United Kingdom

GDPR: how to create a data protection impact assessment

GDPR: How to create a data protection impact assessment

The General Data Protection Regulation (“GDPR”) directs how an organization should handle the personal data of residents in the European Union (“EU”). Under the GDPR, an organization must conduct a Data Protection …

Alice Porch

GDPR: how to process data under the consent legal basis

GDPR: how to process data under the consent legal basis

The General Data Protection Regulation (GDPR) is a privacy law that protects the personal data of residents of the European Union. GDPR achieves this goal by providing privacy rights to individuals, requiring …

Avatar photo

Donata Stroink-Skillrud

What rights does GDPR provide to consumers?

What rights does GDPR provide to consumers?

The General Data Protection Regulation (GDPR) is a comprehensive privacy law designed to protect the Personally Identifiable Information (PII) of residents of the European Union (also referred to as data subjects). GDPR …

Avatar photo

Donata Stroink-Skillrud

GDPR data processor and data controller definitions

GDPR Data Processor and Data Controller definitions

The General Data Protection Regulation (GDPR)  is a privacy law that protects the Personally Identifiable Information (PII) of residents of the European Union. While the law has a broad application, applying to …

Avatar photo

Donata Stroink-Skillrud

Who does GDPR apply to?

Who does GDPR apply to?

The General Data Protection Regulation (GDPR) is one of the most comprehensive and heavily enforced privacy laws in the world. GDPR was enacted to protect the privacy of European Union residents (data …

Avatar photo

Donata Stroink-Skillrud

GDPR fines and penalties to date

GDPR fines and penalties to date

Since the implementation of the General Data Protection Regulation (“GDPR”) in April 2016, over 2,000 fines have been issued to businesses and organizations by supervisory bodies throughout the European Union. It is …

Ryne Sulier

How GDPR penalties and fines can affect your business

How GDPR penalties and fines can affect your business

The General Data Protection Regulation (“GDPR”) stipulates that national authorities within the European Union (E.U.) must assess certain GDPR penalties (including GDPR fines) for specific data protection violations by businesses/individuals. The processing …

Ryne Sulier

What laws require websites to have a Privacy Policy?

What laws require websites to have a Privacy Policy?

Unless you are at Target, you want to make sure that you actually need what you are buying. As much as we’d like to sell our services to every website out there, …

Avatar photo

Donata Stroink-Skillrud

Do you need a data inventory

Data Inventory: why you may need one

“Inventory” is one of those words that just make most people want to take a nap. Don’t worry though, at least this isn’t one of those blog posts telling you to write …

Avatar photo

Hans Skillrud

Picture of space with the caption "Google loses right to be forgotten lawsuit."

Google loses ‘right to be forgotten’ lawsuit

For one businessman, articles listed on Google about his criminal conviction were cramping his style. While the articles were true in their nature and were not defamatory, the businessman (unnamed) decided to …

Avatar photo

Donata Stroink-Skillrud