Data Protection - GDPR Resources













Jane Lambert

These are the slides for a talk that I gave last week on the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council  of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) ("the GDPR").

Why the GDPR is important
The regulation will come into force simultaneously in all 28 member states of the European Union including the United Kingdom on the 25 May 2018. It will repeal the Data Protection Directive (Directive 95/46/EU) which was transposed into English and Welsh as well as Scottish and Northern Irish law by the Data Protection Act 1998.  Although the GDPR will eventually cease to be part of our law either when we leave the EU on 29 March 2019 or at the end of any transition or implementation period that may come into effect immediately after our exit, its provisions are likely to be preserved by a new Data Protection Bill which is making its way through Parliament.

My Interest in Data Protection
I have taken a professional interest in data protection ever since 1983 when I was legal adviser to VISA International for Europe, the Middle East and Africa. I attended the first IBA conference on trans-border data flows in Toronto in October 1984 and TBDF was a hot topic at the International Telecommunications Union's legal forum in Geneva in November of that year. I was also commissioned by Butterworths to contribute the first chapter on data protection to both Atkin's Court Forms and the Encyclopedia of Forms and Precedents shortly afterwards.. I have advised businesses on data protection law and represented them in civil proceedings ever since. For several years I offered an arbitration service to resolve disputes between US businesses and data subjects pursuant to the "safe harbor" agreement between the Commission and the US government.

Introduction and Overview
The above presentation is an introduction to and overview of the GDPR.  It was given to colleagues because barristers are affected by data protection like everyone else.  Most of my talk focused on the guidance prepared by the Information Commissioner's Office for micro-businesses on 12 March 2018 which I strongly recommend (see also Making Data Protection Your Business on the Commissioner's website).

Data Protection Blog
Because there is a lot of discussion about the GDRP (not all of it well informed) I launched the NIPC Data Protection Blog on 11 Aug 2017 (see Welcome to NIPC Data Protection 11 Aug 2017).  You can reach it through the menu at the top left hand corner of the home page of this blog or directly by typing  http://nipcdp.blogspot.co.uk/ into your browser.

Basic Guidance
Those who need basic information on data protection may find the following articles helpful:
Change Evolutionary and not Revolutionary
The law will change in a number of ways on 25 May 2018 but not nearly as much in practical terms as many people think.  For instance, one of the differences between the new law and the current law is that the GDPR will impose an express duty on data controllers to demonstrate that they comply with the data protection principles instead of just complying with them, Probably there was always an implied duty to demonstrate compliance but now it is spelt out. 

Frequently asked questions
Two issues which crop up a lot in questions and answers are fines because the maximum financial penalty that the Commissioner can impose will rise from £500,000 to €20 million and data subjects' consents since a data subject's signature on a paper consenting to processing is a good way of showing that your processing activity is lawful.

Fines
On fines, I have written GDPR _ Fines on 7 Dec 2017. 

Consent
Following a talk that I gave to the staff of a small local authority in Kent in December, I wrote GDPR - Lawfulness of Processing and Consent 7 Dec 2017.

I wrote a further article on consent yesterday after the presentation mentioned above (see Consent to Processing of Personal Data 23 March 2018).

Further Information
Anyone wishing to discuss this article or data protection in general should call me on 020 7404 5252 during office hours or send me a message through my contact form.

Comments

Post a Comment

Popular posts from this blog

Copyright in Photographs: Temple Island Collections and Creation Records

Image
In our very first NIPC newsletter which we published in June 1997 I wrote a case note on Mr. Justice Lloyd's decision in  Creation Records Ltd. and Others v News Group Newspapers Ltd   [1997] EMLR 444, [1997] EWHC Ch 370, (1997) 16 Tr LR 544. In that case Mr. Noel Gallagher of Oasis and others applied for an interlocutory injunction to restrain The Sun from offering for sale and selling a poster of Oasis that featured a photo of an elaborate set that included a white Rolls Royce in a country club swimming pool. The Sun's photograph was very similar to the photograph that appeared on an Oasis album cover. The similarity arose because The Sun's photographer shot the same scene at roughly the same time and from the same angle as Mr. Gallagher's photographer but he did not reproduce any part of Oasis's print or negative. The learned judge held that the plaintiffs had no arguable case for infringement of copyright though he accepted that they had an arguable case for br...
Read more

"What is meant by "Due Cause" in s.10 (3) of the Trade Marks Act? The Red Bull Case

Image
Amsterdam   Source Wikipedia According to Wikipedia  Red Bull is the most popular energy drink in the world, with 5.2 billion cans sold in 2012. Its manufacturer, Red Bull GmbH , has registered the RED BULL mark has registered those words and their accompanying logo as word and device marks in trade mark registries around the world including the Benelux Office for Intellectual Property ( "BOIP" ) . The company registered that sign with BOIP for non-alcoholic drinks in class 32 with effect from 11 July 1983. After decades of massive sales and extensive advertising nobody could argue that that mark has a reputation within the meaning of art 5 (2) of the Trade Marks Directive (Directive 2008/95/EC of the European Parliament and the Council of 22 October 2008   to approximate the laws of the Member States relating to trade marks OJ 8.11.2008 p 299/25).  S.10 (3) of our Trade Marks Act 1994   implements that provision. There is in the Net...
Read more

Copyright: Creation Records Ltd. v News Group

It is trite law that if two photographers take identical pictures of the same scene at the same time from the same position each of their photographs is an original work and neither infringes the copyright in the other. However, much of the skill of a photographer lies in his choice of subject and the arrangement of the scene. The question whether copyright subsists independently in such an arrangement arose in Creation Records Ltd. v News Group Newspapers Ltd . (1997) The Times 27 April.   The Facts A swimming pool at a country club was drained and various props including a white Rolls Royce motor car assembled for a photograph of a well-known group of musicians for reproduction on their album cover. Although the public was not admitted to the session certain fans of the group who happened to be there were allowed to photograph the scene before official pictures were taken. A freelance photographer who was booked into the club photographed the scene during the session. One of his pict...
Read more