The obligation of maintaining a record of processing activities: which constraints on implementation?

CategoriesDocumentsPosted on

The GDPR has introduced the obligation to maintain a record of processing activities. This obligation, mostly conceived as a further burden for the data controller and a mere formal fulfillment, actually performs substantial functions.

Read more "The obligation of maintaining a record of processing activities: which constraints on implementation?"

Frequent errors in the application of the “privacy” legislation: consequences of the improper use of the consent

CategoriesDocumentsPosted on

The article describes the (disastrous) consequences – practical and legal – of one of the most frequent errors made by data controllers dealing with privacy rules: the use of default consent as the legal basis for processing, regardless of any assessment on its actual adequacy to the specific case.

Read more "Frequent errors in the application of the “privacy” legislation: consequences of the improper use of the consent"

The DPO and the risk of conflict of interest: characteristics and distribution of responsibilities

CategoriesDocumentsPosted on

The figure of the DPO established by the GDPR, whether it is a subject inside or outside the company, sometimes risks finding itself in situations of conflict of interest, with all the consequences that come from this situation. It is therefore useful to know the possible problems and the solutions to avoid them.

Read more "The DPO and the risk of conflict of interest: characteristics and distribution of responsibilities"

E-privacy regulation: the council of the EU released its proposed amendments

CategoriesDocumentsPosted on

On September 8, the Council of the EU released its proposed amendments to the draft ePrivacy Regulation (“Regulation”) which has already been the subject of different opinions and draft amendments over the last few months, as highlighted in our previous news.

Read more "E-privacy regulation: the council of the EU released its proposed amendments"

A compliance method – GDPR: new culture in the personal data protection

CategoriesDocumentsPosted on

We present the implementation model of the General Data Protection Regulation proposed to companies by the data protection team of Jacobacci & Associati: we use a multidisciplinary approach (legal, governance, technical, organizational) to accompany the company to define a framework for the implementation of the GDPR that can then apply continuously in a context of autonomy.

Read more "A compliance method – GDPR: new culture in the personal data protection"