GDPR Data Protection Officers (DPOs) – submission to Article 29 Working Party

ABSTRACT: must Controllers inform processors of the legal bases of processing? Prima facie no: but from a legal and... read more

"Can I sue my school for telling my grades to my parents via a website, with the European GDPR... read more

The Three Knights are riding to the rescue! Or... is it.. the Three Stooges, or perhaps Sanchos, tilting at the... read more

ABSTRACT: Each of the Article 6(1) bases interacts with other Articles and other laws in different ways, and have... read more

IP addresses can determine jurisdiction - as classically exploited by private and public surveillance agencies, BigTech, other data brokers, ... read more

ABSTRACT: A list of current and future "how-to" posts on practical enterprise-specific GDPR compliance using public domain objects, with... read more

Abstract: (1) The GDPR arguably, either directly or indirectly, could engage in a relatively straightforward fashion circa 30 jurisdictions apart... read more

  For legal reasons (no not defamation or litigation!), and with apologies, I temporarily have withdrawn publication of this submission. read more

Abstract: Simple methods to inoculate data protection (or any other) multi-jurisdictional software from Brexit and similar events, before their... read more

ABSTRACT: Supervisors are interested in GDPR risks. Financial regulators are interested in financial risks. Often the latter may be... read more