Call us at: +44 1772 217800 +353 01 554 9700 +1 303 317 5998

Blog

The GDPRLocal blog offers concise guidance on GDPR compliance, data protection, and information security. It covers topics like creating effective data protection policies, implementing frameworks, and understanding the EU AI Act. This resource is tailored for organizations looking to strengthen their data protection strategies and stay updated on regulatory requirements in the EU and UK.

AI

EU AI Act Article 50: Transparency Rules for Businesses

With 2 August 2026 just weeks away, Article 50 of the EU AI Act imposes transparency obligations on a far broader range of organisations than…

Read blog
EU AI Act Article 50 Transparency Rules for Businesses
California Invasion of Privacy Act
Data Protection

California Invasion of Privacy Act: What CIPA Demand Letters Mean for Your Website

Businesses across the US, UK, and EU are receiving pre-litigation demand letters claiming that their websites are committing illegal wiretapping. The tools named in these…
FIFA World Cup 2026 & Data Privacy
Data Protection

FIFA World Cup 2026 and Data Privacy: What Happens to the Data Behind the World’s Biggest Tournament

The group stage of FIFA World Cup 2026 closed with 4,644,549 fans across 72 matches at 99.7% occupancy, the highest in World Cup history, shattering…
Cookie Banner Reform Where the EU Digital Omnibus Debate Stands
Data Protection

Cookie Banner Reform: Where the EU Digital Omnibus Debate Stands

Cookie banners have been a persistent topic in EU data protection discussions since GDPR came into force. A recent development in the Digital Omnibus legislative…
Smart Glasses and GDPR
GDPR

Smart Glasses and GDPR: Why Europe Is Cracking Down on Camera-Equipped Eyewear

Smart glasses with built-in cameras are now among the fastest-growing categories of consumer electronics worldwide, and European regulators are beginning to ask whether they can…
Notifiable Data Breaches and the Intricacies of Breach Reporting
Data Protection

Notifiable Data Breaches and the Intricacies of Breach Reporting

Security incidents may vary from minor technical anomalies to those that warrant a more serious approach. Where a security incident involves the accidental or unlawful…
10 years GDPR A Decade of Europe's Top Privacy Law
GDPR

10 years GDPR: A Decade of Europe’s Top Privacy Law

The GDPR turns 10 in 2026. Over the past decade, EU data protection authorities have issued more than €8 billion in fines, and over 700,000…
€31.8 Million GDPR Fine for an Insider Breach
Data Protection

€31.8 Million GDPR Fine for an Insider Breach That Ran Undetected for Two Years

On 30 March 2026, Italy’s data protection authority, the Garante della Privacy, issued a €31.8 million GDPR fine against one of the country’s largest financial…
CRM Data Retention Compliant Customer Data Management
Data Protection

CRM Data Retention: GDPR-Compliant Data Management

The storage limitation principle under GDPR Article 5(1)(e) requires that personal data be kept only for as long as necessary for the purposes for which…
A GDPR Transparency Lesson
Data Protection

The Odido Case: A GDPR Transparency Lesson 

The Dutch telecom provider Odido forwarded personal data from customers’ home routers to Lifemote, an American AI company, without clearly disclosing this in its privacy…
US State-Level Data Protection Requirements
Data Protection

Data Security by State: American State-Level Data Protection Requirements

Data security requirements in the United States vary significantly from one state to another, with no single federal law establishing uniform standards for how businesses…
GDPR US Equivalent What American Businesses Need to Know
GDPR

GDPR US Equivalent: What American Businesses Need to Know

The United States has no single, all-encompassing privacy law like the GDPR. That does not mean American businesses are off the hook when it comes…
Invasion of Privacy Laws in the UK Rights, Regulations, and Protections
Data Protection

Invasion of Privacy Laws in the UK: Rights, Regulations, and Protections

Updated: June 2026 Invasion of privacy occurs when someone unlawfully intrudes into another person’s private life, potentially causing harm or emotional distress. In the UK,…
Show more posts