Blog overview

The GDPR is at the heart of our team's work. This means that we work with it on a daily basis, analyse the texts, understand the obligations and, in particular, translate them into practical tools for our customers. Which article do our colleagues prefer to work with? How do we help our customers to implement the articles? In this blog series our team is talking, each about one specific article.

On the 18th of June, Transvision B.V. in Capelle aan den IJssel, Netherlands, received the first Privacy Maturity Certificate by Privacy Company. Independent testing by auditors of Accoris Audit Services B.V. has shown that Transvision handles personal data responsibly. With the quality mark, Transvision can now also make this visible to its customers and suppliers and distinguish itself in the area of privacy.

The General Data Protection Regulation (GDPR) contains a number of new obligations compared to the previous legislation. Since May 25, 2018, organizations have to ensure they comply with these requirements. An important question is: how?

Good news! Since the end of May, Facebook offers a data processing agreement for its advertising service Custom Audiences! But is the use of this service now privacy proof, and may organisations now use this service without the consent of their customers and visitors? Unfortunately, the answer is not yet clear.

The General Data Protection Regulation describes a number of roles in the data processing process, including the role of Data Protection Officer. The Data Protection Officer is also referred to as the DPO. A DPO is an internal or external supervisor of compliance with the privacy ordinance within an organisation. This blog post addresses the question of when the GDPR really does require a DPO.

Yes, I do. Anyone who wants to have sex with someone in Sweden needs explicit permission since July 2017. Proceeding without an explicit "yes, I do" can quickly lead into legal trouble.

In the blog series The 7 biggest misunderstandings about the GDPR, we settle the 7 most common misunderstandings. This week we are dealing with covenants.

Officially, the GDPR speaks of a Data Protection Impact Assessment (DPIA). However, PIA and DPIA are used interchangeably, although PIA is the best known abbreviation.

The Data Protection Officer (DPO) is often mentioned in the same breath when talking about the General Data Protection Regulation (GDPR). The GDPR stipulates that the appointment of a DPO is compulsory in some cases, but it is a misunderstanding that a DPO is compulsory for all companies. It is also not true that a DPO is only mandatory for large organisations. In this blog you will find out everything about the DPO.

In the blog series The 7 biggest misunderstandings about the GDPR, we settle the 7 most common misunderstandings. This week we are dealing with the register of processing operations.

In the blog series "The 7 biggest misunderstandings about the GDPR" we settle the 7 most frequently heard misunderstandings. The last blog post explained that the General Data Protection Regulation (GDPR) applies to the processing of personal data. But when we talk about pseudonymised data, many people think that the GDPR does not apply. This is a misunderstanding.

There are still many myths and fairytales about the GDPR. In this blog series we deal with the 7 most frequently heard misunderstandings.

In the blog series "The 7 biggest misunderstandings about the GDPR" we settle the 7 most frequently heard misunderstandings. One of the key concepts in the General Data Protection Regulation (GDPR) is ‘personal data’. There are often misunderstandings about this concept. It is not only about names, but also about privacy-sensitive information. In this blog we explain what a personal data is.

Carolin wrote a guest article on the EU Money Laundering Directive for the German publication Netzpolitik.org. Click here to get to the article.

If you process personal data as an organisation, it is often mandatory under the General Data Protection Regulation (GDPR) to keep a record of processing activities. A misunderstanding that exists among a lot of people is that the obligation of a record of processing activities only applies to bigger companies. This is not true. Also smaller organisations need to comply with this obligation.