Hub GDPR Bootcamp: Lawful Basis for Processing, from Consent to Legitimate Interest

This is the second in our GDPR Bootcamp series of online workshops. For this one, we’re looking at the GDPR’s lawful basis for processing. We’ll be covering: GDPR and the lawful basis for processing – setting the scene Consent, contract, legal obligation, vital interests, public task and legitimate interest Lawful purposes for processing special category …

Read moreHub GDPR Bootcamp: Lawful Basis for Processing, from Consent to Legitimate Interest

Greek DPA -v- PwC highlights consent not suitable lawful basis for employee data

consent and employee data

The Greek equivalent of the ICO have issued a €150,000 fine of PwC for having the wrong lawful basis for processing for their employee’s data. PwC required employees to consent to the processing of their data when other lawful basis were more applicable; furthermore, PwC had also failed to properly document their lawful basis for …

Read moreGreek DPA -v- PwC highlights consent not suitable lawful basis for employee data

EU Court declares website is data controller for Facebook “like” button

EU ruling on facebook like button on websites

The Advocate General has issued an opinion in Case C-40/17 relating to the use of a Facebook “like” button placed on the website of Fashion ID. The opinion sets out who is responsible for the sharing and processing of data. The Court of Justice of the European Union found that when a website features a Facebook “Like” …

Read moreEU Court declares website is data controller for Facebook “like” button

Webinar: Cookie Consent Update

The ICO has recently changed it’s approach to consent and the use of cookies. Join us for this webinar to uncover the truth about cookies, consent, the ICO guidance and what the ICO expects from you and your website cookies. We’ll be covering: Background to PECR and GDPR rules re: cookies What the new cookie …

Read moreWebinar: Cookie Consent Update

GDPR consent now needed for non-essential cookies including analytics, but will it be enforced?

cookie consent rule change

The ICO have produced updated guidance on the use of cookies and how GDPR consent fits into the need for cookie consent. Until now, most websites have been relying on only getting proper visitor consent for the use of tracking and privacy intrusive cookies (which is what the ICO hinted at in their previous guidance …

Read moreGDPR consent now needed for non-essential cookies including analytics, but will it be enforced?

First significant GDPR fine hits Google (£44m)

Google fined for consent issues

The French data regulator, CNIL, (the French equivalent of the UK’s ICO) has fined Google €50m, a record when it comes to data protection fines. The fine follows an investigation after a complaint from privacy rights groups noyb and La Quadrature du Net in May last year about the way consent is collected by Google, for …

Read moreFirst significant GDPR fine hits Google (£44m)

ICO issues £200k fine for unsolicited text messages without valid consent

The Information Commissioner’s Office (ICO) has issued a £200,000 fine to Tax Return Limited (“TRL”) for sending out 14.8m unsolicited marketing text messages (which generated 2146 complaints). The Privacy and Electronic Communications Regulation 2003 (PECR) only permit the sending of marketing emails or text messages if the recipient consents to receiving the messages or is a …

Read moreICO issues £200k fine for unsolicited text messages without valid consent

Which? highlights retailers breaching data protection and privacy laws with their e-receipts

marketing and e-receipts

Research from consumer rights guardian Which? has highlighted the data protection dangers of e-receipts and that some retailers are in breach of data protection and privacy rules when it comes to using them to direct market. Which? sent mystery shoppers to various high street brands and asked to receive e-receipts but with no marketing. However, …

Read moreWhich? highlights retailers breaching data protection and privacy laws with their e-receipts

ICO publish consent guidance and update cookie consent rules

consent and cookies

[Please note this article was published in May 2018, since then the ICO’s approach has changed, with new cookie guidance as explained in this new article] We’ve been waiting for some time, for the Information Commissioner’s Office (ICO) to publish it’s final consent guidance. It’s been in draft since March last year and waiting on the …

Read moreICO publish consent guidance and update cookie consent rules