Third party requests to exercise data subject rights: quick notes for controllers

- Posted in data protection by
An increasing number of third parties are offering services - typically, by way of a web site or an app - to facilitate data subjects in exercising their rights under the GDPR. Controllers on the Read more

The UK's International Data Transfer Agreement: is this the ICO's worst document yet?

- Posted in data protection by
If you've been involved in transfers of personal data to third countries under the GDPR, you'll probably be familiar with the long-standing standard contract clauses. And you may be familiar with the Read more

Events, exclusion lists, and the UK GDPR

- Posted in data protection by
If you run an event, there is - sadly - a strong chance that you've had to deal with inappropriate behaviour. More and more events have adopted a code of conduct, to set out standards of acceptable Read more

Google Fonts, an IP address, and the GDPR: must I now self-host all my web page resources?

- Posted in data protection by
The Register, and probably other places, are reporting about a Munich court's decision that the use of Google Fonts, hosted on a server operated by Google, led to an infringement of German data Read more