Latest 17 articles, page 1 of 2
Design a GDPR survey with a reasoned legal basis, proportionate questions, clear information and a practical collection-to-deletion acceptance record.
When a DPO is mandatory under GDPR Article 37, how to appoint one, and recent EDPB enforcement findings.
Only the DPO is regulated by the GDPR. See how the Data Protection Officer differs from a compliance officer, when it is mandatory, and who appoints one.
The seven GDPR principles explained through decisions, evidence and a hypothetical registration form: lawful basis, purpose, minimisation, accuracy, retention, security and accountability.
Implement GDPR data storage requirements: lawful purpose, retention rules, security, backups, processor contracts, transfers and deletion evidence.
GDPR vs AML conflicts: 5-10 year retention, KYC data minimization, AMLA 2026 launch, sanctions screening. Resolutions per Art. 6(1)(c) + Art. 23.
Data minimization means collecting only what a purpose requires. Article 5(1)(c) explained: the three tests, field-by-field examples, CJEU rulings, fines.
The CNIL has just imposed a €500,000 fine on a company for conducting commercial prospecting without complying with the GDPR
Here is the list of GDPR information notices that you must mandatorily provide before collecting personal data