Navigating the Landscape of GDPR Assessments: DPIA, TIA, and LIA

The General Data Protection Regulation (GDPR) has revolutionised the way personal data is handled across the European Union and beyond. A crucial aspect of GDPR compliance is the implementation of various assessments to ensure data protection and privacy. These assessments include the Data Protection Impact Assessment (DPIA), Transfer Impact Assessment (TIA), and Legitimate Interest Impact Assessment (LIA). Each of these plays an important role in safeguarding personal data and ensuring that businesses comply with GDPR requirements.
The European Data Act and Its Impact on Businesses

In an age where data shapes our daily lives, understanding the new European Data Act is crucial for everyone, from business leaders to everyday consumers. This landmark legislation, introduced by the European Union, is set to transform how data is managed, shared, and protected. In this clear and concise guide, we’ll explore what the European Data Act is, why it matters, and how it impacts you.
Overview of the ICO’s Guidance on Recruitment and Selection

In the digital age, data protection is a critical aspect of every business operation, especially in recruitment. The UK Information Commissioner’s Office (ICO) has issued detailed guidance on recruitment and selection, focusing on compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). This article delves into these guidelines, offering key insights and pragmatic advice for businesses to navigate the complexities of data protection in recruitment.
Data Protection Officers vs. Representatives: A Comparative Analysis under GDPR, UK GDPR, and the New Swiss Data Protection Act

The roles of Data Protection Officers (DPOs) and representatives stand as critical figures, ensuring businesses navigate the complex seas of compliance. Yet, there often exists a cloud of ambiguity around their distinct functions, responsibilities, and the nuances that set them apart.
Data Protection Officers vs. Representatives: A Comparative Analysis under GDPR, UK GDPR, and the New Swiss Data Protection Act

The roles of Data Protection Officers (DPOs) and representatives stand as critical figures, ensuring businesses navigate the complex seas of compliance. Yet, there often exists a cloud of ambiguity around their distinct functions, responsibilities, and the nuances that set them apart.
HR Data Privacy and Protection in Switzerland

With the recent enactment of the new Swiss Data Protection Act (Swiss DPA), which came into effect on September 1, 2023, HR departments in Switzerland are facing a shift in handling employee data. This updated legislation, aligning more closely with the EU’s GDPR, imposes stricter controls and heightened responsibilities on data processors and controllers, including those in HR roles. This article dissects the critical elements of the Swiss DPA, focusing on its impact on HR data privacy and protection practices, and provides actionable recommendations for HR professionals to comply with data privacy and protection standards.
Key Elements of AI-Related Contracts in the Wake of Emerging Regulations

As Artificial Intelligence (AI) cements its role as a cornerstone of innovation across various sectors, the legal frameworks governing its use are rapidly evolving. The landscape is abuzz with legislative developments, such as the proposed AI Act by the European Union and the Biden administration executive order on AI. As lawmakers and industry leaders shape new AI regulations and ethical guidelines, the complexity of AI-related contracts is on the rise. In this article, we’ll explore the key elements that your AI-related contracts should include to be as robust as they are compliant.
Generative AI: Opportunities, Threats, and Legal Considerations

In the bustling streets of European cities, behind the screens of tech hubs in Berlin, Paris, and Stockholm, a new technological marvel is taking shape: Generative AI. As businesses across the continent explore the vast potential of this technology, understanding its legal implications is a must. What is special about Generative AI? What legal concerns does it bring? Let’s explore this transformative technology and its implications in the European landscape.
Retargeting in Personalised Ads: Balancing E-commerce Strategies with Data Protection

In the digital space, e-commerce platforms are leveraging personalised advertising to enhance customer experiences and boost sales. Retargeting, a form of personalised advertising, has become a game changer, enabling businesses to re-engage potential customers by displaying ads based on their previous online activities. While this approach can significantly uplift conversion rates, it also entails critical considerations regarding data protection and privacy compliance, notably in the light of the General Data Protection Regulation (GDPR).