Dans un monde connecté, les données à caractère personnel font le tour du monde sans aucun effort, et sans même que vous le sachiez. Il suffit de penser aux applications "cloud" que vous utilisez au sein de votre entreprise
In the new Commission Implementing Regulation 2020/1209 of 13 August 2020, the Commission makes the detention of an EORI number a mandatory prerequisite for the filing, modification or renewal of any application for action in the European Union.
Armed with useful flowcharts to help organisations determine their role, the European Data Protection Board (EDPB) has published new guidelines on the concepts of "controller", "processor" and "joint controller".
As part of the second European Payment Services Directive (i.e. Directive (EU) 2015/2366 of 25 November 2015 on payment services in the internal market) (PSD2), which entered into force in 2019 and replaced the Payment Services Directive (PSD), new rules have been developed to provide additional protection for customers
Ongeveer een jaar geleden schreven we op onze blogpagina al een bijdrage over een uitspraak van het Italiaanse Hof van Cassatie, dat had geoordeeld dat het “recht op inzage” onder GDPR ook van toepassing is op interne verslagen. Enkele dagen geleden werd een vergelijkbare uitspraak van de Rechtbank Midden-Nederland gepubliceerd, waarin bevestigd wordt dat hetzelfde “recht op inzage” evengoed geldt voor persoonsgegevens die in (zelfs interne) e-mails zitten.
When drafting a privacy policy or privacy statement, there is one golden rule: describe what you actually do. Transparency is key!
The Court of Justice declared the EU-US Privacy Shield unlawful in its judgement of 16 July 2020. According to the Court, the Privacy Shield does not provide sufficient guarantees that the transfer of personal data to the US takes place in accordance with the EU Data Protection Regulation (GDPR).
AI brings a myriad of opportunities to solve complex problems and improve productivity across all sectors of the economy. However, the successful implementation of AI comes with risks and challenges. One issue which needs to be carefully considered by any organisation seeking to adopt AI is product liability.
This week’s topic: Data Subject Rights
In several recent decisions, the Litigation Chamber of the Belgian Data Protection Authority (“DPA”) provided guidance on how to deal with data subject rights under the GDPR.
With the COVID-19 crisis and the rise of teleworking, certain practices have evolved as the use of electronic signatures, which may soon become the rule rather than the exception.
