New telecoms security regulations and a Code of Practice set to be in place on 1 October 2022

The United Kingdom government wants to have new telecoms security regulations – together with a code of practice.  These will apply to network and service providers. The relevant department – the Department for Digital, Culture, Media & Sport – conducted a consultation exercise for these new regulations and the code of practice from March to…

Transparency matters: WhatsApp fined EUR 225 million for violating transparency obligations under the GDPR

On 2nd September 2021 the Irish Data Protection Commission (”DPC”) imposed its biggest fine to date on WhatsApp, the messaging app owned by Facebook. In its reasoning (available here) the DPC considered both: the information provided by WhatsApp to its users, and perhaps more importantly  the lack of information provided to non-users.  Namely, it was…

ICO Consultation for the UK Replacement of the Standard Contractual Clauses

On 11 August 2021, the Information Commissioner’s Office (“ICO”) published a consultation regarding its draft guidance for international transfers of personal data (“Guidance”), as well as associated data transfer tools which serve to replace Standard Contractual Clauses (“SCC”). The ICO’s post-Brexit data protection actions include these new documents, which are subject to consultation: Proposals aimed…