Data Protection Commission Ireland’s Post

The European Data Protection Board recently clarified the one-stop-shop test and in particular, the notion of “main establishment” under GDPR. This is relevant to businesses engaged in cross border activities within the European Union or looking to establish in a Member State. We examine the scope and impact of the EDPB’s opinion and whether the rationale for their position stands up to scrutiny. #MHCLaw #TechnologyLaw #LegalUpdate #GDPR

Fairness in the processing of personal data should create a balance between the controller and the data subject. 🤔 In practice, this can be quite challenging! 👇 The EU General Data Protection Regulation (#GDPR) sets out some key principles for the processing of personal data. These include that such data may only be processed fairly. 👉 Some data controllers may be surprised at the consequences this seemingly inconspicuous obligation has in data protection practice. 👇 #DataProtection #Compliance #activeMind

Adopting a proactive approach to information governance is essential for data minimization. By understanding the purpose of collection and embracing privacy by design principles, organizations can mitigate financial costs and operational risks associated with retaining data longer than necessary. #informationgovernance #dataminimization #privacylaw #dataprivacy #privacycompliance #datagovernance #privacybydesign #datalifecycle #gdpr

Unlocking the Door to Information: Data Subject Access Requests (DSARs) under GDPR In the digital realm, where information flows like a river, individuals have the right to know what’s happening with their personal data. That’s where the General Data Protection Regulation (GDPR) comes into play, ensuring that our data rights are respected. At the heart of this regulation lies a powerful tool known as “Data Subject Access Requests” or DSARs. Though it might sound like a mouthful, it’s essentially a key that allows individuals to peek into their data world. READ FULL AT https://lnkd.in/d_f95DRh

Following our recent series of articles relating to the Retained EU Law (Revocation and Reform) Act 2023, Simon Portman takes a look at the implications of other Acts relating to data and AI in the EU. The EU’s General Data Protection Regulation (GDPR) was born while the UK was still a part of the EU, even though Brexit was already looming at that point, and became law in the UK in the form of the Data Protection Act 2018. Many companies and other organisations found implementation difficult due to the complexity of the policies, procedures and technical measures necessary for compliance, especially smaller entities for whom all these legal requirements were considered more onerous. The rule changes did not only affect the larger corporations but were also required for much smaller organisations, be they a local orchestra or a village scout troop." To read the article in full, please visit: https://lnkd.in/ecACYu_W

Our latest edition of Data Diaries with a look back on the big stories from 2023 and a look forward at what we can expect from 2024. #dataprotection #GDPR #UKGDPR #DPBill #AI #privacy

The #GDPR includes the notion of "Data Access Request" that any individual can ask you for. This also includes the notion of the right to be forgotten. During my discussions with our customers, I realized that many didn't know how to properly handle these requests. Perhaps this article will help... Netwrix Corporation #GDPR #DataAccessRequest

GDPR: What Exactly Is Personal Data? 🙋 Personal data lies at the heart of the GDPR (General Data Protection Regulation). This is the whole point of the Regulation: it’s what organisations must protect. However, many organisations are still unsure exactly what ‘personal data’ is. Do you know? Read our post to find out👉https://ow.ly/yHXM50ShKVC #GDPR #PersonalData #DataProtection #PrivacyRights #DataSecurity #DataRegulation

GDPR: What Exactly Is Personal Data? 🙋 Personal data lies at the heart of the GDPR (General Data Protection Regulation). This is the whole point of the Regulation: it’s what organisations must protect. However, many organisations are still unsure exactly what ‘personal data’ is. Do you know? Read our post to find out👉https://ow.ly/yHXM50ShKVC #GDPR #PersonalData #DataProtection #PrivacyRights #DataSecurity #DataRegulation

#GDPRinpractice The report of the FRA named "GDPR in practice - Experiences of data protection authorities can" be accessed at: https://lnkd.in/dd7YDtiV