24Feb
Related Posts
01Dec
GDPR: must controllers declare legal bases to processors?
ABSTRACT: must Controllers inform processors of the legal bases of processing? Prima facie no: but from a legal and business-strategic... read more
26Oct
“Data Breaches… Armageddon…” – as announced by the Three Horsemen
"Data breaches... Armageddon..." - Morrisons v Various Claimants, [2018] EWCA Civ 2339 at para 78. Caveat: I confess at the outset... read more
24Feb
GDPR Right to Portability – submission to Article 29 Working Party
For legal reasons (no not defamation or litigation!), and with apologies, I temporarily have withdrawn publication of this submission. read more
12Nov
GDPR: can it impact financial regulation of foreign takeovers?
ABSTRACT: Supervisors are interested in GDPR risks. Financial regulators are interested in financial risks. Often the latter may be derivative... read more
09Mar
Brexit: the gift that keeps on giving… And they thought it was all over!
The Three Knights are riding to the rescue! Or... is it.. the Three Stooges, or perhaps Sanchos, tilting at the windmills... read more
01Nov
Brexit-proofing software – without programming for specific dates, jurisdictions, etc
Abstract: Simple methods to inoculate data protection (or any other) multi-jurisdictional software from Brexit and similar events, before their possibility... read more
29Nov
Confessions of a GDPR architect
ABSTRACT: A list of current and future "how-to" posts on practical enterprise-specific GDPR compliance using public domain objects, with optional... read more
15Mar
GDPR: Can children prevent schools from disclosing grades to parents?
"Can I sue my school for telling my grades to my parents via a website, with the European GDPR law?" This... read more
03Nov
GDPR engagement of 30+ additional jurisdictions – automated pleadings
Abstract: (1) The GDPR arguably, either directly or indirectly, could engage in a relatively straightforward fashion circa 30 jurisdictions apart from... read more
03Apr
GDPR, IP addresses, and classification – theory and practice
IP addresses can determine jurisdiction - as classically exploited by private and public surveillance agencies, BigTech, other data brokers, and... read more