfisher
Monetising personal data whilst staying compliant - an impossible conundrum? - Monica Salagdo, PricewaterhouseCoopers Legal LLP

September 2015
Volume 15, Issue 8

News Items

‘Don’t weaken purpose limitation’, say German regulators
US gives FTC go ahead to monitor cyber security data breach
Russian regulator gives its interpretation of new law
Latest qualified professionals announced
Ashley Madison hackers continue to dump data
Target and Visa reach new deal on data breach settlement
Google incursions
German DPA fines two companies for unlawful transfer of customer data
FTC reaches settlement with 13 companies over Safe Harbor misrepresentations

Articles

Connected cars: an approach to dealing with the privacy risks - Samantha Sayers & Sabba Mahmood, Fieldfisher
New Working Party Opinion on drones - a flight plan for data controllers? - Matt Harris & Peter Given, Bond Dickinson
Data retention by telcos and ISPs - what now? - Georgina Lawrence, Fieldfisher
Changes to Russian data protection law - Elena Polevaya, Baker Botts LLP

July/August 2015
Volume 15, Issue 7

News Items

ICO’s latest Annual Report shows fewer fines, but higher accuracy
Landmark case means online news sites need to proactively monitor content
Home Office not disclosing breaches
European Official makes significant Opinion on nature of ‘an establishment’
Working Party updates guidance on BCRs for processors
Albrecht says agreement on Regulation by end of 2015 feasible
French data protection regulator warns websites on cookie use
Working Party says manufactures should be helping drone operators to comply

Articles

Does the US need an EU-style data protection law? - Randy Sabett & Ann Bevitt, Cooley LLP (US & UK)
Nuisance calls and text messages - lower threshold, higher risk to UK companies - Neelum Dass, Bristows LLP
Wearable technology and the corporate wellness strategy - Katie McMullan, Hogan Lovells International LLP
Misuse of information — the floodgates open - Stephanie Pritchett & Ben Wootton, Pritchetts Law
Data protection in Japan - proposed changes to the law - Alexander Shepherd & Sarina Keung, Simmons & Simmons

June 2015
Volume 15, Issue 6

News Items

Graham — “we are going to need to do things differently”
New US-EU data transfer agreement imminent
US government human resources office hacked
Mandatory data breach notification introduced in the Netherlands
UK police bodies still falling short on records management
UK police force fined £160,000
US law limits snooping, just as UK gears up to make its spies more powerful

Articles

ICO’s approach to cyber security - identifying trends and mitigating risk - Samantha Sayers & Sabba Mahmood, Fieldfisher Waterhouse
Data sharing agreements - avoiding common pitfalls - Heledd Lloyd-Jones, Blake Morgan LLP
Cross device profiling - ensuring compliance - Bridget Treacy & James Henderson, Hunton & Williams
Internet of Things - where are we now? - Rob Corbet, Arthur Cox

April/May 2015
Volume 15, Issue 5

News Items

CNIL makes it easier for company groups to transfer data abroad
Google decision leaves data controllers ‘exposed and vulnerable’
Australia: controversial metadata law passed and Commissioner enforces new data retention rules
GPEN releases first ever annual report
Japan to update its data protection law
Latest fines in the UK
China introduces new protections for consumer personal information
New cybersecurity agency in Singapore

Articles

The EU cookie compliance sweep - lessons to be learned - Katie McMullan, Hogan Lovells
Sensitive personal data - current and future - Ann Bevitt, Cooley (UK) LLP
Avoiding and dealing with Monetary Penalty Notices - Samantha Sayers & Antonis Patrikios, Fieldfisher
Data privacy and cyber risk in M&As - are you prepared? - Davinia Brennan, A&L Goodbody

March 2015
Volume 15, Issue 4

News Items

UK regulator’s powers to audit expanded — NHS bodies watch out
UK government consults on interceptions following landmark ruling
Germany approves new data bill with far reaching rights for consumers
‘Don’t read too much into drafts’, says UK regulator
Proposed new data protection and cybersecurity laws in Thailand
Details of Australia’s proposed data retention law announced
Working Party uncovers results of cookie sweep

Articles

Data protection and surveillance technologies Part 2 – Body Worn Video - Bathilde Waquet, Bristows LLP
Human resources - the big data late-adopter? - Ann Bevitt, Cooley (UK) LLP
Harmonisation of opinions on Model Clauses - mission accomplished? - Sabba Mahmood & Olivier Proust, Fieldfisher
Ryneš and the household exemption - where does it leave us? - Matt Harris & Peter Given, Bond Dickinson LLP
Book Review 'Data Protection and Privacy: Jurisdictional Comparisons' (2nd Ed.) - Stephanie Pritchett, Pritchetts

January/February 2015
Volume 15, Issue 3

News Items

DPA disgruntled after internet giants ride roughshod over privacy concerns
Council’s latest draft of new law leaked
German DPA imposes 1.3 million euro fine on insurance company
Boiler insurance firm fined £90,000 in UK
Council commits to following ICO Code on surveillance
Dublin start-up aims to remove posts and pictures from the web
Eye care firm gets Enforcement Notice over nuisance calls
Government seeks to amend PECR to enable a public emergency alert system

Articles

Privacy notices - clarity and effectiveness - Olivia Whitcroft, OBEP
Data protection and surveillance technologies Part 1 - ANPR - Faye Harrison, Bristows LLP
PECR lives! Nuisance calls in a post-Niebel world - Christopher Knight, 11KBW
Data protection reform - update - Ashley Roughton, Barrister

December 2014
Volume 15, Issue 2

News Items

Working Party issues definitive guidance on take down requests
CJEU makes waves again — this time, CCTV use and household exemption
Giovanni Buttarelli confirmed as next EDPS
Hong Kong banking regulator reminds banks of their customer data protection responsibilities
Pharmacist prosecuted in UK for unlawful access
Enforced subject access request ban - delayed in UK
EU Presidency reformulates one stop shop
Pharmacist prosecuted in UK for unlawful access

Articles

Scrapping Safe Harbor: European scare mongering or a real possibility? - Bridget Treacy & Anita Bapat, Hunton & Williams
Privacy issues and drones: preparing for take-off - Matt Harris & Peter Given, Bond Dickinson LLP
Enforced Subject Access - is it finally the end? - Alexander de Gaye & Sabba Mahmood, FieldFisher
Right to be forgotten - guidance at last? - Monica Salgado, Visa Europe

October/November 2014
Volume 15, Issue 1

News Items

Nuisance calls firms to face more fines in UK
DPAs resolve on global enforcement for data breaches
ICO publishes revised CCTV Code
Committee selects Giovanni Buttarelli as new EDPS
MPs investigate financial system’s cyber weaknesses
Introduction of jail time for data protection breaches receives further setback in UK
UK data protection fees to remain
Advances in APEC data privacy schemes and joint referral scheme with EU

Articles

Getting the UK regulator’s seal of approval - value added? - Samantha Sayers & Sabba Mahmood at Fieldfisher
Stop Press! The ICO’s new guide for the media - Hanna Crowther, Bristows LLP
Internet of Things revisited - Monica Salgado, Registered European Lawyer
Hong Kong - guidance for the banking industry - Alexander Shepherd & Carolyn Bigg

September 2014
Volume 14, Issue 8

News Items

Emergency data retention law to be challenged
UK regulator takes on Big Data
EU data protection proposals would kill fundraisers’ mailing lists, says report
Singapore courts hand down fines for first prosecutions
No ‘high assurance’ ratings in latest audits
CNIL to increase scrutiny of cookie law compliance
Latest Annual Report shows unsolicited marketing still a ‘major concern’
Massive personal data theft in Japan

Articles

ICO’s Big Data Report - guidance for DPOs - Samantha Sayers & Brian Davidson, Fieldfisher Waterhouse
Google and the ‘right to be forgotten’ - setting the record straight - Ashley Roughton, Barrister
The wider effect of the ‘right to be forgotten’ case - Eduardo Ustaran, Hogan Lovells
Canada’s anti-spam legislation - a high bar? - Sylvia Kingsmill, Deloitte (Canada)
CJEU judgment on personal data and SARs - what does it mean? - Monica Salgado, Speechly Birchams

July/August 2014
Volume 14, Issue 7

News Items

Working Party ‘sets record straight’ on risk-based approach
Enforced subject access requests to be illegal in UK by December
EU citizens to get right to sue in US for wrongful disclosure
EU authorities to coordinate regarding ‘take down’ requests
Major provisions of Singapore law now in force
Brazil’s Internet law enters into force

Articles

Anonymisation - a process living on borrowed time? - Kate Brimsted, Reed Smith LLP (with Katalina
Chin contributing)
CCTV - updates for the 21st Century - Hannah Crowther, Bristows LLP
Draft ad hoc contractual clauses for EU data processor to non-EU sub-processor - consensus at last? - Dominika Kupczyk, Fieldfisher
Data retention - what now? - Monica Salgado, Speechly Bircham
Singapore’s data protection law - the key components - Carolyn Bigg, Simmons & Simmons

June 2014
Volume 14, Issue 6

News Items

Regulators left in quandary as ECJ creates right to be forgotten
UK regulator consults on new CCTV Code
Regulator publishes in depth guidance on IT security
Update on DP reform
Clinical trials Regulation more thoughtful of data protection
Laws on legal communications ‘need to catch up with digital age’
More stringent data protection rules for ICSPs in South Korea

Articles

‘Legitimate interests’ - clarifying the scope - Samantha Sayers, Fieldfisher Waterhouse
Microsoft and the US court - complying with US search warrants - Rob Corbet, Arthur Cox
Parental photography at school events: going beyond the exemption in section 36 - Claire Bessant, Nortumbria University
Largest fine ever in Europe - what can we learn? - Monica Salgado, Speechly Bircham
New data protection law in Brazil - Monica Salgado, Speechly Bircham
Monetary Penalties imposed by the ICO - Resource List produced by PDP Journals

April/May 2014
Volume 14, Issue 5

News Items

Uncertainty for EU ISPs as Court declares retention law invalid
CNIL gets new inspection powers affecting all companies selling goods to French
UK hospital promises to improve staff training
Survey of SMEs reveals compliance motivations
Home improvement company receives £50,000 fine
New Opinion on breach notification
Safe Harbor here to stay

Articles

Apps and privacy Part 3: appropriate security and retention - Olivia Whitcroft, OBEP
The draft Data Protection Regulation: can we start counting our chickens? - Hannah Crowther, Bristows
Data protection - a contextual approach to regulation - Steve Lorber, Lewis Silkin LLP

March 2014
Volume 14, Issue 4

News Items

EU DPAs and APEC team up to produce checklist on data transfers
New plans for UK patient data shelved following privacy backlash
New Opinion on data protection and law enforcement
Subject Access Code of Practice updated in UK, and enforced subject access to be outlawed
Privacy groups challenge Facebook’s WhatsApp purchase
Parliament approves Regulation
UK regulator publishes PIA Code

Articles

Apps and privacy Part 2: playing a part - Olivia Whitcroft, OBEP
Data Protection Authorities versus Google - latest developments and practical implications - Monica Salgado, Speechly Bircham LLP
Reporting data breaches to the ICO - is honesty really the best policy? - Cynthia O’Donoghue, Reed Smith
Care.data - why should we care? - Stephanie Pritchett, Pritchetts Law

January/February 2014
Volume 14, Issue 3

News Items

Reding rallies troops to power forward with reform
LIBE recommends close down of US/EU data flows and that UK cleans up its act
European Data Protection Day — celebrations
Google — fined by the Spanish and French authorities, and sued in the UK
Safe Harbor misrepresentation discovered
EDPS post to be vacant?

Articles

Apps and privacy: App-lying the rules and App-easing the users - Olivia Whitcroft, OBEP
Kelway: applying a blunt sword to the ‘personal data’ Gordian knot? - Kate Brimsted, Reed Smith
Is Safe Harbor really dead in the water? - Katie McMullan & Samantha Sayers, Field Fisher Waterhouse
Share and share alike - attitudes towards data sharing in the UK public sector - Marion Oswald, University of Winchester

December 2013
Volume 14, Issue 2

News Items

Reform stunted as key advisor casts doubt over one stop shop
UK regulator debates its future as funding crunch gets closer
Germany appoints a new Federal Commissioner
Public authorities can charge to deal with subject access requests, EU court rules
China’s law amendments widen data protection
Sex club loses privacy battle in UK
Apps must respect privacy over data, says UK regulator

Articles

The right to be forgotten - the debate continues - Nick Graham & Alexandra Cooper, Dentons
Looking outside the Prism: how safe are data transfers? - Gail Crawford & Fiona Maclean, Latham & Watkins
DPOs - top ten tips for making better appointments - Monica Salgado, Speechly Bircham LLP
The ‘Internet of Things’ - already in a home near you? - Bridget Treacy, & Anita Bapat, Hunton & Williams
Data protection in Gibraltar - Michael Nahon, Hassans in Gibraltar

October/November 2013
Volume 14, Issue 1

News Items

LIBE approves Compromise Text; ball now with Member States
Working Party gives new guidance on cookie consent
Spammer successfully appeals against ICO fine
Parliament resolves to suspend deal transferring payments data from the EU to US
US spying on German Chancellor threatens major diplomatic spat
Adobe in source code and customer data security breach

Articles

The path to a new EU data protection framework - Eduardo Ustaran, Field Fisher Waterhouse
New rules on breach notification by telecoms and ISPs - clarity at last? - Davinia Brennan
Augmented reality - a leap into a new world - Olivia Whitcroft, OBEP
Employees’ use of social media - navigating the potential pitfalls - Ann Bevitt
Ireland’s direct marketing laws - a burden on businesses? - Rob Corbet, Arthur Cox

September 2013
Volume 13, Issue 8

News Items

Working Party asks - is ‘Safe Harbor’ still safe?
New breach reporting rules for ISPs and telecoms - now in force
South Africa passes Data Protection Bill
New Code of Practice on SARs in UK
UK regulator consults on PIA Code of Practice
Irish regulator to audit Apple

Articles

PIAs and privacy by design - using them to your advantage - Monica Salgado, Speechly Bircham
ICO’s new Subject Access Code - a toolkit for compliance - Sian Rudgard & Brian Davidson, Field Fisher Waterhouse
Cross regulatory challenges - strategies for UK police bodies - Scott Nicholson, IBM
Ireland and the US find common ground - Rob Corbet, Arthur Cox

July/August 2013
Volume 13, Issue 7

News Items

Privacy regulators enforce data protection law against Google
Fall out from PRISM continues
UK government to consult on introducing custodial penalties for breaches of the DPA
Working Party takes ‘middle ground’ on profiling
Italian DPA orders Facebook to clarify processing
GlaxoSmithKline gets BCRs approval
ICO fines cold-calling company £225,000

Articles

Risk, Accountability, and Binding Corporate Codes: a ‘smarter’ approach to data protection - Richard Thomas CBE (former UK Information Commissioner), Centre for Information Policy Leadership
Social media - challenges in the control of information - Olivia Whitcroft, OBEP
Monetary Penalty Notices - a one stop shop to avoidance - Helen Rose, Bristows

June 2013
Volume 13, Issue 6

News Items

Frenzied lobbying continues as Regulation nears finality
EU demands that light is thrown on Prism
Latest fines in UK — lack of staff training largely at fault
Working Party takes ‘middle ground’ on profiling
New guidance on social networking and online forums in UK
New Opinion on smart grid and smart metering systems
Sweden’s DPA bans Google cloud services

Articles

EU v US data protection - exploring the similarities - Rob Corbet, Arthur Cox
Aligning corporate ethics compliance programs with data protection - Karin Retzer, Morrison Foerster
Data on smart devices - are data subjects being protected? - Colin Rooney, Arthur Cox
Purpose limitation - clarity at last? - Bridget Treacy & Anita Bapat, Hunton & Williams
China takes a giant step forward in data privacy - Scott Thiel, Arthur Cheuk & Belinda Tang, DLA Piper

April/May 2013
Volume 13, Issue 5

News Items

‘Purpose limitation’ analysed in depth by Working Party
The latest on data protection reform
New Opinion on mobile apps
Six EU DPAs form taskforce to deal with social network
Google fined by German DPA
Payment security standards to mandate sharing of risk info?

Articles

Did ‘mission impossible’ just become mission (almost) impossible? ICO’s draft code on subject access - Kate Brimstead, Herbert Smith
Joining the dots - intelligence and proportionality - Marion Oswald, University of Winchester
The expanded role of the DPO - Lisa Jackson, Leman Solicitors
South Africa introduces data protection law - Pamela Stein, Webber Wentzel

March 2013
Volume 13, Issue 4

News Items

Europe and US divide once again over cyber security
EU’s new mass data storage plans arouse suspicion of MEP
Google to appear before European regulators this Summer?
UK regulator publishes new analysis paper on Regulation
Denmark government postpones revision of data retention law
Guernsey census data protection a ‘priority’

Articles

Making it personnel - unlawful practices by HR departments - Stephanie Pritchett, Pritchetts
Bring Your Own Device - protecting data on the move - Olivia Whitcroft, OBEP
Leveson’s data protection proposals - Part 2 - Robin Hopkins, 11KBW

January/February 2013
Volume 13, Issue 3

News Items

‘Stricter and tougher to navigate’ - LIBE Committee’s proposals
EU proposes ban on BCRs and model clauses for cloud computing
Dutch and Canadian regulators’ landmark collaboration
China adopts data protection rules
Singapore data protection law now in force
New Zealand given adequacy status
UK regulator approves American Express BCRs

Articles

The new right to data portability - Anita Bapat, Hunton & Williams
Things to do to prepare for the new Regulation - Colin Rooney, Arthur Cox
EU data protection proposals - implications for employment - Steven Lorber, Lewis Silkin
Consent - the silver bullet? - Victoria Hordern, Field Fisher Waterhouse
ICO’s audits - lessons to be learned - Sue Gold, Osborne Clarke

December 2012
Volume 13, Issue 2

News Items

Regulator derides public sector for unacceptable data losses
Report recommends tightening data protection law to protect privacy
EU privacy watchdogs begin probe of Microsoft
Anonymisation need not guarantee a person’ privacy, says regulator
SpongeBob app disappears following privacy criticism

Articles

Data anonymisation and managing risk - the ICO’s new code - Marion Oswald University of Winchester
What can we learn from the Google experience? - Gail Crawford & Fiona Maclean, Latham & Watkins
Leveson’s data protection proposals - Part 1 - Rachel Kamm, 11KBW
Potential pitfalls of the draft Regulation - Monika Kuschewsky, Van Bael & Bellis

October/November 2012
Volume 13, Issue 1

News Items

Clouds on the horizon as they move up regulatory agenda
Working Party makes it personal in latest Opinion
Medical loophole in draft Regulation?
Regulator launches complaints assistant
UK’s new Surveillance Commissioner - UK could be violating human rights
ODPC concludes second privacy audit of Facebook
ICO faces raft of appeals over fines and other enforcement actions

Articles

The changing face of cloud computing and data protection - Monika Kuschewsky, Van Bael & Bellis
BCRs under the Regulation - reasons to be cheerful? - Sian Rudgard, Field Fisher Waterhouse LLP
Foreign account tax compliance provisions, data protection and other ‘local law’ issues - Richard Jones & David Moldenhauer, Clifford Chance
Midata and the unstoppable rise of the personal data services provider - Kate Brimsted, Herbert Smith Feehills LLP

September 2012
Volume 12, Issue 8

News Items

EU privacy chief erupts over asylum seekers database
Compliance can be suspended for data put ‘beyond use’
Body fined £250,000 for failing to have data processor contract
Massive Apple data breach
New data protection law imminent in Singapore
Campaign group calls for schools to come clean about CCTV in toilets
Injunction sought over topless Kate photos

Articles

Guidance on exemptions to cookie consent - Simon Elliott, SNR Denton
Monetary penalties - lessons learned - Peter Given, Bond Pearce LLP
Should what happens in Vegas stay in Vegas? - Penelope Jarvis, Eversheds
Data Protection in Brazil - Evy Cynthia Marques, Santos Neto & Montgomery

July / August 2012
Volume 12, Issue 7

News Items

Safe Habor not safe enough, says Working Party
New call for evidence on Regulation
Working Party endorses Binding Corporate Rules for Processors
Leaked document shows revisions to Regulation
Irish and French regulators give new guidance on cloud computing
Annual Report shows massive increase in unsolicited marketing
Citigroup gets BCR approval

Articles

Challenging times ahead for data processors - Bridget Treacy, Hunton & Williams
Clarifying the scope of personal data - Damien Welfare, Cornerstone Barristers
Article 29 Working Party faces up to online and mobile services - Mark Watts and Sacha Wilson, Bristows
Malaysia’s data protection law imminent by Carolyn Bigg, Simmons & Simmons
Book Review - 'Data Protection & Privacy - jurisdictional comparisons' - Stephanie Pritchett, Pritchetts

June 2012
Volume 12, Issue 6

News Items

No consent for cookies needed here, say EU DPAs
Swiss ruling means Google can stay
Proper safeguards needed over smart meters, warns EDPS
Web host claims ICO confusion led to costs to SMEs
Facebook ignores users over data use policy
Regulator to investigate civil service data breach claim
Daily penalty payment for Germany

Articles

Data protection provisions for outsourcing contracts - Richard Jones, Clifford Chance
What is a ‘relevant filing system’ and, more importantly, why is it relevant? - Suzanne Rodway, NBC Universal
Data Protection Impact Assessments: look before you leap - Stephanie Pritchett, Pritchetts

April/May 2012
Volume 12, Issue 5

News Items

Working Party chimes in on Regulation's shortcomings
Explosion in requirement for DPOs
ICO defends fining policy and indicates what fines lie ahead
London Marathon runners details shared
Personal data definition adjusted in UK
Government revives plan for greater data sharing between agencies

Articles

The new Data Protection Regulation - further steps on the road towards adoption - Henry de Waele, Radboud University Nijmegen
Obtaining consent for cookies - Eduardo Ustaran, Field Fisher Waterhouse
The draft Data Protection Regulation - a new era for data processors? - Emma Burnett and Julia Graham, CMS Cameron McKenna LLP
The new rules on using children’s data - Anita Bapat, Hunton & Williams
Book review - ‘Privacy Impact Assessment’, by David Wright and Paul de Hert - Stephanie Pritchett, Pritchetts
Developments in Data Protection and Privacy Laws in the Middle East - Fiona Tyas,Simmons & Simmons

March 2012
Volume 12, Issue 4

News Items

Obama Bill proposes privacy by ‘voluntary agreement’
UK wants in on PNR data sharing
Clarification of right to be forgotten
25 members of ubiquitous hacking group arrested
Spain makes referral to ECJ on right to be forgotten
Report of Dutch DPA highlights failings

Articles

Implications of replacing the Data Protection Directive with a Regulation - a legal perspective - Henri de Waele, Radboud University Nijmegan
New EU data protection sanctions - vital shock treatment or another fine mess? - Kate Brimsted, Herbert Smith LLP
Data Protection reform - the French perspective - Thierry Bernard, Quadrige
The draft Regulation - does every cloud have a silver lining? - Alexander Brown & Clare Adam, Simmons & Simmons LLP
Hungary’s new data protection regime - is it full circle for Hungary? - Paul Byfield, EBRD
Compulsory breach notification rules - benefit or burden? - Nick Graham & Majdi Silk, SNR Denton
An audience with Viviane Reding - Rezzan Huseyin, PDP Journals

January/February 2012
Volume 12, Issue 3

News Items

Draft Regulation on track but Directorates may scupper plan
OBA industry’s self-regulation plan ‘not adequate’, says Working Party
UK regulator produces practical guidance on cookies
Draft data protection and law enforcement Directive leaked
Sat nav company cleared

Articles

Formalising the role of the DPO - the practical consequences - Bridget Treacy, Hunton & Williams
Extra territoriality and international transfers under the draft Regulation - Richard Jones, Clifford Chance
The right to be forgotten - the fog finally lifts - Monika Kuschewsky, Van Bael & Bellis
Defending a Notice of Intent - Liz Fitzsimons, Eversheds LLP
ECJ rules on the limits to national variances - Monika Kuschewsky, Van Bael & Bellis

December 2011
Volume 12, Issue 2

News Items

Draft of EU Regulation leaked,changes are all-encompassing
Three new fines from UK regulator, one the largest ever
US company obtains approval for BCRs
First Nordic-led BCR gets authorised
UK body left data on 7,200 citizens in skip

Articles

From consensual to compulsory - what to expect when the ICO comes knocking - Hazel Grant, Helen Rose and Amy Cullen, Bristows
ICO’s briefing on the future of data protection in EU - Anita Bapat, Hunton & Williams
Data Protection in the gaming industry - Part 2 - James Brunger, Amy Cullen and Scott Allardyce, Bristows
Security breach notification - the German experience - Dr Jörg Hladjk, Hunton & Williams
The rising in the East - Carolyn Bigg, Simmons & Simmons

October/November 2011
Volume 12, Issue 1

News Items

Publication of new law delayed
Barnes & Noble obtain Borders customer list
US Congress examines impact of EU privacy laws
UK Cabinet Office publishes transparency review

Articles

Commissioner's power to fine - eighteen months on - Francis Aldhouse, Bird & Bird
Commissioner's evidence to the House of Commons - Analysis - Bridget Treacy and Anita Bapat, Hunton & Williams
Who, me gov? How to ensure government transparency does not cost citizens their privacy - Kate Brimsted, Herbert Smith
Data Protection in the gaming industry - James Brunger, Amy Cullen and Scott Allardyce, Bristows

September 2011
Volume 11, Issue 8

News Items

Online behavioural advertising framework lambasted
FT pulls app following customer data dispute
ICO publish first private sector audits
Belgium simplifies BCRs procedure

Articles

Clarifying consent - Eduardo Ustaran & Victoria Hordern, Field Fisher Waterhouse
Privacy backlash - freedom campaigners' fantasy or imminent peril for business? - Peter Carey, Charles Russell
One hack of a scandal - Nick Graham, SNR Denton UK LLP
Don't shoot the (Blackberry) messenger - the technology of riots - Adrian Sim, Bristows

July/August 2011
Volume 11, Issue 7

News Items

EU’s challenge to industry: new standard for cookies by mid 2012
All UK firms to face breach reporting
Avoiding fines - the lowdown
Housing sector should 'wake up' to data protection

Articles

Handling data security breaches - is it time to revisit your procedures? - Kate Brimstead, Herbert Smith LLP
Whistleblowing - avoiding the hot water when others let off steam - Stephanie Pritchett, Pritchetts
Money laundering and data protection - where do we stand? - Richard Jones, Clifford Chance LLP
Geolocation services on smart mobile devices - how to be compliant - Paul Gershlick, Matthew Arnold & Baldwin LLP

June 2011
Volume 11, Issue 6

News Items

Sony hacked to distraction
Supreme Court rules that UK retains citizens’ DNA illegally
Working Party gives strict opinion on geolocation data
Hustinx says Retention Directive is illegal

Articles

New cookie law: overcoming the challenges - Bridget Treacy, Partner, Hunton & Williams
Article 29 Working Party Opinion on Smart Metering - Monika Kuschewsky and Laura De Boel, Van Bael & Bellis
Anti-Bribery Law: reconciling the new Act with data protection - Bridget Treacy, Partner, Hunton & Williams
Is Europe ready to take on a US style security breach notification law? - Anne Wilkes, ACW Privacy Consulting

April/May 2011
Volume 11, Issue 5

News Items

Play.com data breach
Telcos fined
Estate agent convicted
EC to protect children’s data

Articles

Cloud Computing - the data protection issues - David Cullen, William Fry
How do employers protect data from theft by their own employees? - Stephanie Pritchett, Pritchetts
RFID - the current state of play - Monika Kuschewsky and Laura De Boel, Van Bael & Bellis
Book review: 'Cloud Computing - a practical introduction to legal issues' - Mark Watts, Bristows

March 2011
Volume 11, Issue 4

News Items

Israel formally added to 'adequate' list
Council to tighten policy after loss of memory stick
ICO encourages public to secure data online

Articles

Article 29 Working Party clarifies the rules on the applicable data protection law - Monika Kuschewsky, Van Bael & Bellis
The right to be forgotten: can legislation put the data genie back in the bottle? - Kate Brimsted, Herbert Smith
Mandatory breach notifications for telecoms - what to expect and how to prepare? - Martijn ten Bloemendal, Hunton & Williams
What does privacy in the workplace really mean in Europe? Part II - Anne Wilkes, ACW Privacy Consulting Ltd

January/February 2011
Volume 11, Issue 3

News Items

New privacy principles for Scotland
Data security breach at The White House
Cloud computing could provide €763bn to top five EU countries

Articles

A new strategy for reform - the EU Data Protection Directive - Monika Kuschewsky and Laura De Boel, Van Bael & Bellis
Another step closer to a harmonised data protection enforcement regime in Europe? Part 1 - Anne Wilkes, ACW Consulting Ltd
How long should I keep data for? - Stephanie Pritchett, Pritchetts
Privacy and data protection risks for IT programmes - a practitioner’s view - Jacqui Peace, independent Privacy Consultant
Book review: 'The Law Society' - Duncan Lamont, Charles Russell LLP

December 2010
Volume 11, Issue 2

News Items

T-Mobile employee pleads guilty to data breach offence
Internal data breach at PwC
Council discloses personal data on planning department website

Articles

Data Sharing - the ICO Consultation on the new Code of Practice - Nick Graham, SNR Denton
Behavioural Advertising: time to tame the cookie? - Kate Brimsted, Herbert Smith
Survey: Consent to the processing of children’s data across the EU - Nicola Fulford, Bristows

October/November 2010
Volume 11, Issue 1

News Items

European Commission takes UK to Brussels
BT admits part in porn list leak
Website blacklists deviant hotel guests

Articles

Working Party Opinion on principle of accountability – new obligations for data controllers or old wine in new bottles? - Monika Kuschewsky, Van Bael & Bellis
FAQs on the new Model Clauses - do they help? - Rob Corbet, Arthur Cox
Data ownership in social networks - a very personal thing - Robert Bond, Speechly Bircham
Data protection: back to basics - Part 9 - Peter Carey, Charles Russell

September 2010
Volume 10, Issue 8

News Items

Three Undertakings involving data security breaches
Facebook introduces new location-revealing service
Study highlights new ‘way in’ for hackers
Telecoms companies under investigation in Hong Kong

Articles

Does new Working Party Opinion spell end for online behavioural advertising? - Monika Kuschewsky, Van Bael & Bellis
ICO’s personal information online Code of Practice - Helen Rose, Bristows
Highlights from the Information Commissioner’s Annual Report - Cate Haywood, Hunton & Williams
Data protection: back to basics - Part 8 - Peter Carey, Charles Russell
Privacy pips pragmatism - so the end no longer justifies the means - Duncan Lamont, Charles Russell

July/August 2010
Volume 10, Issue 7

News Items

New Opinion on online behavioural advertising
French DPA indicates sensitive data was caught by Wifi
Twitter settles first of its kind case with FTC
Commissioner writes to Unite over data protection registration

Articles

Help! I’m being investigated by the ICO - Stephanie Pritchett, Pritchett's Law
Interview with Jonathan Bamford
Data protection considerations in company liquidation - Julian Gauld, Herbert Smith LLP
Data protection: back to basics - Part 7 - Peter Carey, Charles Russell
Ireland’s moves towards mandatory breach reporting - Colin Rooney, Arthur Cox

June 2010
Volume 10, Issue 6

News Items

Working Party writes to big three search engines
Council signs Undertaking after losing childrens’ data
ID scheme will be first to go
Privacy a key focus in EU’s Digital Agenda

Articles

Making a compelling case for investing in privacy - Kate Brimsted, Herbert Smith LLP
Using privacy impact assessments - Stephanie Pritchett, Pritchett’s Law
Location based services - a review of the regulatory framework - James Brunger, Bristows
Data protection: back to basics - Part 6 - Peter Carey, Charles Russell

April/May 2010
Volume 10, Issue 5

News Items

ICO publishes three year plan
Europe investigates 'tagging'
EDPS wants privacy designed into DP law
FOI guidance imminent
And the award for best data protection goes to...

Articles

Working Party confirms 'controller' and 'processor' distinction - Bridget Treacy, Partner, Hunton & Williams
Data protection: back to basics - Part 5 - Peter Carey, Consultant, Charles Russell
Data subjects rights - are they inadequate? - Liam Curren and Dr Jane Kaye, EnCoRe Project and University of Oxford
Changes to German data protection law - Jörg Hladjk, Associate, Hunton & Williams
Where fines might hit the hardest - James Castro-Edwards, Solicitor, Speechly Bircham LLP

March 2010
Volume 10, Issue 4

News Items

US links data breaches to file sharing
'Internet of things' draws closer
Most trusted privacy measures revealed

Articles

ICO's Guide to Data Protection - easy as ABC? - Suzanne Rodway, Barclays
Rise of biometric data sharing - but who is looking after data subjects' rights? - Nick Graham and Tristan Jonckheer, Denton Wilde Sapte
Data protection: back to basics - Part 4 - Peter Carey, Data Protection Consultant
New controller to processor model clauses - the verdict - Eduardo Ustaran, Field Fisher Waterhouse
Handling access requests - lessons from the Access Rights Index - Thierry Bernard, Quadrige
Privacy cases - has John Terry dropped Mosley's baton? - Mark Watts and Justin Costley, Bristows

January/February 2010
Volume 10, Issue 3

News Items

Mortgage company signs Undertaking
Working Party issues ‘Future of Privacy’ roadmap
Giant database goes live

Articles

Mortgage company signs Undertaking
Working Party issues ‘Future of Privacy’ roadmap
Giant database goes live Articles
Fines for data protection breaches - the new regime - Richard Jones, Clifford Chance LLP
Data protection: back to basics - Part 3 - Peter Carey, Charles Russell
Use of violent warning markers... under attack? - Mark Watts, Bristows
New EU cookie rule - a practical way forward - Eduardo Ustaran, Field Fisher Waterhouse
Under the spotlight: police retention of conviction data - Bridget Treacy and Anthea Terlegas, Hunton & Williams
Data security Part 2 - ten ways to promote data security best practices - Richard Hollis, Orthus

December 2009
Volume 10, Issue 2

News Items

ICO produces new Guide on Data Protection
Expert recommends acting now over cookie law
Queen gets tough on paparazzi in royal row
US sued over failure to specify use of data

Articles

Data protection: back to basics - Part 2 - Peter Carey, Charles Russell
Anonymisation and pseudoanonymisation of personal data - Nick Graham and Sean Crowley, Denton Wilde Sapte
New draft international proposal standards - a welcome proposal - Monika Kuschewsky, Van Bael & Bellis
Data security Part 1 - five factors leading to data compromise - Richard Hollis, Orthus
US online behavioural advertising - the changing landscape - Julie O’Neill, Morrison & Foerster

October/November 2009
Volume 10, Issue 1

News Items

Pharmacy firm's data breach escalating
Italian bullying video case - update
FBI snooping to continue?
CEO penalised for being uncooperative

Articles

Data protection: back to basics - Part 1 - Peter Carey, Charles Russell
Contracting out of data protection responsibilities - Richard Jones, Clifford Chance LLP
Data security issues in the NHS - Jackie Gray, Dickenson Dees LLP
Standard contractual clauses for data transfers outside of the EEA - Rob Corbet and Úna Ní Mhurchú, Arthur Cox
Israel’s data protection reform - Israeli Ministry of Justice "Schoffman" Committee
Book Review, 'Data Protection - A Practical Guide to UK and EU Law' - Bridget Treacy, Hunton & Williams

September 2009
Volume 9, Issue 8

News Items

Smartphone applications track users' locations
Google to address Swiss concerns
IRS brings in the heavies for tax scour
Facebook accepts Canadian privacy recommendations

Articles

Security breach notification in Europe - Kristof Van Quathem, Covington & Burling LLP
Online social networking - keeping up with the reality - Monika Kuschewsky, Van Bael & Bellis
Secondary uses of NHS data - occupational health services - Mark Watts and James Brunger, Bristows
Secure the pearly gates, not the cloud - Alf Pilgrim, Clearswift

July/August 2009

Volume 9, Issue 7

News Items

Power to fine - not until next year
Swiss block UBS data handover
Unmasking of obscene hacking operations
Computer virus frenzy at the NHS

Articles

ICO’s new Code on Privacy Notices - Nick Graham and Simon Elliot, Denton Wilde Sapte
RAND - a report worth reading to the end! - Bridget Treacy, Hunton & Williams
A new Information Commissioner … but still no fines - Grant Campbell, Brodies
Data protection law in Russia - Dan Guildford and Ekaterina Bekker, Dewey & LeBoeuf

June 2009
Volume 9, Issue 6

News Items

BCS launches 'data protection equivalent of Highway Code'
EU sues Sweden
Germany to get Street View despite privacy complaints
Resignation of rail chief after repeated snooping

Articles

Secondary uses of personal data in the NHS - Part 1 - Mark Watts and James Brunger, Bristows
Surveillance at the workplace - how to avoid the pitfalls - Monika Kuschewsky, Van Bael & Bellis
Richard Thomas - the expansive years - Peter Carey, PDP
Privacy & matrimonial self help - Robin Bynoe, Charles Russell

April/May 2009
Volume 9, Issue 5

News Items

Fools rush in to hiding behind DPA, says ICO
19,000 UK credit card details accessible
EU: ‘security capabilities vary vastly’
Stronger penalties for peeping toms

Articles

BSI - a standard approach to preventing security breaches? - Nick Graham and Simon Elliott, Denton Wilde Sapte
A fair processing notice by any other name ..., by Suzanne Rodway, Barclays
US pre-trial discovery - reconciled with European data protection law? - Monika Kuschewsky, Van Bael & Bellis
Dirty work - criminal aspects of bin trawling - Ashley Roughton, Hogarth Chambers, and D’yann Heward-Mills, Linklaters
Spam Asia - Part II - Anju Malik and Lewis Ho, Simmons & Simmons

March 2009
Volume 9, Issue 4

News Items

PC passes force data to friend
New survey says jobs at risk = data at risk
Proper supervision needed for data mining
Actor bedding models suspects unauthorised access

Articles

How far are we protected from ourselves? - Mark Watts, Bristows
Power to fine research research - the results - PDP news team
Navigating the data breach minefield: strategies - Bridget Treacy, Hunton & Williams
Spam Asia - Part 1 - Carolyn Bigg and Damien Bailey, Simmons & Simmons

January/February 2009
Volume 9, Issue 3

News Items

New IC says role is at heart of debates
New NAI Principles just don’t cut it?
Coming to a cab driver near you?
College kids enlisted in data gathering

Articles

Privacy and the workplace - Gabriella Wright, Employment Specialist
Cloud computing - data protection concerns unwrapped - Bridget Treacy, Hunton & Williams and Paula Bruening, Centre for Information Policy Leadership
Data protection law in Dubai - Nick Graham and Michael Loffler, Denton Wilde Sapte

December 2008
Volume 9, Issue 2

News Items

EDPS on patients' rights
The longer arm of Facebook
Disastrous disposal
Candidates to confess

Articles

Controllers vs. processors - useful distinctions, or distracting labels? - Kate Brimsted, Herbert Smith
The dangerous disparities with privacy policies - Ben Taylor, Ernst & Young
Paying the piper, calling the tune - Gabriella Wright, Employment law specialist
Whistleblower hotlines and data protection - Richard Jones, Clifford Chance and Josephine Warren, BBC World News

October/November 2008
Volume 9, Issue 1

News Items

Binding Corporate Rules – mutual recognition
WiFi no longer secure
Orgy goes to Strasbourg
US plough ahead with Sat-Surveillance despite privacy issues

Articles

Dealing with staff data breaches - Gabriella Wright, Employment Specialist
The T5 fiasco - what does it tell us about the future of biometrics and data protection? - Nick Graham and Michael Loffler, Denton Wilde Sapte
How to combat identity theft in the corporate world - an essential guide - Peter Wood First Base Technologies
The Commissioner’s keynote speech - highlights, PDP News Team

September 2008
Volume 8, Issue 8

News Items

Draft 2008 Electronic Communications Regulations
Students subject to scanners
Fingerprinting of passengers inevitable
Unsecured data stick puts Gastronuts kids at risk

Articles

How to win workers’ trust - a guide to applying the core Principles - Employment Specialist, Gabriella Wright
Data Sharing Review - raising the spectre of tougher enforcement in the UK - Bridget Treacy, Partner at Hunton & Williams
Max Mosley triumphs - but are the damages done? - Nicola Russell, Associate at Bristows
The devil and the deep blue sea - US & EU discussions on sharing personal data - Richard Jones, Director of Data Privacy at Clifford Chance

July/August 2008
Volume 8, Issue 7

News Items

ICO serves HMRC and MOD with Enforcement Notices
An Annual Report and a birthday
Data Sharing Review
UK on verge of de facto privacy law?

Articles

e-Discovery and EU privacy laws - Part II
Information security and lessons from HMRC - an overview of the Poynter and IPCC reports
Transferring employee data - a clearer picture?
The changing face of data security law - Part II
Impact of the CSA judgment - more questions than answers?

June 2008
Volume 8, Issue 6

News Items

ICO – new powers to fine
Database to vet dishonest employees
Central database proposed for draft Bill
Banking sector urged to change attitude by FSA
BERR Report released

Articles

The ICO’s new power to fine - the shape of things to come? - Kate Brimsted, Herbert Smith
The changing face of data security law - Stewart Room, Field Fisher Waterhouse
eDiscovery and EU privacy laws - Dan Cooper, Covington & Burling
Safe Harbor, Safe Hands - Mark Watts, Bristows
Book review: Data Protection Law and Practice - Bridget Treacy, Hunton & Williams

April/May 2008
Volume 8, Issue 5

News Items

Government data loss ‘symptomatic of lax standards’
HSBC likely to be fined or loss of 370,000 customers details
BT investigated over Phorm complaints
S.55 DPA custodial sentences “on ice”
Six month time limit set for retaining online search records

Articles

Implications of Ezsias case for subject access: proportionality may apply to searches of data - Gary Brooks, Data Protection Consultant
Industry viewpoint - RFID technology development and data protection - Nigel Clarke, Imation
Is Israeli data protection law “adequate” under Article 25? - Omer Tene, Legal Consultant and Ministry of Justice Committee
Outsourcing - data protection considerations - Annette Orange, McCann FitzGerald

March 2008
Volume 8, Issue 4

News Items

New CCTV code of practice published by ICO
Ban on taking electronic devices outside the workplace
Children’s qualifications online throughout adult life
Government could face £7.5 billion compensation
Solicitor pleads guilty to data protection offence

Articles

Comparing the US and EU approach to employee privacy Miriam Wugmeister and Ann Bevitt, Morrison & Foerster
The ICO gets tough on M&S - Suzanne Rodway, Barclays
Privacy regulation in Australia: current law and proposed changes - Jillian Brewer, Banking and Financial Services Ombudsman
Data retention requirements for communication service providers - Victoria Russell and Joanna Allen, Charles Russell
Less data sharing, more data protection - Ben Winslade, Bristows

January/February 2008
Volume 8, Issue 3

News Items

Justice Committee reports on Commissioner’s powers
Carphone Warehouse issued with ICO Enforcement Notice
British drivers’ details lost in the US
Microsoft’s Big Brother software pending
2008 to be the year of data protection

Articles

Dawn raids, unlimited fines and senior executive accountability - proposed changes to UK data breach laws - Bridget Treacy, Hunton & Williams
Online behavioural advertising guidelines to be issued in the US - Julie O’Neill, Kelley Drye Collier Shannon
Information Commissioner’s new Privacy Impact Assessment Handbook - Louise Townsend, Pinsent Masons
ICO guidance on information sharing - Usha Jagessar, DLA Piper
A look at 2007 from the PDP Editorial Board, and a glimpse of what’s to come in 2008 - PDP Editorial Board Members

December 2007
Volume 8, Issue 2

News Items

25 million affected by ‘deeply disturbing’ HMRC data breach
Online black market for bank details
FCO undertaking after website security failures
Doctors may be fined for losing laptops
ID scheme on rocks?

Articles

Who’s looking at your medical information? - Stephen Hinde, BUPA
Determining ‘personal data’ - a case of believing six impossible things before breakfast? - Kate Brimsted, Herbert Smith
Monitoring staff communications - the latest on privacy rights - Gabriella Wright, employment specialist
Book review, 'Employee Privacy: Guide to US and International Law' - PDP Review Team

October/November 2007
Volume 8, Issue 1

News Items

Newly awarded access to phone records too wide?
German Commissioner criticises Google
Search engines not good practice for recruitment
Blackberry data - ripe for interception?

Articles

Why the Data Protection Act makes good business sense - Suzanne Rodway, Barclays Bank
Israeli data protection law:
constitutional, statutory and regulatory reform - Omer Tene, Ministry of Justice Committee
Current data protection issues for financial institutions - Part 4: the data protection issues that keep the financial services sector awake at night - Bridget Treacy, Hunton & Williams
Ireland - recent developments - Rob Corbet, Arthur Cox

September 2007
Volume 7, Issue 8

News Items

Trojan breach at Monster.com leads to phishing emails
UK launches CCTV code
Microsoft takes lead in online privacy
Bush signs surveillance bill
Consultation on right to consent

Articles

Redefining personal data - can the opinion live up to the hype? - Dan Cooper, Covington & Burling
Current data protection issues for financial institutions - Part 3: data breach – the changing regulatory landscape and its potential impact for financial institutions - Bridget Treacy, Hunton & Williams
IT compliance and IT security - Part 3: How are risks addressed in Europe - Jörg Hladjk, Hunton & Williams
Data protection in corporate transactions - Louise Townsend, Pinsent Masons

July/August 2007
Volume 7, Issue 7

News Items

Art 29 Working Party redefines ‘personal data’
ICO’s Annual Report – executives urged to raise their game
Orange and Littlewoods ‘named and shamed’ by ICO
Consumer privacy issues for outsourced work to India - Privacy problems for Facebook networking phenomenon

Articles

Current data protection issues for financial institutions - Part 2: global businesses and global data flows: how the financial services sector is challenged by global data protection compliance in emerging jurisdictions - Bridget Treacy, Hunton & Williams
Hello! Waves goodbye to 1m+ in celebrity rights legal reversal - Kate Brimsted, Herbert Smith
Record fine for Big Brother in Spain - Victoria Russell and Jose M Saras, Charles Russell

June 2007
Volume 7, Issue 6

News Items

CCTV surveillance is now at extreme proportions
Google - global privacy threat?
Euro countries to share crime data
Bowing to US pressure for passenger data
Big Brother fine confirmed

Articles

Current data protection issues for financial institutions - Part 1: the ‘controller’ v ‘processor’ dilemma - Bridget Treacy, Hunton & Williams
Smith - the importance of file headers - Ashley Roughton, Hogarth Chambers
US privacy developments - Julie O’Neill, Kelley Drye Collier Shannon

April/May 2007
Volume 7, Issue 5

News Items

Damages awarded against email marketer
ICO names and shames
World’s biggest data theft
American Express plans to track consumers
Emails - same as telephone calls for privacy rights

Articles

Durant revisited - will the definition of personal data be changed? - Christine O’Neill, Brodies
Banks put on notice by ICO - Ayesha Bramwell, Shepherd and Wedderburn
Johnson v Medical Defence Union - the final judgment - Ashley Roughton, Hogarth Chambers
IT compliance and IT security - Part 2 - Jörg Hladjk, Hunton & Williams

March 2007
Volume 7, Issue 4

News Items

Bank fined £1m for data security breach
Electronic health data - new regulation
Elle Macpherson privacy breach
ASA upholds complaint over opt-out statement in text message
Bank sues retailer over data loss

Articles

IT compliance and IT security - Part 1: Why is it necessary to comply with legal requirements? - Jörg Hladjk, Hunton & Williams
When disclosing references is not child’s play - Kate Brimsted, Herbert Smith
The secondary use of Council Tax data - Louise Townsend, Pinsent Masons
Data protection developments in Ireland - Rob Corbet, Arthur Cox

January/February 2007
Volume 7, Issue 3

News Items

European Central Bank slammed on data transfers
Paris incensed by sex and medical revelations
Police dubbed ‘absolutely ridiculous’ by Lord Chancellor
10% of workers sacked after drug testing
Irish schools adopt fingerprinting

Articles

International corruption and data protection - Bret Campbell, Cadwalader, Wickersham & Taft
Privacy - the latest issues - Ashley Roughton, Hogarth Chambers
E-Privacy Regulations - the ICO’s revised guidance - Suzanne Rodway, Barclays Bank
US privacy update - Julie O’Neill, Kelley Drye Collier Shannon

December 2006
Volume 7, Issue 2

News Items

UK Commissioner names and shames media companies
Crackdown on private detectives and those who instruct them
The States bugged Diana
More Foxtons complaints - Microsoft brings action under the Electronic Privacy Directive

Articles

Life in surveillance society - new challenges for DPAs and new challenges for business - Bridget Treacy, Hunton & Williams
Is the Data Protection Directive suitable for today’s global economy? - Ayesha Bramwell, Shepherd and Wedderburn
YouTube - the privacy challenges - Stewart Room, Rowe Cohen Solicitors

October / November 2006
Volume 7, Issue 1

News Items

European companies must notify security breaches
Foreign outsourcing to be made easier
Data disappears on one million citizens
Charity databases stolen
US to track negative overseas press
Starbucks loses staff details
Journalists to be prosecuted

Articles

Data security breaches: is Europe heading for US standards of openness? - Kate Brimsted, Herbert Smith
Collecting employee information - Piers Leigh-Pollitt, Osborne Clarke
US privacy law update - Julie O’Neill, Kelley Drye Collier Shannon

September 2006
Volume 6, Issue 8

News Items

CIA unlawfully probes EU citizens banking transactions
UK government to press ahead with data sharing
AOL publishes personal searches
NatWest - inadequate data disposal
AT&T security breach

Articles

The risks of WiFi: Part II - Robin Bynoe, Charles Russell
The role of the data sub-processor - Ayesha Bramwell, Shepherd+ Wedderburn
Data protection and TUPE 2006: what is the state of the law in the UK? - Gabriella Wright

July/August 2006
Volume 6, Issue 7

News Items

Website operator issued with enforcement proceedings
UK to impose prison sentences for data misuse
Spam up in Ireland
DVLA data sales to cease

Articles

The risks of WiFi: Part I - Robin Bynoe, Charles Russell
Transferring customer data after the Green Thumb case - Jimmy Desai, Tarlo Lyons
The costs of non-compliance with data protection law - Louise Townsend & Victoria Southern, Pinsent Masons
The ICO's Annual Report - PDP Team

June 2006
Volume 6, Issue 6

News Items

United States agreement on passenger data overturned
Commissioner pushes for prison sentence for data crime
Privacy case settles for $1.6 million

Articles

Subject access and third party rights - Louise Townsend, Pinsent Masons
Privacy law in Turkey - Mehtap Yoldirim, Cacmak Avukatlik Burosu
Passenger Name Records: the ECJ decision - Hazel Grant, Bird & Bird
US privacy law update - Julie O’Neill, Kelley Drye Collier Shannon

April/May 2006
Volume 6, Issue 5

News Items

Medical data and information on children - key future issues
Johnson - failure to get compensation at trial
Euro citizens must be more careful with data
Guidance on sale of customer databases
Merrill Lynch fined for failure to produce emails

Articles

Are Binding Corporate Rules Ready for 'Prime Time - Dr Mark Watts, Bristows
Access to Personal Information held by a Public Authority Part II - Andrew Sharpe, Charles Russell
Marketing Part IV - Rob Sumroy and Matthew Price, Slaughter and May
Interview with Philippe Renaudière, Head of Data Protection at the European Commission

March 2006
Volume 6, Issue 4

News Items

Durant alleges human rights breach
Gordon Brown hails biometric world
New electoral registration system
Conviction for unlawfully obtaining information
Exchange of EU law enforcement data

Articles

Workers' Subject Access requests - Gabriella Wright, Consultant
Marketing, Part III - Rob Sumroy and Richard J Smith, Slaughter and May
Legitimising Foreign Outsourcing - Sarah Ahmad, Elizabeth Walton and Jonathan Kirsop, Allen & Overy

January/February 2006
Volume 6, Issue 3

News Items

Call for stricter approach to foreign data transfers
De Vere hotel in data blunder
Rich lists pose data risks
IC guidance on employee references
Solicitor's private detective fined
Delay to ID cards
Deaths blamed on data laws

Articles

Access to Personal Information held by a Public Authority Part I - Andrew Sharpe, Charles Russell
Marketing Part II, Data Protection and Direct Marketing - Rob Sumroy, Slaughter and May
Data Retention - Ayesha Bramwell, Shepherd & Wedderburn

December 2005
Volume 6, Issue 2

News Items

Commissioner seeks new and wider powers with telecomms priority
Durant refused leave to appeal
Motorists' information for sale
Commissioner to push data protection audits
Banks to share loans data
CSA demands council tax data
Information Commissioner's Office issues'good practice' notes

Articles

Fair Collection Notices Slim Down - Eduardo Ustaran, Field Fisher Waterhouse
Marketing Part I, Data Protection and Direct Marketing - Rob Sumroy, Slaughter and May
Irish Law - Some Recent Changes - Rob Corbet, Arthur Cox Dublin
Interview with the Australian Privacy Commissioner, Karen Curtis - PDP Team

October/November 2005
Volume 6, Issue 1

News Items

Durant case in breach of European Directive
Johnson v MDU trial imminent
Smith takes case to European Court
Tesco accelerates data harvesting
Banks - outsourcing concerns
Update to DP Directive delayed

Articles

Medical data and privacy, Martin Soames and Usha Jagessar, DLA Piper
Data protection in the insurance industry Part V, Bridget Treacy, Barlow Lyde & Gilbert
Indian law - a semblance of data privacy, Salman Waris, Fox Mandal
Manual data exemption - 2007 is looming, Vinod Bange and Mark Hucks, Addleshaw Goddard

Contents
Volume 5, Issue 8

September 2005

News Items

Recruitment agency fines £2,000 for non-registration
UK's growing debt mountain blamed on poor data compliance
Accountants in Commissioner’s sights
Omission takes action against Austria and Germany
Electoral register should be 'opt-in'
Estate agents in data breaches
Online casino convicted of spamming

Articles

Is Durant compatible with Linqvist? Stewart Room, Rowe Cohen
Data protection in the insurance industry Part IV, Bridget Treacy, Barlow Lyde & Gilbert
Database right falls at the first! Angus Murray and Piers Strickland, Charles Russell
Interview with the Northern Ireland Commissioner, Data Protection Team
US Privacy Update, Julie O’Neill, Collier Shannon Scott PLLC

Contents
Volume 5, Issue 7

July/August 2005

News Items

Employment Code released
Commissioner slams identity card register proposals
NCC calls for more rigorous DP law and enforcement
Latest data breach - Mastercard
UK health records - plans for centralised database
India outsourcing security concerns
Consumer credit crises - banks seek amendment to DPA

Articles

The New Employment Practices Code - Piers Leigh-Pollitt, Osborne Clarke
DP in the Insurance Industry Part III - Bridget Treacy, Barlow Lyde Gilbert
The Legality of Recording Telephone Conversations - Jessica Hendrie-Liano and Paul Manwaring, Beachcroft Wansbroughs
US Privacy Update - Julie O'Neill, Collier Shannon Scott PLLC

Contents
Volume 5, Issue 6

June 2005

News Items

Commissioner to target inadequate privacy notices
Zeta-Jones - privacy breach confirmed by Court of Appeal
Loyalty card regulation
Conditional discharge for selling celebrity data
Calls to regulate transfer of music data over the Internet
Using RFID to track prisoners
France rules on employer's use of biometric data
Communications data retention

Articles

DP in the Insurance Industry Part II - Bridget Treacy, Barlow Lyde Gilbert
The Re-use of Public Sector Information - Anna-Marie Harty and Christopher Rees, Herbert Smith
The European DP Supervisor's First Year - Rosemary Jay, Pinsent Masons
All's Fair in Love, War and Celebrity Exclusives - Kate Brimsted, Herbert Smith

Contents
Volume 5, Issue 5

April/May 2005

News Items

Political cold-calling unlawful
Video surveillance in the home
UK directors seek anonymity as protection from extremists
Spy mannequins
Irish spam
Binding corporate rules - checklist for applications
Citibank up to its old tricks

Articles

DP in the Insurance Industry Part I - Bridget Treacy, Barlow Lyde & Gilbert
Privacy Best for Elizabeth Jagger - Marcus Turle, Field Fisher Waterhouse
Recent Developments in Data Security Law in US - Lynne Barr & Jacqueline Klosek, Goodwin Procter LLP
Blackstones' Guide to the FOI Act 2000, book review - Stewart Room, Rowe Cohen
US Privacy Update - Julie O'Neill, Collier Shannon Scott PLLC

Contents
Volume 5, Issue 4

March 2005

News Items

Lloyds' case considers meaning of "data" within DPA 1998
Is political cold-calling lawful?
RFID extended to students
OIC to keep notification receipts
New credit card guidelines
EU working party reports on Member States' notification regimes

Articles

Binding Corporate Rules - making it happen - Eduardo Ustaran, Field Fisher Waterhouse
"Once processed, always processed" - Principle Explained - Ashley Roughton, Hogarth Chambers
Regulated Industries - Requests for Information - Sally Jones, Hammonds
Smith v Lloyds TSB Bank plc Case Report
US Privacy Update - Julie O'Neill, Collier Shannon Scott PLLC

Contents
Volume 5, Issue 3

January/February 2005

News Items

EC approves "model contract" for data exports
EU committed to beefing up enforcement of data protection
ASA upholds email complaint
Italian telephone directories
Health Minister promotes NHS database
Tesco boycott over "spychip" privacy concerns
New database for Euro crime

Articles

Alternative Standard Clauses for International Data Transfers - Eduardo Ustaran, Field Fisher Waterhouse
Implementing Codes of Conduct - the Novartis Case - Eva Wong, Coudert Brothers
DP Implications of Data Rooms Pt II - Jessica Hendrie-Liano and Emma Bate, Beachcroft Wansbroughs
US Privacy Update - Julie O'Neill, Collier Shannon Scott PLLC

Contents
Volume 5, Issue 2

December 2004

News Items

Johnson accesses documents under Civil Procedure Rules
ECHR rules covert recording of conversations by police unlawful
Spammer jailed for 9 years
Durant to make FOI request for FSA files
Data breach by Cahoot and Morgan
Queen's speech

Articles

DP Compliance for HR directors Part IV - Piers Leigh-Pollitt, Osborne Clarke
Binding Corporate Rules - making them work - Eduardo Ustaran, Field Fisher Waterhouse
DP Implications of Data Rooms - Jessica Hendrie-Liano and Emma Bate, Beachcroft Wansbroughs
Durant and FOI - Gabriella Wright and Nick Boyd, Charles Russell
US Privacy Update - Julie O'Neill, Collier Shannon Scott PLLC

Contents
Volume 5, Issue 1

October/November 2004

News Items

"Surveillance society" looms
New French DP law
Guantanamo detainee's family kept in dark
Spam best practice rules
Saudi Arabia bans camera phones

Articles

Data protection for HR directors Part III - Piers Leigh-Pollitt
Email marketing Regulation in Europe - Eduardo Ustaran
French decision on spy software - Eva Wong
Trade union challenge to outsourcing - Gary Brooks
US privacy law update - Cindy Burnes

Contents
Volume 4, Issue 8

September 2004

News Items

EU investigates UK data laws
Offshore outsourcing attacked by unions
Bichard report - DPA blameless
FOI guidance
Mexicans use chips to foil kidnappers

Articles

Data protection for charities Part V - Sasha Foreman
Data protection for HR directors Part II - Piers Leigh-Pollitt
Developments in privacy law - Alexandra Wenderoth

Contents
Volume 4, Issue 7

July/August 2004

News Items

EU investigates UK data laws
Fines for scam calls and texts
Sebastian Coe - privacy confusion
Icelandic DNA project unconstitutional
Spy in your email

Articles

Data protection for charities Part IV - >Sasha Foreman
Data protection for HR directors Part I - Piers Leigh-Pollitt
Subject access requests post-Durant - Gabriella Wright
Privacy - positive aspects - Eduardo Ustaran
US privacy update - Cindy Burnes

Contents
Volume 4, Issue 6

June 2004

News Items

Naomi Campbell wins privacy case
TPS rules extended to business
Identity cards - draft Bill
E-privacy - Commission acts against Member States

Articles

Direct marketing/host mailing - Louise Howe
Data protection for charities Part III - Sasha Foreman
"Data Protection Strategy" - book review - Kate Brimsted
"Data Protection - Practical Guide" - book review - Marcus Turle
Google mail - privacy implications - Cindy Burnes

Contents
Volume 4, Issue 5

April/May 2004

News Items

Harsh new email rules shock marketers
Medical research threatened by data protection
Working Party considers use of genetic data
Biggest data leak ever
Commissioner outlines corporate plan

Articles

DP and marketing - global organisations - Alison Fortescue
Data protection for charities Part II - Sasha Foreman
Email marketing - new rules - PDP Team
RFID technology and data protection - Eduardo Ustaran

Contents
Volume 4, Issue 4

March 2004

News Items

Durant causes rethink of DP law
German Commissioner approves binding corporate rules
Identity cards - impact assessment demanded
UK fines US company for sending spam

Articles

Subject access requests - Kate Brimsted
Data protection for charities Part I - Sasha Foreman
Employment Code - workers' health - Neisha Glynternick
Data sharing in the public sector - Jessica Hendrie-Liano and Anne Crofts

Contents
Volume 4, Issue 3

January/February 2004

News Items

Durant - court dramatically restricts subject access right
Employment health data code published
Guernsey safe for data exports
DPA blamed for Soham deaths
Visitors to the US - fingerprints and photographs

Articles

Websites and data protection - the Lindqvist case - Liz Brownsdon
Ireland - the new data protection law - Rob Corbett and Professor Robert Clark
Privacy Cases 2003 - Monica Bhogal
The US CAN-SPAM Act 2003 - Cindy Burnes

Contents
Volume 4, Issue 2

December 2003

News Items

New email marketing rules - Commissioner publishes guidance
Zeta-Jones gets £14,600 compensation
Marks and Spencer adopts RFID technology
Diana car crash privacy trial
Carphone Warehouse - adverse ruling

Articles

Privacy & Electronic Communications - Eduardo Ustaran
Solicitors’ firms - data controllers or data processors? - Sue Cullen
Freedom of Information in Practice - Part IV - Cinzia Biondi
The use of photographs for marketing or advertising purposes - Elizabeth Brownsdon

Contents
Volume 4, Issue 1

October/November 2003

News Items

New email marketing laws
Blunkett publishes new snoopers code
FTSE 100 companies - data compliance poor
Nottingham - data protection prosecution
Marketing email breached ASA code

Articles

The 2003 Privacy Regulations - Advice for businesses in the interim period and beyond - Jessica Hendrie-Liano
How the CAP Code regulates marketing by email - Louise Townsend
Freedom of Information in Practice - Part III - Cinzia Biondi
Communications data - access and retention – Vanessa Barnett

Contents
Volume 3, Issue 8

September 2003

News Items

Electoral register rules lawful - 192.com fails to overturn law
Commissioner to simplify data protection law
Archer uses DPA for revenge
Constitutional Affairs replaces Lord Chancellor
MP calls for debate on RFID
Equal pay questionnaires - how employers should respond
New Irish data protection law

Articles

Criminal records and data retention - a guide for employers – - Andrew Sharpe & Gabriella Wright
Destination India - Eduardo Ustaran
Freedom of Information in Practice - Part II - Cinzia Biondi
The Commissioner’s Annual Report - Privacy & Data Protection Team

Contents
Volume 3, Issue 7

July/August 2003

News Items

Intra-company global data transfers to be allowed by the EU
MP's demand privacy law for the UK
Notification scammers making millions
New Nokia phone may breach data protection law
Microsoft targets spam
Canadian airline cookies breach law

Articles

Data Protection Compliance: Making a Virtue out of Necessity - Kate Brimstead of Herbert Smith
The Topless Temptation: Can Editors resist destroying Self-regulation? - Grietje Baars of Bird & Bird
Freedom of Information in Practice: Part I - Cinzia Biondi of Wragge & Co
Subject Access and Third Party Information: The Duty of Confidentiality - Peter Carey of Privacy & Data Protection

Contents
Volume 3, Issue 6

June 2003

News Items

EU Data Protection Law on track - but better enforcement needed
Citibank - breach of data protection law?
Websites still failing to comply - research
Campaign against transfers of passenger data to the US

Articles

The Offence in Section 55 DPA: Unlawful Obtaining of Personal Data - Catrin Evans of 1 Brick Court Chambers
Data Protection and RFID Systems - Eduardo Ustaran of Berwin Leighton Paisner
Disclosures under the Proceeds of Crime Act 2002 - Andrew Sharpe of Charles Russell
Update on US Privacy Law - Cynthia Burnes of Privacy & Data Protection

Contents
Volume 3, Issue 5

April/May 2003

News Items

New Data Protection Laws for Email Marketing
Zeta-Jones wins action against Hello!
US citizens want EU-style data protection law
EU airline passenger records to be made available to US

Articles

The New Data Protection Regulations: A comparison with the Directive - Eduardo Ustaran of Berwin Leighton Paisner
Grasping at Nettles: An analysis of the Douglas v Hello! Case - Grietje Baars of Bird & Bird
The Data Retention Code: Will CSP's jump or will they be pushed? - Andrew Sharpe of Charles Russell

Contents
Volume 3, Issue 4

March 2003

News Items

CCTV images breach man's right to privacy
TUC criticises Commissioner for delay to Employment Codes
Microsoft's Net.Passport radically altered for EU compliance
Lord Archer makes subject access request
£15,000 fine for text message spamming

Articles

Using Telecoms Data for Marketing - Eduardo Ustaran of Berwin Leighton Paisner
Data Protection for Children's Websites - Wendy McAuliffe of Habbo Limited
Customer Databases: Collection, Management & Use - Sarah Gwyndaf-Roberts of Wacks Caller
Argentina: Safe for Data Exports - Maria Veronica Perez Asinari of the University of Namur
US Privacy: Latest Developments - Cindy Burnes

Contents
Volume 3, Issue 3

January/February 2003

News Items

Privacy Ombudsman to replace Press Complaints Commission
Zeta-Jones action faces possible strike-out
AOL wins damages for email spam
Further delays to employment codes

Articles

New Subject Access Rules - Daniel Pavin of Taylor Wessing
The Problem with Privacy: A Modest Proposal - Lilian Edwards of Edinburgh University
Trans-border flows of Employment Data - Robert Bond of Faegre Benson Hobson Audley LLP
Privacy 2002: A Review of UK Case Law - Grietje Baars of Bird & Bird

Contents
Volume 3, Issue 2

December 2002

News Items

Naomi Campbell takes Mirror to the Highest Court
US pleads for softer EU data protection laws
Government keen on curbing subject access right

Articles

New Subject Access Rules - Daniel Pavin of Taylor Wessing
The Problem with Privacy: A Modest Proposal - Lilian Edwards of Edinburgh University
Trans-border flows of Employment Data - Robert Bond of Faegre Benson Hobson Audley LLP
Privacy 2002: A Review of UK Case Law - Grietje Baars of Bird & Bird

Contents
Volume 3, Issue 1

October/November 2002

News Items

Commissioner announces new enforcement strategy
Data protection claim scuppered by prior proceedings
£50,000 fine for spamming by text message
UK - worsening record on personal privacy
French Internet Decision
Unlawful data sharing by Local Authorities
Robertson commences new action against local authority
UK Government responds to European Commission on Data Protection Directive

Articles

Using the Data Protection Act as a weapon in Litigation - Daniel Pavin of Taylor Wessing
Anti-Terrorism - passing information to the authorities - Andrew Sharpe of Charles Russell
The Employment Practices Data Protection Code: Part 3 - Monitoring at Work - Piers Leigh-Pollitt of Osborne Clarke
Case Report
R v IPSWICH CROWN COURT, EX PARTE NTL GROUP LTD (2002)

September 2002
Volume 2, Issue 8

News Items

New Euro data retention rules imminent
Employee survey - dramatic increase in access requests likely
New Japanese spamming law
CCTV evidence inadmissible
Government obfuscation revealed by subject access
Commissioner's Latest Annual Report
Vodafone on location
New Information Commissioner
New interception regulations
UK Shops breach of security
Facial recognition for customer satisfaction?
New Guidance from the Information Commissioner
Monitoring code still not finalised
Thought Police
Commissioners' Annual Conference
Unlawful eavesdropping

Articles

What's the 'Big Deal' with Data Protection? - Cinzia Biondi of Wragge & Co
Privacy duties for the Public Sector - Eduardo Ustaran of Berwin Leighton Paisner
"Sir/Miss, what mark did I get?": Access to education records under the Data Protection Act 1998 - Andrew Sharpe of Charles Russell
Microsoft - Passport to nowhere? – Cindy Burnes of Privacy & Data Protection

July/August 2002
Volume 2, Issue 7

News Items

Europe nears agreement on new Data Protection laws
Most data transfers to the US are unlawful
Inland Revenue Data Blunder
Local Authority's tax collection unlawful
Angus Deayton - centre of privacy debate
Commissioner Swamped by Number of Complaints
Data Scam Prosecution
Government U-Turn on Snooping Regulations
New law to deter document shredding
New Data Protection Amendment Bill
Commission announces review of DP law
Compulsory Identity Cards imminent

Articles

European facelift for E-communications Data Privacy - Rowan Middleton and Dominic Callaghan of Herbert Smith
How to draft data protection opt-out / opt-in clauses for websites - The Privacy & Data Protection Team
The use of Cookies in Europe - a recipe for disaster?
To disclose or not to disclose - when should personal data be handed over to local authorities or law enforcement bodies? Claire Grainger of Pannone & Partners
The opt-in / opt-out debate in the United States - Cindy Burnes of Privacy & Data Protection

June 2002
Volume 2, Issue 6

News Items

Political furore over new email monitoring code
New regulations on electoral role data spell doom for marketers
Vodafone fails to keep control of data processor
Commission report on Safe Harbor
European Parliament votes on new Data Protection Directive
Swedish email law - new
New rules on anonymised data
CCTV scam
Hong Kong monitoring law
Canadian opt-out policies unlawful
BT denies encouraging infidelity

Articles

Email policies - why prevention is better than cure - Dai Davis and Kate Smith of Nabarro Nathanson
The way the Cookie crumbles - Andrew Sharpe of Charles Russell
Data Protection Act Compensation - Just a Cause Célèbre? - Kate Brimsted of Herbert Smith
Email and Internet usage policies in the United States - Cindy Burnes of Privacy & Data Protection

April/May 2002
Volume 2, Issue 5

News Items

Naomi Campbell wins damages in landmark privacy ruling
Employers fear ramifications of French email decision
Employers Code - Part 1 published
Argentina's new data protection law
Italian privacy
Japanese spam
New rules for Information Tribunal
Jail sentence for French cookie use
Al Feyed wins in Tribunal
The Big Brother Awards

Articles

The Sale and Transfer of Customer Databases - Jason Chess and Jamie Radford of Wiggin & Co
Employers' Duty of Disclosure following a Subject Access Request - Nick Hurley of Charles Russell
The Effect of the E-Commerce Regulations on Email Direct Marketing - Eduardo Ustaran of Berwin Leighton Paisner
Anti-Terrorism & Data Retention - The PDP Team
Privacy in the United States - Cindy Burnes

March 2002
Volume 2, Issue 4

News Items

Website investigation shocks companies into compliance
Injunction granted to prevent publication of brothel photographs
A new data protection commissioner for Europe
EU agrees telecoms package
Government published results of data protection consultation

Articles

A Taste of European Spam Regulation - Rowan Middleton of Herbert Smith
Personal Data as Currency - Jo Sanders of Olswang
Data Processors: Model Contracts for Third Country Transfers
The United States Patriot Act - The P&DP Team
US Privacy Update - Cindy Burnes

January/February 2002
Volume 2, Issue 3

News Items

Data Withholding - endorsed by Court of Appeal
Directors prosecuted for breaching data protection law
Canada approved for data transfers
Information Commissioner to resign
Spamming by Sainsbury's
Commissioner to target websites
Commissioner launches 'guide to data protection auditing'

Articles

Cracking the Code - Ian Bourne, Strategic Policy Manager at the Office of the Information Commissioner, analyses the preparation of the code for employers
The new Data Protection Directive - Eduardo Ustaran of Berwin Leighton Paisner examines current developments in the the life of the draft directive
The Right to Privacy - Peter Grundberg of Wilmer Cutler and Pickering analyses recent cases of importance to English privacy law
Case Report
Regina (Robertson) v Wakefield Metropolitan District Council, 2001 - the electoral register case

December 2001
Volume 2, Issue 2

News Items

European Parliament votes to ban the use of Cookies
Electoral register - sale of data illegal
Continued uncertainty over financial services data exports
Ryanair breaches data protection law
P3P - adequate privacy protection?
Delays to Information Act implementation

Articles

Data Protection Act: Enforcement and Sanctions - Rowan Middleton & Christopher Rees of Herbert Smith
Websites: New guidance from the Information Commissioner - Part II of the article by Hazel Grant and Elizabeth Brownsdon of Bird & Bird
The Ultimate Guide to the Data Protection Act 1998-Part V - the fifth in our occasional series of articles looks at the nature and effect of the First Data Protection Principle
ISP's: Data controllers or data processors? - Eduardo Ustaran of Berwin Leighton Paisner
Data retention - Laura Gordon of Boyds examines this controversial issue in the wake of September 11th.
Book Review: Blackstones' Guide to the Freedom of Information Act 2000 - John Wadham, Jonathan Griffiths & Bethan Rigby

October/November 2001
Volume 2, Issue 1