Some time ago, the ICO issued an action (might have been a penalty, but could be an enforcement) in which they disregarded a data processing agreement and deemed that an organisation was acting as a controller, despite the fact the ...

Do any of my learned colleagues work within the pension sector? I’m trying to get my head round the relationships between a Corporate Group, a Pension Trustee (which sits within, but independent from, the Group), and the various vendors (Pension ...

Does anyone know of any decent articles/guidance exploring the issue of ‘capacity’ and consent as a lawful basis? I’m aware of Article 8’s very specific focus on consent of children in the context of information society services – but I’m looking ...

A local authority collects their residents’ waste. On their website, they publish information relating to collections. This service allows you to enter an address and find out: > When the waste collection is due > When the last collection was completed

Hi folks, hoping someone can point me in the right direction. I’m trying to find where (or if) the UK has formally documented the decision to recognise that the EU/EEA ensures adequate protection for personal data. Section 17A of the amended ...