Why does this topic matter to organisations? Processing of personal data is lawful only if, and to the extent that, it is permitted under EU data protection law. Each and every data processing ...

The government has released the draft of Digital Personal Data Protection Rules, key to operationalising the Digital Personal Data Protection Act 2023. The draft rules specify mechanisms for obtaining ...

The Polish data protection authority has fined ClickQuickNow €47,126.97 for violating the General Data Protection Regulation (GDPR) by requiring too difficult a process for revoking consent. The ...

One of the key changes introduced by the European Union’s General Data Protection Regulation relates to the issue of consent. To comply with GDPR rules, when dealing with data, a company must provide ...

In a matter of seconds, generative artificial intelligence can draft a reasonably passable information security policy for an organization, looking much like the thousands of publicly available ...

You can’t make access to your website’s content dependent on a visitor agreeing that you can process their data — aka a ‘consent cookie wall’. Not if you need to be compliant with European data ...

Comprehensive data protection laws are essential for protecting human rights – most obviously, the right to privacy, but also many related freedoms that depend on our ability to make choices about how ...

The draft DPDP Rules, released for public consultation on January 3, are crucial for implementing the DPDP Act, which was notified in August 2023 but remains to be enforced Companies are not obligated ...

Singapore has updated its Personal Data Protection Act (PDPA) to allow local businesses to use consumer data without prior consent for some purposes, such as business improvement and research. The ...