Cutting edge data management and data ethics
Anti-Money Laundering, KYC and Data Protection
This article explores the legal framework for Anti-Money Laundering (AML) and discusses how to balance AML objectives while ensuring privacy.
The elephant in the room: international data transfers after the Schrems II decision
This article analyses the implications of the CJEU verdict on the Schrems II case and outlines steps to ensure GDPR-compliant cross-border data transfers.
Irish DPC updates cookie guidance on foot of cookie sweep report
The Irish Data Protection Commission (DPC) has issued a guidance note on cookies and other tracking technologies. This guidance accompanies the release of a report
DPC draws line in the sand with cookie sweep report, six months given to comply
Following a sweep of 40 websites, the Irish Data Protection Commission (DPC) has published a report on the use of cookies and other tracking technologies.
Desperate times call for desperate measures? Understanding the privacy risks of digital-contact tracing in the COVID-19 fight
During the current COVID-19 pandemic, a number of Asian countries initially experiencing the outbreak have relied upon technological tools (apps, tracking technologies, and big data
Cross-border data transfers between public authorities: the EDPB guidance
The digitalisation of the public sector and its information assets has reduced the barriers and boosted synergies in the public domain. Public authorities, now more
Cryptography and Privacy
In a recent blog post the Spanish Data Protection Agency (AEPD) released some guidance on data protection and the use of encryption. This article is
Data protection roles in health research: Controllers vs Processors
Regulation (EU) 2016/679 (GDPR), has been criticised for being overly burdensome and disproportionally prescriptive for organisations, especially where data is the enabler for providing services
New EDPB proposed guidelines on the territorial scope of the GDPR
In their November 2018 plenary meeting, the European Data Protection Board (EDPB) adopted a set of guidelines on the territorial scope of application of Regulation (EU) 2016/679 (General
Investigations, priorities and Data Protection Authorities: the Irish PSC case
In recent weeks there has been much discussion regarding the Public Services Card (PSC) in Ireland and the report issued by the Data Protection Commission
What is Mobile Device Management and how your organisation can get started
Our mobile devices play a central role in our lives today. Whether they be smartphones, tablets or in other forms such as wearables. They are
Schrems II and the Potential Implications for Global Personal Data Transfers from the EEA
On 9th July, the Court of Justice of the European Union (the CJEU) sat for a hearing concerning case 311/18; more commonly known as “Schrems
