Data Protection Impact Assessment
Find out more about what is a DPIA, when to conduct it and a list of the kind of processing operations that require a DPIA.
Information and Data Protection Appeals Tribunal
Click here for more information about your right to file an appeal from a decision of the Commissioner and the guidelines to file such an appeal.
Latest News & Publications
FAQs on the Schrems II CJEU judgement
In its ruling dated 16th July 2020 (C-311/18, Schrems II), the CJEU invalidated the adequacy of the EU-US Privacy Shield. This was the basis of transfers of personal data by controllers in the EU (data exporters) to companies in the US (data importers). This means that such transfers can no longer be possible under this adequacy framework
Disclosure of health data in the context of occupational medicine and assessment of working capacity
With regards to the disclosure of medical or health data in the context of occupational medicine and assessments of working capacity, the rule under Article 9 GDPR provides that the processing of special categories of data shall be prohibited unless one of the derogations set out under para. 2 thereof is satisfied.
Data Monetisation vs Data Protection Rights
Whereas many governments and companies around the globe are turning to technology to fight the coronavirus pandemic, the use of personal data is playing a crucial role in creating models to identify trends.