Call us at: +44 1772 217800 +353 01 554 9700 +1 303 317 5998

Blog

The GDPRLocal blog offers concise guidance on GDPR compliance, data protection, and information security. It covers topics like creating effective data protection policies, implementing frameworks, and understanding the EU AI Act. This resource is tailored for organizations looking to strengthen their data protection strategies and stay updated on regulatory requirements in the EU and UK.

GDPR

Do You Need a GDPR Representative? A Guide to Requirements, Rules, and Setup

You can run your entire business outside Europe and still be subject to European privacy law. Your location does not decide this. Your users do….

Read blog
Do You Need a GDPR Representative A Guide to Requirements, Rules, and Setup
Brave Privacy and GDPR Purpose Limitation in Practice
Data Protection

Brave Privacy and GDPR: Purpose Limitation in Practice

Brave browser has spent years pushing GDPR enforcement forward: filing a formal complaint against Google’s ad business, and separately accusing 27 EU member states of…
DuckDuckGo Privacy The GDPR Lessons Behind Their Approach
Data Protection

DuckDuckGo Privacy: The GDPR Lessons Behind Their Approach 

DuckDuckGo built its entire brand on one sentence: “We don’t track you.” That claim holds up better than most privacy marketing does, but it’s not…
Singapore AI Training Data Guidelines
AI

Singapore AI Training Data Guidelines: What the PDPC’s Rules Mean For Businesses

On 23 July 2026, Singapore’s Personal Data Protection Commission published its Advisory Guidelines on the Use of Personal Data in Generative AI, alongside a new…
GDPR Myths Eight Common Misconceptions About GDPR
GDPR

GDPR Myths: Eight Common Misconceptions About GDPR

GDPR has been in force since 2018, and it still gets misquoted constantly, sometimes by organisations trying to over-comply out of caution, and sometimes by…
GDPR Compliance for Affiliate Marketing
GDPR

GDPR Compliance for Affiliate Marketing: Roles, Legal Basis, and Cookie Consent

Affiliate marketing runs on tracking. A click on a publisher’s site, a cookie that follows the visitor to the advertiser’s checkout, a network that reports…
NIST vs ISO
Data Protection

NIST vs ISO: Choosing a Security Framework and What It Means for GDPR

Ask a security team whether to build around NIST or ISO 27001, and you will usually get an answer shaped by geography and customer base…
EU AI Act Article 50 Transparency Rules for Businesses
AI

EU AI Act Article 50: Transparency Rules for Businesses

With 2 August 2026 just weeks away, Article 50 of the EU AI Act imposes transparency obligations on a far broader range of organisations than…
California Invasion of Privacy Act
Data Protection

California Invasion of Privacy Act: What CIPA Demand Letters Mean for Your Website

Businesses across the US, UK, and EU are receiving pre-litigation demand letters claiming that their websites are committing illegal wiretapping. The tools named in these…
FIFA World Cup 2026 & Data Privacy
Data Protection

FIFA World Cup 2026 and Data Privacy: What Happens to the Data Behind the World’s Biggest Tournament

The group stage of FIFA World Cup 2026 closed with 4,644,549 fans across 72 matches at 99.7% occupancy, the highest in World Cup history, shattering…
Cookie Banner Reform Where the EU Digital Omnibus Debate Stands
Data Protection

Cookie Banner Reform: Where the EU Digital Omnibus Debate Stands

Cookie banners have been a persistent topic in EU data protection discussions since GDPR came into force. A recent development in the Digital Omnibus legislative…
Smart Glasses and GDPR
GDPR

Smart Glasses and GDPR: Why Europe Is Cracking Down on Camera-Equipped Eyewear

Smart glasses with built-in cameras are now among the fastest-growing categories of consumer electronics worldwide, and European regulators are beginning to ask whether they can…
Notifiable Data Breaches and the Intricacies of Breach Reporting
Data Protection

Notifiable Data Breaches and the Intricacies of Breach Reporting

Security incidents may vary from minor technical anomalies to those that warrant a more serious approach. Where a security incident involves the accidental or unlawful…
Show more posts