GDPR Archives

June 8, 2022

Is Google Analytics illegal in the EU?

Note: On July 10, 2023, the European Commission adopted the EU-US Data Privacy Framework, which changes the legal status of transatlantic data transfers. That said, multiple privacy watchdogs point out issues with the new deal. NOYB, a privacy-focused organization founded by Max Schrems, has already announced it will challenge the new framework before the Court […]

September 21, 2021

Marc Southwell: European data protection authorities should unite to give clear direction for cookies and consent

Maciej Zawadziński: Privacy organization ‘noyb’ recently approached over 500 companies with complaints about violations of the GDPR compliance of their websites’ cookie banners. When they followed up on the problem, some companies fixed violations. Still 82% of all websites had remaining issues. It seems noyb’s complaints have motivated companies to act. But why are they […]

August 3, 2021

Karolina Iwańska: We still haven’t seen groundbreaking decisions that would provide answers to the most pressing questions about data protection online

Maciej Zawadziński: Today, GDPR and similar laws set down the rules of the game for businesses wanting to collect customer data. But how was personal data online protected before 2018? How did businesses behave then? I like to call that time a sort of “Wild West” – would you agree? Karolina Iwańska: GDPR was not […]

June 22, 2021

Tim Schumacher: It’s impossible to be online and not in the orbit of Big Tech

Maciej Zawadziński: Big Tech has built their dominant position on the market with interconnected products and services. Nowadays, the quality of their offering has gotten even better. So why is Big Tech’s image worse than ever? Tim Schumacher: In some ways, it seems an unavoidable reality due to the sheer size of Big Tech and […]

May 21, 2021

Data processing agreement: 7 elements every GDPR-compliant DPA should have

The summary A data processing agreement (DPA) is a legal document under GDPR that outlines responsibilities, obligations, and safeguards for dealing with personal data.DPAs are essential whenever a data processor handles data on behalf of a controller.Key elements of a DPA include defining scope, rights/responsibilities, technical measures, sub-contractual relationships, and annexes detailing security measures and […]

December 3, 2020

When design goes awry – How dark patterns conflict with GDPR and CCPA

The designs of websites and apps often guide users and help them navigate content in a simple way. An “X” icon serves for closing documents and programs. The red color around that “X” is a warning signal that catches your attention. Cues such as this are like a secret language to make sites and software […]

October 6, 2020

The invalidation of Privacy Shield and the status of EU-US data transfers

Privacy Shield is no longer a valid legal framework for transferring data from the EU and Switzerland to the US. But large tech companies such as Google still send heaps of data about EU residents to the US. So what has changed?

August 13, 2020

Customer data platforms: The best choice in the post-GDPR landscape

This blog post was originally published on April 18th 2018 with the title “Customer data platform overtakes DMP in the GDPR compliance race”Since the GDPR has come into force, navigating through the data ecosystem has become even more complicated. It has a tremendous impact on how organizations handle personal data. Consequently, it has also influenced […]

July 15, 2020

Ecommerce in transition – providing a safe customer experience

Ecommerce is one of the most popular shopping methods worldwide. Many innovations and improvements led to its esteem, but above all to its success. GDPR on the other hand changed the landscape, increasing fear of revenue slumps – but the opposite is the truth.

November 18, 2019

The CJEU sheds more light on trackers and consent requirements

This year, the Court of Justice of the European Union (CJEU) has issued two crucial rulings on consent requirements regarding cookie compliance, under General Data Protection Regulation (GDPR), ePrivacy Directive 2002/58/EC (ePrivacy Directive also known as Cookie Directive) and Directive 95/46/EC (Data Protection Directive). They highlight that the use of pre-ticked boxes on websites to […]

Categories

Newsletter