In-depth articles on GDPR compliance, DSARs, data governance, and privacy operations.
Lawful Basis for ProcessingThe question at hand You ve stripped out names, replaced identifiers with random codes, and removed postcodes. Your processor assures you the dataset is anonymous. Your legal team signed off. But can
Lawful Basis for ProcessingScope of This Guide This guide covers the lawful basis, transparency, and retention requirements for processing location data under the GDPR . It focuses on the violations identified in Google s €403m
Lawful Basis for ProcessingThe Ireland Data Protection Commission s €403 million fine against Google Ireland Limited wasn t about a data breach or a rogue employee. It was about everyday processing decisions that seemed reasona
Lawful Basis for ProcessingThe Challenge Google processed location data across three features, Web App Activity, Location History, and Location Accuracy, from May 25, 2018, to February 4, 2020. During this period, Ireland s Dat
Get weekly security insights and compliance updates delivered to your inbox.
Lawful Basis for ProcessingThe question at hand You ve built your international data transfer strategy on standard contractual clauses (SCCs). You ve mapped your processors, documented your transfers, and filed the paperwork yo
Lawful Basis for ProcessingYou ve published your privacy notice and added a consent banner. You ve ticked the transparency box. But if your users still can t understand what they re agreeing to, you haven t built compliance, yo
Lawful Basis for ProcessingThe question at hand You re launching a new marketing campaign. Your legal team asks: what s your lawful basis? The answer often comes back reflexively: consent. It s become the default choice for man
Lawful Basis for ProcessingWhat Happened In early 2021, Datatilsynet proposed a $12 million fine against Grindr following a complaint from the Norwegian Consumer Council. The enforcement action focused on the dating app s conse
Lawful Basis for ProcessingWhy these mistakes keep happening Higher education institutions often rush to adopt collaborative platforms. Your procurement team signs off on a cloud tool, IT rolls it out, and faculty start uploadi
Lawful Basis for ProcessingWhat Changed Over the past year, case law has provided compliance teams with much-needed clarity on privacy expectations. Courts in the UK and EU have ruled on what constitutes a reasonable expectatio
Lawful Basis for ProcessingWhat Happened In December, Ring launched its Familiar Faces feature, an AI-powered facial recognition system that identifies regular visitors to a user s doorbell camera. This feature sends customized
Lawful Basis for ProcessingWhen Amadeus IT Group repurposed booking data for a traveller profiling pilot, they triggered an €18 million fine from Spain s supervisory authority. The breaches weren t unusual; they were fundamenta
