Latest from the Privacy Desk
All dispatches →Beyond SCCs & Adequacy: Why the Global CBPR Forum Is the Smartest Choice for Cross-Border Data Transfers
In a recent policy debate and workshop, a learned contributor to the privacy community — albeit not a privacy law expert —…
The Imgur Fine: A Wake-Up Call for the “Children’s Code” Era
This month, the UK Information Commissioner’s Office (ICO) issued a significant financial penalty that has sent ripples through the digital media landscape.
Can Luxembourg’s Data Protection Authority Bring GDPR Class-Action Lawsuits?
Yes. Luxembourg’s National Commission for Data Protection (CNPD) is now a qualified entity authorized to bring class-action litigation on behalf of consumers…
Europe’s Ongoing Push to Combat Explicit Deepfakes and CSAM
Europe is moving from “policy concern” to “operational enforcement” on explicit deepfakes and child sexual abuse material (CSAM).
GDPR Understanding the ICO’s Codes of Conduct: A Guide for Organisations
The Information Commissioner’s Office (ICO) in the UK promotes codes of conduct as voluntary accountability tools under UK data protection law.
GDPR The Digital Omnibus: A High-Stakes Redefinition of Personal Data
The European Union is currently navigating a pivotal moment in the evolution of its digital rulebook.
GDPR ICO’s Data Protection Complaints Framework
How to navigate UK data protection regulation with confidence for the ICO complaints framework.
GDPR ICO Fines Imgur Owner MediaLab £247,590 Over Child Data Violations After Imgur Blocked the UK
As the UK ICO fines Imgur owner £247,590 for children’s privacy failures we are seeing a huge rise in children’s privacy enforcement…
Why Latvia Requires Cookie Consent Banners: The DVI’s Enforcement Logic
Latvia has taken a clear position on cookie compliance: websites that place or access cookies on user devices must inform users transparently…
EU Digital Laws Mapping
The EU Data Governance Act (DGA) is often summarized as “a data sharing law.” That shorthand is directionally correct but operationally incomplete.
GDPR Brazil–EU Mutual Adequacy: What It Changes for GDPR and LGPD Data Transfers
Brazil and the European Union have now moved from “transfer engineering” to “transfer by default” for many common cross-border flows by adopting…
GDPR Enforcement Holds Firm as Data Breach Notifications Surge Across Europe, DLA Piper Survey Finds
The latest edition of DLA Piper’s GDPR Fines and Data Breach Survey paints a clear picture of Europe’s data protection landscape in…