Data Protection, Privacy Regulators and Supervisory Authorities explores and details the establishment, rules, and powers of data protection regulators and supervisory authorities. It also discusses rights issues (pursuing and defending) as well as the developing area of fines and contestability. Data protection and privacy are arguably the most significant developing areas of law and policy. New regulations span from the GDPR (EU) to the CCPA (California), and other new rules internationally. How the new data protection rules operate on a day-to-day basis is linked to the activities, functions and orders of data protection regulators and supervisory authorities. This brand new title includes coverage of: - The establishment and wider powers of the new data regulators - The new sanctions, orders, penalties and powers to enforce compliance - The new obligations to contact data regulators even before data collections - The detailed GDPR and DPA powers and requirements - Recent fines, penalties and case law including CJEU This book is essential for any entity dealing with the new data protection and privacy issues as no company, organisation nor their internal or external advisors, can ignore these new regulators, nor fully understand the new data protection and privacy compliance landscape without a detailed appreciation of these regulators.

Data Protection, Privacy Regulators and Supervisory Authorities explores and details the establishment, rules, and powers of data protection regulators and supervisory authorities. It also discusses rights issues (pursuing and defending) as well as the developing area of fines and contestability. Data protection and privacy are arguably the most significant developing areas of law and policy. New regulations span from the GDPR (EU) to the CCPA (California), and other new rules internationally. How the new data protection rules operate on a day-to-day basis is linked to the activities, functions and orders of data protection regulators and supervisory authorities. This brand new title includes coverage of: - The establishment and wider powers of the new data regulators - The new sanctions, orders, penalties and powers to enforce compliance - The new obligations to contact data regulators even before data collections - The detailed GDPR and DPA powers and requirements - Recent fines, penalties and case law including CJEU This book is essential for any entity dealing with the new data protection and privacy issues as no company, organisation nor their internal or external advisors, can ignore these new regulators, nor fully understand the new data protection and privacy compliance landscape without a detailed appreciation of these regulators.

The complexities of implementing the General Data Protection Regulation (GDPR) continue to grow as it progresses through new and ever-changing technologies, business models, codes of conduct, and decisions of the supervisory authorities, and the courts. This eminently practical guide to implementing the GDPR – written in an original, problem-solving style by a highly experienced data protection expert with equal knowledge of both law and technology – provides a step-by-step project management approach to building a GDPR-compliant data protection system, assessing, and documenting the risks and then implementing these changes through processes at the operational level. With detailed attention to case law (Member State, ECJ, and ECHR), especially where affecting high-risk areas that have attracted scrutiny, the guidance proceeds systematically through such topics and issues as the following: required documentation, policies, and procedures; risk assessment tools and analysis frameworks; children’s data; employee and health data; international transfers post-Schrems II; data subject rights including the right of access; data retention and erasure; tracking and surveillance; and effects of technologies such as artificial intelligence, biometrics, and machine learning. With its practical examples derived from the author’s experience in building GDPR-compliant software, as well as its analysis of case law and enforcement priorities, this incomparable guide enables company data protection officers and compliance staff to advise on key issues with full awareness of the legal and reputational risks and how to mitigate them. It is also sure to be of immeasurable value to concerned regulators and policymakers at all government levels. “…it's going to be the go to resource for practitioners.” Tom Gilligan, Data Protection Consultant, September 2021 "I purchased this book recently and I’m very glad I did. It’s the textbook I have been waiting for. As someone relatively new to data protection, I was finding it very difficult to find books on the practical side of data protection. This book is very clearly laid out with practical examples and case law given for each topic, which is immensely helpful. I would recommend it to any data protection practitioners." Jennifer Breslin, LLM CIPP/E, AIPP Member

This book provides expert advice on the practical implementation of the European Union’s General Data Protection Regulation (GDPR) and systematically analyses its various provisions. Examples, tables, a checklist etc. showcase the practical consequences of the new legislation. The handbook examines the GDPR’s scope of application, the organizational and material requirements for data protection, the rights of data subjects, the role of the Supervisory Authorities, enforcement and fines under the GDPR, and national particularities. In addition, it supplies a brief outlook on the legal consequences for seminal data processing areas, such as Cloud Computing, Big Data and the Internet of Things.Adopted in 2016, the General Data Protection Regulation will come into force in May 2018. It provides for numerous new and intensified data protection obligations, as well as a significant increase in fines (up to 20 million euros). As a result, not only companies located within the European Union will have to change their approach to data security; due to the GDPR’s broad, transnational scope of application, it will affect numerous companies worldwide.

At the end of the PrimeLife EU project, a book will contain the main research results. It will address primarily researchers. In addition to fundamental research it will contain description of best practice solutions.

Longlisted for the 2022 Inner Temple Main Book Prize The Right to be Forgotten is one of the most publicised areas of the GDPR and has received massive worldwide publicity following judicial and legal developments in Europe. Individual data regulators have increased powers and importance in dealing with RtbF rights for individuals, and it is more important than ever for them to be up to date. The new, second edition, is fully updated to include: - the increasing importance of the role of RtbF in relation to media content (newspapers and television media in particular). - the evolving jurisprudence in terms of RtbF generally, especially in light of increased understanding of the GDPR RtbF and the landmark Google Spain RtbF case. - the recent Google France case. - the potential for group actions, class actions, and litigation funding, in relation to RtbF issues This title is included in Bloomsbury Professional's Intellectual Property and IT online service.

This title brings together the different aspects of the transfer landscape and outlines the separate rules, all in one accessible place. Data transfers (under data protection rules) are one of the most discussed areas of data protection, and are currently undergoing significant change. Data transfers are relied on as an essential function of national and international trade, business, and internet use. It is essential for practitioners to keep abreast of the new data transfer rules and changes for their clients. Following on from Brexit, professionals now have more than one set of transfer rules to comply with, including: - The different data transfer channels - New Adequacy Decision - New Standard Contract rules - New UK Contract rules - Consultation process on future laws - New proposed UK data laws - Data law and data transfer changes - Practical and commercial considerations There are more UK data transfer channels and rules to consider now than at any time previously. The UK data transfer regime is now more complex than the EU data transfer regime, necessitating significant extra diligence by commercial entities. This book is designed to assist UK and international law professionals, in-house data protection professionals and a wide range of other interested readers on the increasingly complex area of data rules. This title is included in Bloomsbury Professional's Intellectual Property and IT online service.