Now in its fifth edition, this invaluable handbook provides a complete guide to the practical application of data protection law. It is fully updated and expanded to include coverage of significant developments in the practice of data protection, and takes account of new legislation as well as guidance published by the Information Commissioner since the last edition. The fifth edition includes coverage of the EU General Data Protection Regulation (GDPR); the implications of Brexit; new guidance from the Information Commissioner's office; coverage of new cases on several aspects of data protection compliance; the latest developments on electronic communications; new chapters on accountability and the role of the Data Protection Officer, and creating a compliance programme.

Now in its third edition, this invaluable handbook offers practical solutions to issues arising in relation to data protection law. It is fully updated and expanded to include coverage of all of the significant developments in the practice of data protection, and takes account of the wealth of guidance published by the Information Commissioner since the last edition. The third edition includes new material on the changes to the Commissioner's powers and new guidance from the Commissioner's office, coverage of new cases on peripheral aspects of data protection compliance and examples of enforcement, the new code on CCTV processing, the new employment code, clarification on the definition of "personal data", the binding corporate rules on the exemption to the export data ban and the new ICT set of model contractual provisions for data exports, and the proposed action by the EU against the UK for failing to implement the Data Protection Directive appropriately. There are new chapters on terminology and data security.

This handbook offers practical solutions to issues arising in relation to data protection law. It is fully updated and expanded to include coverage of all of the significant developments in the practice of data protection.

This book provides expert advice on the practical implementation of the European Union’s General Data Protection Regulation (GDPR) and systematically analyses its various provisions. Examples, tables, a checklist etc. showcase the practical consequences of the new legislation. The handbook examines the GDPR’s scope of application, the organizational and material requirements for data protection, the rights of data subjects, the role of the Supervisory Authorities, enforcement and fines under the GDPR, and national particularities. In addition, it supplies a brief outlook on the legal consequences for seminal data processing areas, such as Cloud Computing, Big Data and the Internet of Things.Adopted in 2016, the General Data Protection Regulation will come into force in May 2018. It provides for numerous new and intensified data protection obligations, as well as a significant increase in fines (up to 20 million euros). As a result, not only companies located within the European Union will have to change their approach to data security; due to the GDPR’s broad, transnational scope of application, it will affect numerous companies worldwide.

This leading handbook offers practical guidance on data protection issues within the UK. Now fully updated with the Data Protection Act 2018 and the Brexit legislation, the handbook remains indispensable for students and professionals working on data protection compliance.

"This book by Peter Carey provides a practical guide to Irish data protection law and its application in practice. It will be a useful addition to the limited literature that is available on this subject." Billy Hawkes, Data Protection Commissioner, September 2010, in the foreword to Data Protection: A Practical Guide to Irish and EU Law by Peter Carey. This title helps you: * Obtain and process information fairly. * Use and disclose the data according to the law. * Understand your obligations in relation to accuracy, completeness and keeping the data up to date. * Ensure that the data that you hold is adequate, relevant and not excessive. * Understand the time limitations related to retaining data. * Ensure your organisation uses appropriate security measures. Clear and concise explanations * Written in non-technical language, making it easy to understand the law as it applies to your organisation. * Gives you practical advice and step-by-step procedures. * Written by a data protection expert. Contents: Introduction to the Law; Terminology; Registration; Fair, Lawful and Legitimate Processing; Compatibility, Relevance, Excessiveness,; Accuracy and Retention; Sensitive Personal data; Data Security; Data Exports; The Rights of Individuals; Exemptions; Outsourcing Personal Data Processing; Electronic Communication; Enforcement. Plus useful appendices including: Data Protection Directive (95/46/EC); E-Privacy Directive (2002/58/EC)and Electronic Communications Network and Services Regulations 2003 Peter Carey is a lawyer and leading expert in data protection law. He is a founder of PDP, Ireland's leading provider of compliance services in information law. Peter has written extensively on data protection law. He is a consultant with Charles Russell and a Visiting Fellow at the London School of Economics.

The complexities of implementing the General Data Protection Regulation (GDPR) continue to grow as it progresses through new and ever-changing technologies, business models, codes of conduct, and decisions of the supervisory authorities, and the courts. This eminently practical guide to implementing the GDPR – written in an original, problem-solving style by a highly experienced data protection expert with equal knowledge of both law and technology – provides a step-by-step project management approach to building a GDPR-compliant data protection system, assessing, and documenting the risks and then implementing these changes through processes at the operational level. With detailed attention to case law (Member State, ECJ, and ECHR), especially where affecting high-risk areas that have attracted scrutiny, the guidance proceeds systematically through such topics and issues as the following: required documentation, policies, and procedures; risk assessment tools and analysis frameworks; children’s data; employee and health data; international transfers post-Schrems II; data subject rights including the right of access; data retention and erasure; tracking and surveillance; and effects of technologies such as artificial intelligence, biometrics, and machine learning. With its practical examples derived from the author’s experience in building GDPR-compliant software, as well as its analysis of case law and enforcement priorities, this incomparable guide enables company data protection officers and compliance staff to advise on key issues with full awareness of the legal and reputational risks and how to mitigate them. It is also sure to be of immeasurable value to concerned regulators and policymakers at all government levels. “…it's going to be the go to resource for practitioners.” Tom Gilligan, Data Protection Consultant, September 2021 "I purchased this book recently and I’m very glad I did. It’s the textbook I have been waiting for. As someone relatively new to data protection, I was finding it very difficult to find books on the practical side of data protection. This book is very clearly laid out with practical examples and case law given for each topic, which is immensely helpful. I would recommend it to any data protection practitioners." Jennifer Breslin, LLM CIPP/E, AIPP Member