HR Articles

The WhatsApp privacy confusion – what is actually going on and should you continue to use the app?

In light of the new social media guidance the BBC imposed on its own employees, employers should be carefully considering whether or not their own social media policy sufficiently protects their interests.

Following extensive consultation that began in December 2019, the Information Commissioner’s Office (ICO) has finally published their updated guidance on the Right of Access, namely the ability for an individual to submit a Data Subject Access Request (DSAR) to a processor of their personal data.

Following an investigation by the Data Protection Authority of Hamburg, fashion retailer H&M has been fined the equivalent of £32.1m for illegally monitoring of its employees.

Back in March, Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.

Despite the consultation period for their draft Right of Access Guidance remaining open until the 12th February, the Information Commissioner’s Office (the “ICO”) has amended its published guidance on the timescales for Data Subject Access Request (“DSAR”) compliance.

Amidst the hype of the GDPR in 2018, one other area of data protection reform progressed relatively under the radar – the ePrivacy Regulation. Surprising given the potential impact this could have on an organisations’ marketing practices.

Advocate General, Henrik Saugmandsgaard Øe of the Court of Justice of the European Union (CJEU) has just handed down his opinion in response to a referral by the High Court of Ireland for preliminary rulings of law. The High Court case in question related to complaints made by Max Schrems against Facebook Ireland and Facebook Inc concerning the transfer of Mr Schrems' personal data to the United States (U.S).

The Information Commissioner’s Office (ICO) has launched a consultation to invite views from the public on its new guidance for subject access requests.

The GDPR increased the fines available to EU supervisory authorities for breaches of data protection requirements.