Privacy & data protection

The Belgian Data Protection Authority (BDPA) and DNS Belgium have concluded a cooperation protocol that allows .be websites to be taken offline for GDPR infringements. 

What are the main takeaways from the EDPB guidance and draft SCCs? The CJEU ruling from 16 July 2020 in the Schrems II case created a lot of uncertainty for organisations transferring personal data outside the EEA. But how should this requirement be fulfilled in practice?

The Litigation Chamber of the Data Protection Authority (DPA) ruled in decision No 35/2020 that an unspecified Belgian disciplinary and judicial authority (“Sports Court”) was entitled to forward a profile photo of Facebook to sports commissioners in order to have a so-called “ban on presence”, m

Earlier this year, the European Insurance and Occupational Pensions Authority (EIOPA) published the final version of its guidelines on outsourcing to cloud service providers.

On 17 July 2020, the Court of Justice of the European Union ('CJEU') delivered its long awaited judgment in the Schrems II case. The Court declared the Privacy Shield as a mechanism for the transfer of personal data from the EU to the US invalid. 

It is about two years ago that the General Data Protection Regulation (also known as the GDPR) became applicable.

On 4 June 2018, the Data Protection Officer (DPO) of a telecom company reported a data breach to the Belgian Data Protection Authority.

Did you know the GDPR can be relevant to your company even if you do not have an establishment in the EU? In this blog you will read 5 things you need to know about the GDPR representative, which you may have to appoint. 

Now that a large part of Belgium and the world is in the grip of the new coronavirus (COVID-19) and preventive measures have been promulgated by the Belgian government, the question arises as to what personal data organisations are allowed to process of their employees in the context of the new c