July Data Wrap: A snapshot of key regulatory developments

As mentioned in a last-minute entry to our June Data Wrap, on 10 July 2023, the European Commission adopted its long-awaited adequacy decision for the EU-US Data Privacy Framework (“DPF“), determining that data transfers pursuant to the DPF benefited from an adequate level of data protection. This means that personal data can now freely flow … Read more

Happy International Data Privacy Day: Our predictions for 2021

Happy International Data Privacy Day! And what better day than today, to explore what 2021 is likely to have in store for data and privacy? Almost three years after the EU General Data Protection Regulation (GDPR) came into force, and now 28 days since the UK GDPR replaced it in the UK following Brexit, data … Read more

Revised ePrivacy Regulation Draft introduces ability for organisations to rely on “Legitimate Interests” legal basis in relation to cookies

Another revised draft ePrivacy Regulation (“ePR”) was recently published which introduces the ability for organisations to rely on the “legitimate interests” legal basis to drop cookies on end users’ devices. This change has been criticised by some commentators for ambiguities and watering down data protection rights despite accompanying safeguards. It remains to be seen if … Read more

European Commission Publishes GDPR Roadmap

On 1 April 2020, almost two years after the General Data Protection Regulation (GDPR) entered into force, the European Commission published a roadmap for evaluating its application. The roadmap specifically asks for feedback on the Commission’s strategy in dealing with the issue of international transfer of personal data to third countries, focussing on existing adequacy … Read more

COVID-19: WHEN PUBLIC HEALTH AND PRIVACY COLLIDE?

Summary Governments and public authorities globally are requiring increased access to personal data of citizens in order to attempt to control and monitor the current spread of COVID-19. The pandemic is generally recognised by data protection authorities as giving rise to extraordinary circumstances, although in Europe at least there are still requirements for processing to … Read more

Airbnb, TripAdvisor, Booking.com and Expedia strike data sharing deal with the EU

5 March 2020 saw the European Commission (EC) announce an unprecedented agreement with short-stay accommodation titans Airbnb, Booking.com, Expedia and TripAdvisor to share and publish data (on the number of nights booked and the number of guests staying) with the EC via Eurostat (the EU’s statistical office) (press release here). Eurostat will then aggregate the … Read more