This Practice Note discusses the impact of Brexit on the general processing of personal data under the General Data Protection Regulation, Regulation (EU) 2016/679...
Legislative background and guidance Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) was directly applicable in the UK from 25 May 2018, and the...
This Practice Note explores issues and best practice relating to the sharing of personal data between controllers (including joint controllers and independent...
An employer will usually wish to process, ie collect, use and record, data concerning an individual’s health (health information) in a number of different circumstances....
The General Data Protection Regulation (GDPR) permits processing of personal data where that processing is necessary for the purposes of the legitimate interests pursued...
This Practice Note sets out the compliance implications of the General Data Protection Regulation (GDPR) on direct marketing. It also reflects the Privacy and Electronic...
This Practice Note sets out information requirements that are contained at various places in the General Data Protection Regulation (GDPR). Most of these relate to...
An organisation cannot simply process personal data because it wishes to do so. It can only process personal data if it satisfies one of the conditions set out in Article...
This Practice Note explains the scope for relying on legitimate interest as a lawful ground for processing personal data under the General Data Protection Regulation...
This Practice Note pulls together practical examples of situations where legitimate interests may be considered as the lawful ground for processing. These examples are...
The General Data Protection Regulation (GDPR) significantly raises the bar on what constitutes consent and in relation to obtaining, managing and recording consent. This...
Historically, many commercial organisations relied on consent as the main lawful ground for processing personal data. This is because the pre-General Data Protection...
Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) was directly applicable in all EU Member States (including the UK) from 25 May 2018. The main...
Companies must find a reliable method of identifying and correcting any unlawful or unethical conduct that occurs within their organisations in order to achieve effective...
ARCHIVED: This Practice Note introduces the data export restriction under the Data Protection Act 1998 (DPA 1998) prohibiting the transfer of personal data to a territory...
This Practice Note is a consolidated list of key General Data Protection Regulation, Regulation (EU) 2016/679 (the GDPR) compliant Precedent terms, clauses, provisions,...
This Practice Note examines the legal restrictions applicable to monitoring of staff, IT systems and electronic communications in the workplace and the requirements that...
This Practice Note introduces common types of online advertising and marketing, and highlights relevant legal issues. Online, digital, and social media (collectively...
For information on data protection issues in employment generally, see Practice Notes: • The GDPR and DPA 2018: key data protection issues for employment lawyers, and •...
This Practice Note addresses the General Data Protection Regulation, Regulation (EU) 2016/679 (the GDPR) as it applies in the UK where a processor will process personal...
On 15 December 2015, the EU institutions reached agreement on Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), which replaced Directive 95/46/EC,...
Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) was directly applicable in all EU Member States (including the UK) from 25 May 2018. The main...
An individual's right to privacy and to the protection of their personal data are fundamental human rights enshrined in Article 7 (the right to private and family life)...
