On the third anniversary of the EU Commission’s proposed new data protection regime, the UK ICO has published its thoughts on where the new regime stands. The message is mixed: progress in some areas but nothing definitive, and no real clarity as to when the new regime may come into force.

The legislative process involves

On May 30, 2014, the European Union’s Article 29 Data Protection Working Party adopted “Statement on the role of a risk-based approach in data protection legal frameworks” (WP281).  The Working Party, made up of EU member state national data protection authorities, confirmed its support for a risk-based approach in the EU data protection

On April 10, 2014, the European Union’s Article 29 Data Protection Working Party adopted ‘‘Opinion 05/2014 on Anonymisation Techniques’’ (WP216).  The Working Party, made up of the national data protection authorities of the EU member states, acknowledges that there is no one-size-fits-all solution and that most anonymisation techniques have inherent limitations.

However, the publication of

On the heels of 2014 predictions from the U.S.-based Of Digital Interest (ODI) editorial team, following are some predictions from our London-based editor, Rohan Massey:

Security breaches

Recent security breaches concerning consumer data in the retail industry have demonstrated the damage breaches of this kind can have on a business’ brand, with potential impact on

On December 4, 2013, the Article 29 Data Protection Working Party (Working Party) endorsed the data protection reform package presented by the European Commission, strongly encouraging all relevant parties to adopt the reform package and determine a final text prior to the end of the term of the current EU legislature.

The Working Party notes