Blog

The GDPRLocal blog offers concise guidance on GDPR compliance, data protection, and information security. It covers topics like creating effective data protection policies, implementing frameworks, and understanding the EU AI Act. This resource is tailored for organizations looking to strengthen their data protection strategies and stay updated on regulatory requirements in the EU and UK.

GDPR

Data Processing Agreement (DPA): What It Must Include

A data processing agreement (DPA) is the written contract GDPR Article 28 requires whenever a processor handles personal data on behalf of a controller. It…

Read blog
Data Processing Agreement (DPA) What It Must Include
AI Risk Assessment A Simple Framework and How To Run It
EU AI Act

AI Risk Assessment: A Simple Framework and How To Run It

An AI risk assessment is a documented review of an AI system’s purpose, data, users and the people it affects, ending in a risk rating…
Swiss FADP vs EU GDPR The Differences That Matter for Your Business
GDPR

Swiss FADP vs EU GDPR: The Differences That Matter for Your Business

The revised Swiss Federal Act on Data Protection (FADP), in force since 1 September 2023, closely follows the GDPR. Three differences matter most: fines of…
What Is AI Governance A Practical Framework for Companies Using AI
AI

What Is AI Governance? A Practical Framework for Companies Using AI

AI governance is the set of roles, rules and checks a company uses to control which AI it builds or buys, what each tool is…
The ROI of Data Protection When Most of the Budget Goes to AI
Data Protection

The ROI of Data Protection When Most Of The Budget Goes to AI

Data protection rarely produces revenue, so its return shows up as losses avoided and faster sales. That return is growing as AI spreads personal data…
What the Leaked Council Documents Say About AI and Personal Data
AI

Digital Omnibus: What the Leaked Council Documents Say About AI and Personal Data

On 21 September 2026, the privacy organisation noyb published leaked Council documents on the Digital Omnibus, along with a strongly worded assessment of their contents….
Is GA4 HIPAA Compliant Healthcare Organisations Guide
HIPAA

Is GA4 HIPAA Compliant? Healthcare Organisations Guide

No. Google Analytics 4 is not HIPAA-compliant, and you can’t make it compliant through configuration. The reason is simple and comes from Google itself. Google…
LinkedIn Content Credentials
AI

LinkedIn Content Credentials: What the Image Badge Means for Privacy

If you’ve noticed a small badge appearing on some images and videos on LinkedIn recently, that’s Content Credentials, a feature LinkedIn is rolling out based…
ChatGPT, Reddit, and Roblox Designated Under the DSA
Data Protection

ChatGPT, Reddit, and Roblox Designated Under the DSA

On 31 August 2026, the European Commission designated ChatGPT as a Very Large Online Search Engine (VLOSE), and Reddit and Roblox as Very Large Online…
EU Digital Identity Wallet
Data Protection

EU Digital Identity Wallet: Latest News and Privacy Concerns

The EU’s digital ID wallet is supposed to land in every member state by 24 December 2026, but the Commission itself doubts everyone will make…
Guide to Data Protection Officer (DPO) Services
Data Protection

Guide to Data Protection Officer (DPO) Services

Ask most business owners whether they need a Data Protection Officer, and the answer is no. It sounds like a rule for banks and hospitals,…
Top 5 GDPR Fines in 2026
GDPR

Top 5 GDPR Fines in 2026

Five fines dominate 2026’s GDPR enforcement record so far, ranked by size: a combined €42 million penalty against two French telecom brands, a £14.47 million…
Do You Need a GDPR Representative A Guide to Requirements, Rules, and Setup
GDPR

Do You Need a GDPR Representative? A Guide to Requirements, Rules, and Setup

You can run your entire business outside Europe and still be subject to European privacy law. Your location does not decide this. Your users do….
Show more posts