After Brexit, the UK adopted its own version of GDPR-known as the UK GDPR. While the core principles remained aligned with the EU’s regulation, subtle divergences are starting to emerge. The EU continues to push forward with enforcement actions, refining interpretations of GDPR through case law and expanding expectations around data subject rights, AI regulation, … Read more
May 02, 2025Ravie LakshmananData Privacy / Social Media Ireland’s Data Protection Commission (DPC) on Friday fined popular video-sharing platform TikTok €530 million ($601 million) for infringing data protection regulations in the region by transferring European users’ data to China. “TikTok infringed the GDPR regarding its transfers of EEA [European Economic Area] User Data to China … Read more
On February 27, 2025, the CJEU delivered an important judgment on the interpretation of Article 15(1)(h) and Article 22 of Regulation (EU) 2016/679 on General Data Protection (GDPR) in C-203/22 CK Magistrat der Stadt Wien v Dun & Bradstreet Austria GmbH. The facts The mobile phone operator refused CK’s request to conclude or extend the mobile telephone contract for a monthly … Read more
Alessandra Fratini and Giorgia Lo Tauro, Fratini Vergano European lawyers Photo credit: via Wikimedia Commons Introduction On 4 October 2024, the Grand Chamber of the Court of Justice of the European Union issued its judgment in Lindenapotheke (Case C-21/23), a case concerning the online sale of pharmacy-only medicinal products and its implications … Read more
Are You GDPR Compliant? A Step-by-Step Guide for UK SMBs Understanding regulatory compliance can be daunting, especially for small and medium-sized businesses. Yet, complying with data protection standards like GDPR is critical—not only to avoid fines but also to protect your business reputation and build customer trust. We provide a straightforward, actionable guide to help … Read more