If you are handling personal data of EU citizens, you will need some justification in order to do so.  Under the new rules, the basic concept of consent has not changed, nor has its role as a lawful basis for processing personal data: consent remains a possible option.  However, the GDPR adds new language –… Read more »

Who is covered by the General Data Protection Regulation (GDPR)? If a company has EU-based employees whose behaviour it “monitors” (see below) it will need to take steps to ensure that it is compliant with the GDPR when it comes into force in May 2018.  “Monitoring” in an employment context is not defined in the GDPR… Read more »