Follow

Data Privacy Blog

Articles: 1-10 of 40

When an Ad Reveals Too Much: GDPR Duties for Publishers and Advertisers

European Union, United Kingdom - December 18 2025 What happens if an advertisement contains personal data and that data is 'sensitive' - for example, where it suggests that the individual offers…

EDPB guidelines on the DSA-GDPR interplay: what platforms, advertisers and researchers need to know

European Union - November 12 2025 On 12 September 2025, the European Data Protection Board ("EDPB") published guidelines 3/2025 to clarify the relationship between the General Data…

Fifth Edition: Workplace Data Privacy update - Ius Laboris

United Kingdom - October 3 2025 Workplace privacy continues to evolve, with regulators maintaining a sharp focus on employee data protection. This quarter saw enforcement action…

When the Cookie Crumbles: Lessons from the CNIL

France - September 19 2025 In September 2025, France's data protection authority (the CNIL) raided the digital cookie jar handing down hefty financial penalties to tech giant…

Are you ready for the EU's Data Act?

European Union, United Kingdom - September 2 2025 As well as the EU's AI Act and the UK's Data Use and Access Act, tech businesses also need to be aware of another piece of legislation that is coming…

Data, Decisions, and a New Direction: The ICO's 2024-25 Annual Report in Focus

United Kingdom - August 13 2025 In July 2025, the ICO published its - its final report under the 'ICO' name before transitioning to the Information Commission, as required by the…

Surveillance or Safeguard? The CNIL's Verdict on Augmented Cameras for Age Verification

France - July 25 2025 The French Data Protection Authority (CNIL) has determined that the use of augmented cameras to estimate a customer's age for the sale of restricted…

AI in the Workplace: European Parliament's Draft Report calls for stronger worker protections - but is it necessary?

European Union - July 22 2025 On 12 June 2025, the European Parliament's Committee on Employment and Social Affairs (EMPL) published a draft report calling for a legislative…

ICO fines 23andMe £2.3 million - Key takeaways on security measures and data breach management

Canada, United Kingdom - July 5 2025 On 17 June 2025, the ICO announced that it issued a monetary penalty of £2.31 million against genetics and research company 23andMe, following a…

Balancing Risk and Reality: Using AI at Work

European Union, United Kingdom - July 4 2025 Like many things AI-related, AI governance has become a buzzword in recent years. However, good governance underpins both legal and regulatory…