Privacy & data protection

Minors as vulnerable participants in social research activities

Minors are a vital part of every society and in line with the UN Convention on the Rights of the Child, should be able to express their views on all matters affecting them.

Recent CJEU judgements concerning the right to compensation under Art. 82 GDPR – a state of affairs in ten focus points

On June 20th 2024, the Court of Justice of the European Union (CJEU) addressed the right to compensation under Article 82 of the of the General Data Protection Regulation (GDPR) in two new cases.

GDPR and CCPA

Most organizations or companies based in the EU or EEA are generally bound by GDPR regulations when handling personal data. However, non-EU or non-EEA based organizations may also be subject to GDPR. How should international companies deal with this?

First GDPR certificaischeme

Recently, the EDPB approved Europrivacy, the first and currently only European Data Protection Seal under the GDPR. Read more about the new Europrivacy GDPR certification scheme.

Rightso

Read more about our new GDPR-tool: Rightso.

The American Data Privacy and Protection Act

The US is one of the few industrialized countries in the world that lacks a single national privacy law. So far, any efforts to establish a comprehensive federal consumer privacy framework have proved futile.

opt-in e-mail marketing

In 2021, a data subject filed a complaint with the BDPA due to the receipt of a direct marketing e-mail from a company which he had not been a customer for two years. Was the company allowed to send direct marketing e-mails to former customers without consent? We will explain it to you.

Dark patterns

On 14 March 2022, the EDPB published the 3/2022 guidelines on dark patterns on social networks, the non-transparent practices of influencing or even forcing users to make decisions about their privacy or rights. Read more about different examples defined by the EDPB.

Right of access

The European Data Protection Board published draft guidelines on the right of access, which is seen as one of the fundamental rights of the data subject under the GDPR. This blogpost will summarize the main points in the guidance and will highlight some remaining points of discussion.