Data Protection Day 2021
The Information and Data Protection Commissioner joins the other Data Protection authorities in Europe and around the world to celebrate Data Protection Day on Thursday 28th January 2021
Update on personal data transfers to the United Kingdom after Brexit
On the 31st December 2020, the transition period for the United Kingdom’s (UK) withdrawal from the European Union (EU) terminated; meaning that the UK is now deemed to be a third country.
GDPRights: GDPR awareness campaign and support to business organisations, in particular, SMEs.
GDPR awareness campaign and support to business organisations, in particular, SMEs – GDPRights
Appointment of a new Commissioner
Today, the Government of Malta published a notice in the Official Gazette informing the public that, in terms of Article 11 of the Data Protection Act, Mr Ian Deguara has been appointed as Information and Data Protection Commissioner for a period of five (5) years with effect from 21st December 2020.
Recommendations 02/2020 on the European Essential Guarantees for surveillance measures
Recommendations adopted to help data exporters, either controller or processor within the European Economic Area (EEA) who transfers personal data to a controller or processor in any third country outside EEA
Supplement transfer tools: EDPB's Recommendations 01/2020
recommendations have been adopted to help data exporters, either controller or processor within the European Economic Area (EEA) who transfers personal data to a controller or processor in any country that is not a Member State of the EEA
EDPB's Open Public Consultations 07/2020 & 08/2020
In its ruling dated 16th July 2020 (C-311/18, Schrems II), the CJEU invalidated the adequacy of the EU-US Privacy Shield. This was the basis of transfers of personal data by controllers in the EU (data exporters) to companies in the US (data importers). This means that such transfers can no longer be possible under this adequacy framework
FAQs on the Schrems II CJEU judgement
In its ruling dated 16th July 2020 (C-311/18, Schrems II), the CJEU invalidated the adequacy of the EU-US Privacy Shield. This was the basis of transfers of personal data by controllers in the EU (data exporters) to companies in the US (data importers). This means that such transfers can no longer be possible under this adequacy framework
Disclosure of health data in the context of occupational medicine and assessment of working capacity
With regards to the disclosure of medical or health data in the context of occupational medicine and assessments of working capacity, the rule under Article 9 GDPR provides that the processing of special categories of data shall be prohibited unless one of the derogations set out under para. 2 thereof is satisfied.
Data Monetisation vs Data Protection Rights
Whereas many governments and companies around the globe are turning to technology to fight the coronavirus pandemic, the use of personal data is playing a crucial role in creating models to identify trends.