Lawful processing and transfer of data

Featured guidance
Lawful processing and transfer of data guidance:

This Practice Note discusses the impact of Brexit on the general processing of personal data under the General Data Protection Regulation, Regulation (EU) 2016/679...

Practice Note

Legislative background and guidance Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) was directly applicable in the UK from 25 May 2018, and the...

Practice Note

This Practice Note explores issues and best practice relating to the sharing of personal data between controllers (including joint controllers and independent...

Practice Note

An employer will usually wish to process, ie collect, use and record, data concerning an individual’s health (health information) in a number of different circumstances....

Practice Note

The General Data Protection Regulation (GDPR) permits processing of personal data where that processing is necessary for the purposes of the legitimate interests pursued...

Practice Note

This Practice Note sets out the compliance implications of the General Data Protection Regulation (GDPR) on direct marketing. It also reflects the Privacy and Electronic...

Practice Note

This Practice Note sets out information requirements that are contained at various places in the General Data Protection Regulation (GDPR). Most of these relate to...

Practice Note

An organisation cannot simply process personal data because it wishes to do so. It can only process personal data if it satisfies one of the conditions set out in Article...

Practice Note

This Practice Note explains the scope for relying on legitimate interest as a lawful ground for processing personal data under the General Data Protection Regulation...

Practice Note

This Practice Note pulls together practical examples of situations where legitimate interests may be considered as the lawful ground for processing. These examples are...

Practice Note

The General Data Protection Regulation (GDPR) significantly raises the bar on what constitutes consent and in relation to obtaining, managing and recording consent. This...

Practice Note

Historically, many commercial organisations relied on consent as the main lawful ground for processing personal data. This is because the pre-General Data Protection...

Practice Note

Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) was directly applicable in all EU Member States (including the UK) from 25 May 2018. The main...

Practice Note

Companies must find a reliable method of identifying and correcting any unlawful or unethical conduct that occurs within their organisations in order to achieve effective...

Practice Note

ARCHIVED: This Practice Note introduces the data export restriction under the Data Protection Act 1998 (DPA 1998) prohibiting the transfer of personal data to a territory...

Practice Note

This Practice Note is a consolidated list of key General Data Protection Regulation, Regulation (EU) 2016/679 (the GDPR) compliant Precedent terms, clauses, provisions,...

Practice Note

This Practice Note examines the legal restrictions applicable to monitoring of staff, IT systems and electronic communications in the workplace and the requirements that...

Practice Note

This Practice Note introduces common types of online advertising and marketing, and highlights relevant legal issues. Online, digital, and social media (collectively...

Practice Note

For information on data protection issues in employment generally, see Practice Notes: • The GDPR and DPA 2018: key data protection issues for employment lawyers, and •...

Practice Note

This Practice Note addresses the General Data Protection Regulation, Regulation (EU) 2016/679 (the GDPR) as it applies in the UK where a processor will process personal...

Practice Note

On 15 December 2015, the EU institutions reached agreement on Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), which replaced Directive 95/46/EC,...

Practice Note

Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) was directly applicable in all EU Member States (including the UK) from 25 May 2018. The main...

Practice Note

An individual's right to privacy and to the protection of their personal data are fundamental human rights enshrined in Article 7 (the right to private and family life)...

Practice Note