GDPR

Selling Digital Products Worldwide: Getting It Right and Staying Legal

by

Selling ebooks, courses, software, templates or SaaS subscriptions across borders looks simple from a checkout-button perspective, but underneath sits a dense layer of tax, data protection, consumer-rights and payments law that differs sharply between the UK, the US, Canada, Australia and the wider EU. A creator based in England selling to customers in Los Angeles, … Read more

Lawyers warned over potentially negligent GDPR advice

by

A legal compliance expert has warned that lawyers may need to take action over potential breaches of data protection rules.

Brian Rogers, Director of Regulation and Compliance Services for Riliance, said those who advised businesses how to comply with new GDPR rules last May should revisit that advice – and even contact clients to admit they made a mistake.

Rogers spoke to the Gazette after lawyers were publicly criticised last month by Chris Combemale, Chief Executive of the marketing network DMA Group. Combemale told a Westminster Legal Policy Forum conference that many of the 1,000 DMA members had been wrongly told to focus on consent as the basis for processing data.

Read more

Google must delete links to articles in “Right to be Forgotten” case

by

Google was ordered to take down links to articles about the historic criminal convictions of a businessman.

Two businessmen (NT1 & NT2) convicted of criminal offences many years ago brought claims made under Data Protection law and the English law tort of misuse of private information, for the “right to be forgotten” or, more accurately, the right to have personal information “delisted” or “deindexed” by providers of internet search engines (“ISEs”)

Read more

GDPR, References and Confidential Information

by

The GDPR impacts on the giving of references and supplying confidential information
Employers are advised to write a clear policy on the giving of references. The ICO (Information Commissioner’s Office) has said employers should have a clear policy setting out, which employees are authorised to give references and in what circumstances.

Read more

Data Processors and the General Data Protection Regulation (GDPR)

by

Data Protection
Whether you are a Data Controller or a Data Processor you have responsibilities under the General Data Protection Regulation (GDPR). A controller determines the purposes and means of processing personal data, whereas a processor is responsible for processing personal data on behalf of a controller and you are required to maintain records of personal data and processing activities.

Read more

Data Protection and Subject Access Requests

by
subject access requests - data protection

An increasing number of subject access requests have been made under the Data Protection Act 1998.

Subject access requests are used as tactical ploys as a way of putting pressure on the other side to disclose documents that would not otherwise be disclosable in litigation. Several cases have been

Read more