Featured posts
Digital Omnibus
20-21 Oct: 🔥 Timeline update from noyb and Council agreed their position on GDPR and ePrivacy changes:
Events 2026
Next up: 21-23 Oct 🇩🇰 Copenhagen: ITechLaw 2026 European Conference I 22-23 Oct 🇳🇴 Sandefjord: Det årlige personvernkurset
Right of access (DSARs)
All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide.
Data protection impact assessments – DPIAs
Key resources for data protection impact assessment – DPIAs. Latest: EDPB shares new DPIA template (it's excessive)...
DPO role key resources
Key DPO role resources: CJEU rulings, EDPB/WP29 Guidelines, DPA guidance and more.
Lawfulness: Consent
When can you rely on consent as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
Lawfulness: Legitimate interest
When can you rely on legitimate interest as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
The DPO role: Article 37(1)(b)
Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?
Denmark DPA reports controller to police and suggests DKK 1,5 m fine
paid
–
2 min read
💸 DKK 1,5m and reported to the police for not auditing their processors for 𝒚𝒆𝒂𝒓𝒔, violating the accountability principle.
Denmark DPA orders municipalities to ensure Google-sharing compliance
paid
–
1 min read
🔥 Danish DPA with new decision in their Helsingørgate/Chromebook case!
EDPB publishes CEF DPO documents
paid
–
2 min read
📝 See post from 29 February for all the gory details!
EDPB Members and country codes
paid
–
1 min read
A list of all EDPB member countries, flags and country codes for easier reading of EDPB reports!
European Commission upholds adequacy decisions for 11 third countries and territories
paid
–
1 min read
Great news for those who aren't fans of TIAs: the EUC upholds adequacy for Andorra, Argentina, Canada, Faroe Islands, Guernsey, the Isle of Man, Israel, Jersey, New Zealand, Switzerland and Uruguay. ✅
Chief of Updates