Q&As

Q&As

This subtopic is an archive of selected Q&As from Information Law.

Information Law Q&As

These Q&As seek to briefly address common questions faced when dealing with Information Law matters.

The Q&As supplement and link to other more detailed content within Lexis®+ UK, but are intentionally short. It is anticipated that a brief Q&A will be most helpful when you need a quick overview of an issue and its likely impact. This might arise, for example, where lawyers are needing to provide advice, business development or training at short notice. The Q&A content on Lexis®+ UK is date stamped. This date

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Information Law News

Meta challenges Irish EU GDPR fine for ‘plaintext’ passwords data breach

MLex: Social media giant Meta Platforms has challenged the Irish Data Protection Commission’s (DPC) decision to fine it for inadvertently storing some passwords in plaintext on its internal systems without cryptographic protection or encryption, MLex has learned.

Information Law weekly highlights—5 December 2024

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

EDPB approves certification criteria for EU Data Protection Seal under EU GDPR

The European Data Protection Board (EDPB) has approved the certification criteria for the EU Data Protection Seal, a mechanism to certify compliance with EU General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) in data processing operations, including transfers to third countries. This seal helps establish appropriate safeguards for data transfers, offering a uniform standard of assurance across the EU. It also specifies the roles of supervisory authorities, accreditation bodies, and certification bodies in maintaining consistent application of GDPR rules

Guidance for consultation on data sharing with third-country authorities

The European Data Protection Board (EDPB) has provided updated guidance clarifying the rules for data transfers to authorities in third countries. This includes scenarios where such transfers are governed by appropriate safeguards under EU General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR), such as standard contractual clauses or binding corporate rules. The guidance aims to ensure compliance with GDPR requirements and the Court of Justice of the European Union’s Schrems II judgment, which highlighted the need for robust protections against indiscriminate access to personal data in third countries. The guidelines are subject to public consultation until 27 January 2025.

View Information Law by content type :

News