Last week an important case was decided in the High Court on the so-called ‘Right to be Forgotten’. The Claimants, NT1 and NT2, are businessmen who asked Google to remove links to search results that revealed their past convictions. The High Court judgment is lengthy and comprehensive. For those who wish to analyse the case […]
The U.K. government has begun an inquiry into so-called ‘cryptocurrencies’, that is, digital currencies and their associated distributed ledger technology. The Treasure Committee will investigate both the risks and opportunities. For more details click here. Two ‘Right to be Forgotten’ trials have been brought before the High Court this month. NT1 v Google […]
The Article 29 Working Party has released guidelines on a number of GDPR issues: automated individual decision-making and profiling, transparency, and revised guidelines on personal data breach notification. To access the guidelines, click here. The U.K. says it will require social media firms to provide annual transparency reports in order to combat extremist and abusive […]
The Facts On 12 January 2014, an employee of the Defendant “Morrisons” posted a file containing the personal details of almost 100,000 colleagues on the Internet. Mr Andrew Skelton, a senior IT Auditor at Morrisons, was later charged and convicted under the Computer Misuse Act 1990 and section 55 of the Data Protection Act 1998 […]
The Article 29 Data Protection Working Party recently issued guidelines on fines for the purposes of the General Data Protection Regulation (‘GDPR’). Article 83(1) of the GDPR states that supervisory authorities should identify corrective measures that are “effective, proportionate and dissuasive”. Article 83(2) is the starting point for assessing a case for the purpose of […]
The High Court ruled that Morrisons was vicariously liable for a leak of its employees’ data in 2015. An employee had used his position to steal and publish confidential information about his colleagues. This is the first class action involving a personal data breach in the U.K. To access the judgment, click here. A class […]
The Article 29 Data Protection Working Party (‘A29WP’) recently issued guidelines on personal data breach reporting under the General Data Protection Regulation (‘GDPR’). The GDPR obliges data controllers to report personal data breaches to data protection authorities within 72 hours unless the breach is ‘unlikely to result in a risk to the rights and freedoms’ […]
