data protection
-

Transfers of Personal Data to the United States Under the EU-US Data Privacy Framework
The EU-US Data Privacy Framework (EU-US DPF) is a framework that US-based organisations can certify against, committing to a set of privacy principles. To certify under the EU-US DPF, as well as re-certify annually, organisations must publicly declare their commitment to comply with the principles of the EU-US DPF. The Framework allows self-certified companies that…
-

Council of Europe Adopts First International Treaty on Artificial Intelligence
The Council of Europe has adopted the first-ever international legally binding treaty aimed at ensuring the respect of human rights, the rule of law and democracy legal standards in the use of artificial intelligence (AI) systems.
-

EU AI Act – Will I need to conduct a Data Protection Impact Assessment? What about a Fundamental Rights Impact Assessment?
Essentially, a Data Protection Impact Assessment (DPIA) is mandatory when the processing of personal data is, “likely to result in a high risk to the rights and freedoms of natural persons”. In the context of the AI Act, a DPIA will also need to be conducted by deployers in respect of the use of high-risk…
-

Unlocking Insights: Highlights at the Annual Data Protection Conference
The Annual Data Protection Conference, organised by ADPO, is just around the corner, taking place on 9 May in Dublin. As data privacy professionals, you won’t want to miss this opportunity to delve into the latest trends, challenges, and solutions in the ever-evolving landscape of data protection.
-

EDPB launches its CEF action for 2024 on the right of access
On 28 February 2024, the European Data Protection Board (EDPB) commenced this year’s Coordinated Enforcement Framework (CEF) action on the right of access. This follows its adoption in 2023 of Guidelines on data subject rights – Right of access to assist data controllers to appropriately respond to data access rights requests in accordance with the…
-

FOI and Data Protection – What’s the difference?
The purpose of the Freedom of Information Act 2014 (FOI) is to enable the public to have access to records held by FOI bodies. FOI is similar to data protection and there is a certain amount of overlap because it provides a right of access, including personal records, and to amend factual errors.
-

EDPB CEF 2023 – the role and position of data protection officers
In January 2024, the European Data Protection Board (EDPB) released its report on the 2023 Coordinated Enforcement Action (CEF) regarding the role and designation of Data Protection Officers (DPOs). The report was based on feedback from 25 participating regulators, though various countries focused their inquiries differently, making direct comparisons challenging.
-

Meet the ADPO Executive Committee: March 2024
The ADPO Executive Committee have been elected to represent all ADPO members. This month we would like to introduce you to Kieran Harte, member of the ADPO executive committee supporting training and certification.
-
Au revoir Helen
As Helen Dixon concluded her tenure at the Data Protection Commission on 19 February 2024, it presents an opportune moment to reflect on her impactful 10-year journey and contemplate the path forward.
-
Landmark AI Act Moves Within Reach of Adoption by the EU
Following agreement by the Committee of Permanent Representatives (COREPER) on 2 February 2024 and the adoption by the European Parliament’s Internal Market and Civil Liberties Committees on 13 February 2024, the EU has moved a step closer to adopting a landmark Artificial Intelligence (AI) Act, in a world’s first, following endorsement by EU countries of…
