Confessions of a GDPR architect
ABSTRACT: A list of current and future "how-to" posts on practical enterprise-specific GDPR compliance using public domain objects, with optional technology anyone can build.
29Nov
20Nov
GDPR: what are the lawful bases under which data can be processed?
ABSTRACT: Each of the Article 6(1) bases interacts with other Articles and other laws in different ways, and have different hypothetical consequences. For the layperson these interactions/consequences are not always obvious.
12Nov
GDPR: can it impact financial regulation of foreign takeovers?
ABSTRACT: Supervisors are interested in GDPR risks. Financial regulators are interested in financial risks. Often the latter may be derivative of the former. An obvious question arises: at what point might financial regulators become interested in data protection risks? Background: I was asked a question which for various conduct reasons I can't possibly answer in the terms asked. That said, given its resonance with similar issues I've observed in the UK and other contexts, I've reformulated it to something so generic...