Blog overview

Privacy only truly works when it becomes part of everyday practice. That’s exactly where our Privacy Officers can help organisations. How do they guide this process?

Will you be joining us for our first joint Privacy & Security event? Leading speakers, live demonstrations, and pizza. Sign up for free.

A coordinated enforcement action will take place this year, focusing on transparency and the provision of information.

On behalf of SURF, we carried out a DPIA involving technical analysis of TOPdesk, one of the larger service management platforms.

Privacy Company conducted a DPIA (Data Protection Impact Assessment) for CIO-Rijk on the national videoconferencing service called ‘Rijksvideodienst’.

The CJEU ruling in Case T-557/20, SRB v EDPS, makes pseudonymisation relative to the data recipient, creating compliance uncertainties. Data may become anonymized for certain recipients, losing GDPR protection. This blog explores the implications for your organization and how to address them.

Together with SURF, Privacy Company conducted a comprehensive Data Protection Impact Assessment (DPIA) on the SaaS assessment platform and API of Ans Exam.

There is a race between the development of security measures and hackers who want to overcome these security hurdles. This pushes the development of new security measures.

Privacy Company has performed an update DPIA for SURF on Microsoft 365 Copilot, the generative AI-tool integrated in the Microsoft Office 365 Suite.

The Court of Justice of the European Union has ruled on the Latombe case. Will the EU-US Data Privacy Framework remain in place?

Privacy Company has performed a Data Protection Impact Assessment (DPIA) for SURF/Npuls on the new generative AI-tool EduGenAI. 

Following the Danish example: ja eller nej? A Danish bill proposal made headlines recently. It gives Danes copyright to their voice, body and face in order to better combat deepfakes.

We were commissioned by SLM Rijk to conduct a DPIA with technical research on Red Hat OpenShift. Are there any risks associated with hosting your own container platform?

Information security and privacy go hand in hand. That is why PuraSec and Privacy Company are moving forward together in a joint venture. From now on, we will offer a complete package of services.

In this blog, we discuss how Privacy Officers at Privacy Company help organisations find the right balance to contribute to the success of the organisation.

Is your organisation compliant with the new AI literacy requirements? In this blog we explore a subject that highlights the importance of AI literacy: AI hallucinations.

Extraterritorial fines, the introduction of the AI Act, and discussions on digital sovereignty are only some of the hot topics of 2024. Already forgot what happened last year? This blog will catch you up on the defining moments in data protection of 2024.

In a world where artificial intelligence (AI) is increasingly shaping our work and daily lives, AI literacy is becoming an essential skill. How can you or your organisation become AI-literate?

Ten years of pushing limits, breaking barriers and setting new privacy standards with a wonderful team, clients and partners. Frank Koppejan looks back and ahead on an incredible journey.

In light of the recent fine imposed on Clearview AI by the Dutch Data Protection Authority, this blog post discusses the extraterritorial scope of the GDPR and the difficulty of enforcing the GDPR extraterritorially.

It is not only in Europe that regulators are strict about the use of biometric data in facial recognition software. Recently, the state of Texas in the US secured the largest settlement ($1.4 billion). Namely, Meta had deployed facial recognition software that unlawfully captured and used biometric data of more than a million Texas citizens.

Google has developed a new privacyfriendly version of the Chrome operating system and Chrome browser for the Dutch education sector. According to new verification research by Privacy Company, Dutch schools can (continue to) use Chromebooks in a GDPR-compliant way, if they use this new version, and take the recommended measures.

New research from Privacy Company for SURF and SIVON shows that the Dutch education sector can (continue) to use Google Workspace for Education, if schools and universities take the recommended measures. Google has taken the agreed measures to mitigate the known high data protection risks.

Privacy Nexus is the privacy management software developed by Privacy Company. We asked Frank Koppejan how a consultancy firm came to develop its own software.

Welcoming new faces into your organization is essential, right? So, laptop and mobile phone? Check. Access to online onboarding? Of course. As a responsible employer, you want to ensure new employees feel warmly received, perhaps with a small gift upon entry. However, amidst the hustle and bustle of regulatory tasks, we sometimes forget something crucial: privacy and information security.

A new Update DPIA on Zoom videoconferencing services by Privacy Company shows that Zoom has mitigated all known data protection risks for Dutch Education customers.

The Dutch Strategic Supply Management IBM (SLM Rijk IBM en Red Hat) as executed by the Tax and Customs Administration (Belastingdienst) commissioned an umbrella DPIA to be executed by Privacy Company on the IBM Cloud Pak for Business Automation as a Service (CP4BAaaS).