This article is part one of a two part series. The second part explaining the impact of the Schrems II decision follows next week. When the Brexit transition period ended on 31 December 2020 the UK became a “third country” for…
On 18 December 2020, NHSX released a template Data Sharing Agreement (“DSA”) for healthcare providers to use when sharing patient data with third party data controllers. The template DSA is designed to help healthcare providers demonstrate compliance with GDPR, confidentiality…
The Court of Justice of the EU (CJEU) has today (16 July, 2020) handed down its decision in the much awaited Schrems II case (Case C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems). This landmark judgment will profoundly…
In WM Morrison Supermarkets plc v Various Claimants the Supreme Court was required to address the following question: If an employee steals the payroll data of his employer’s staff and publishes it online in a vendetta against his employer, should his…
‘There is an article about me online that I disagree with – what are my options?’ Key points: There are a number of civil remedies available should you find yourself the subject of unwanted media publications, these are typically: commencing a claim for…
Such was the interest in two significant judgments involving the ‘right to be forgotten’ handed down by the CJEU this morning (Tuesday 24th September 2019), that the Court’s website was ‘temporarily unavailable’ for an extended period. Although decided under the…
Key considerations when making a decision regarding whether to disclose patient records to the police: Has a Court Order been obtained by the police or is there a witness summons compelling an individual to produce the relevant records to the Court? The…
Recent media coverage of the treatment meted out to politicians and journalists under the guise of political protest has highlighted the use of mobile phones to record video footage, and the posting of such footage to the internet. In that context,…
Providers will be well aware of their obligations in relation to data protection particularly following the coming into force of GDPR.[1] The Information Commissioner’s powers to fine individuals has recently been extended by the Privacy and Electronic Communications (Amendment) Regulations 2018.[2] The…
The right of patients to access their personal data is not new. The GDPR made some potentially significant changes to that right including abolishing fees (in most cases) and shortening the timescale for data controllers to respond to subject access…
