SearchSearch results for: “”

On 16 march 2023, Advocate General Pikamäe issued his opinion on the scope of data subject rights in the context of algorithmic credit scoring.

The General Data Protection Regulation (GDPR) is one of the most significant development in the European data strategy in the past years and is continuously evolving.

The European Court of Justice has issued a landmark judgement in the Schrems II-case that reshapes data transfer rules from EU to non-adequate third countries, impacting the regulatory landscape significantly.

Though the European data protection authorities have taken their time in enforcing the GDPR two announcements by the ICO in the UK regarding proposed fines for British Airways and Marriott demonstrate that large fines are about to start landing regularly.

Nearly a year after the GDPR took effect, questions have emerged about its interaction with public law. This three-part blog series "GDPR and Public Law" explores three key issues regarding its impact on public law and government.

Nearly a year after the GDPR took effect, questions have emerged about its interaction with public law. This three-part blog series "GDPR and Public Law" explores three key issues regarding its impact on public law and government.

Nearly a year after the GDPR took effect, questions have emerged about its interaction with public law. This three-part blog series "GDPR and Public Law" explores three key issues regarding its impact on public law and government.

The EDPB adopted on 9 April 2019 a set of draft guidelines on personal data processing under Article 6(1)(b) GDPR in the context of providing online services to data subjects.

The Belgian law of 25 November 2018 containing various provisions relating to the National Register and the population registers has amended the law of 8 August 1983 regulating the National Register and the use of the national identity number.

Companies increasingly face cybercrime incidents. Stibbe offers tailor-made solutions.

If personal data of a Korean employee working for a U.S. company is processed in the HR department in London, does the GDPR apply? Is the GPDR applicable to a Dutch customer visiting the website of a Canadian company?

A Brexit without a deal, or with a deal that does not cover all relevant aspects, is still a potential scenario. We have highlighted a number of unexpected legal consequences of Brexit in such a no deal or incomplete deal scenario.

Uit de Brexit deal volgt dat gedurende de eerste 4 maanden van 2021 de doorgifte van persoonsgegevens naar het Verenigd Koninkrijk (“VK”) nog op dezelfde manier mag plaatsvinden als voorheen.

In 2021, a Belgian hospital fell victim to a ransomware attack that disrupted critical operations and compromised the personal data of 300,000 people. As a result, the Belgian data protection authority imposed a fine of €200,000 three years later.

This blogpost explores the evolving legal landscape governing AI in life sciences, with a focus on medical device regulation, data protection and intellectual property.

The European Data Protection Board (EDPB) approved a new statement regarding the application of the PNR directive, in light of the ruling of the Court of Justice of the EU (CJEU) in case C-817/19.

On 16 January, 2025, the EDPB released its guidelines on pseudonymisation. These guidelines are not yet finalized, as they remain open for public consultation until 28 February. In this blogpost, we highlight the key takeaways.

In recent years, the ECJ has issued landmark judgments with far-yielding consequences for data controllers and data processors. To celebrate Data Privacy Day 2023, we highlighted the most impactful judgments of the ECJ from the past year.