Big Fish v. Small Fish - Bargaining Position as between Controller and Processor

The European Data Protection Board is consulting on its Guidelines on the concepts of controller…


Artificial Intelligence and identifying Controllers and Processors - 2021 may bring further clarity

The ICO has just published new guidance on Artificial Intelligence (AI). I wrote a detailed blog…


The Fall of the Privacy Shield – What next? The ICO and the EDPB have different approaches

The decision of the European Court of Justice in Case C-311/18 – Data Protection Commissioner v…


The End of the Brexit Transition Period - Will we get an Adequacy Decision?

The European Commission has issued a communication to all member states about the changes they can…


Workplace Testing for Covid-19 - A joint HR and Data Protection Perspective

Kate Grimley Evans and Caroline Banwell of Harmony HR Solutions have collaborated to provide a…


Apple and Google joint initiative on COVID-19 contact tracing technology

The Information Commissioner has published her official Opinion on the Contact Tracing Framework…


Morrisons wins its Supreme Court Case

In a judgement issued on 1st April 2020, the Supreme Court held that Morrisons (i.e WM Morrison…


Coronavirus update emails - What is the law?

My husband recently commented on what he described as 'huge quantities of Corona spam' arriving in…


Cathay Pacific Airlines Data Breach - 12 lessons

The monetary penalty notice issued by the Information Commissioner's Office identified 12 failings…


ICO publishes Draft Guidance on the AI Auditing Framework

This draft guidance relating to applications of artificial intelligence has recently been published…