International data transfers from the EU EU data protection law has evolved to provides common standards for data protection across Member States. With that evolution the EU now expect “adequacy” of data protection laws from third countries which are outside the EEA. This expectation was codified in the Data Protection Directive (1995) which prohibited the […]
Without doubt Europe is driving the emergence of Data Protection laws across the globe. This tends to be framed as a result of the introduction of GDPR. However as we have noted previously because of the two supranational legal orders in Europe, today there are two subtlety different laws governing data protection as well as data […]
The mess of acronyms which denote various European organisations can be overwhelming. None more so that the legal orders and courts involved in European Data Protection. In this article we explain the origins and purposes of the two main courts CJEU and ECtHR. The big European institutions We discuss the two major European institutions: the […]
Many people seem that believe that a personal data can be anonymised by just writing over the identifier with asterixis. This is incorrect and exposes both the business or institution as well as the data subjects to major privacy risks. Useful Definitions Firstly it is worth considering two terms pseudonymisation & anonymisation again. The difference […]
The law across Europe now says a DPIA is required when the processing is “likely to result in a high risk to the rights and freedoms of natural persons” (GDPR Article 35(1)). Where the key term is “high risk”. To be clear not all processing requires a DPIA. A DPIA is mandatory for that subset of processing activities which meet the threshold of high risk. Since GDPR […]
Many of our clients with CCTV cameras receive requests from An Garda Siochaná, the PSNI or some other Statutory Authority (SAs as they are commonly referred to) for CCTV footage. The familiar problem here is the client is trapped between the rights of the individual(s) on the footage on one side and rights of the […]
A Data Protection Commission 2018 survey reported that GDPR awareness amongst Irish SMEs is pleasingly high (90%). However, a 2018 MicroWarehouse survey of 100 CIOs and IT Managers found that large implementation gaps remain. Over 50% of Irish SMEs had yet to implement data protection measures, with 30% of respondents reporting that cyber security is […]
A sensible and well-designed and CCTV system is a powerful tool for deterring criminals and tackling security issues. On the other hand, badly designed systems, cause legal and PR problems while generating a false sense of security. In our experience, privacy and security are not mutually exclusive. We find a pragmatic approach based on the […]
Privacy and Electronic Communications Directive (PECR) refers to a set of European directives which have been issued and refined since 2002. These directives were written specifically to address the requirements of new digital technologies and ease the adoption of new and innovative electronic communications services. The Directives complement the Data Protection Directive and applies to […]
This blog post is a summary of a Sector Note produced for our clients. If you would like access to the complete document, please get in touch. Q1.Does GDPR impact Golf Clubs? Yes! Any organisations that handle peoples’ data are governed by these laws. Specifically the Irish & UK 2018 Data Protection Acts and the EU’s […]