Blog

The GDPRLocal blog offers concise guidance on GDPR compliance, data protection, and information security. It covers topics like creating effective data protection policies, implementing frameworks, and understanding the EU AI Act. This resource is tailored for organizations looking to strengthen their data protection strategies and stay updated on regulatory requirements in the EU and UK.

HIPAA

Is GA4 HIPAA Compliant? Healthcare Organisations Guide

No. Google Analytics 4 is not HIPAA-compliant, and you can’t make it compliant through configuration. The reason is simple and comes from Google itself. Google…

Read blog
Is GA4 HIPAA Compliant Healthcare Organisations Guide
LinkedIn Content Credentials
AI

LinkedIn Content Credentials: What the Image Badge Means for Privacy

If you’ve noticed a small badge appearing on some images and videos on LinkedIn recently, that’s Content Credentials, a feature LinkedIn is rolling out based…
ChatGPT, Reddit, and Roblox Designated Under the DSA
Data Protection

ChatGPT, Reddit, and Roblox Designated Under the DSA

On 31 August 2026, the European Commission designated ChatGPT as a Very Large Online Search Engine (VLOSE), and Reddit and Roblox as Very Large Online…
EU Digital Identity Wallet
Australian Privacy Act

EU Digital Identity Wallet: Latest News and Privacy Concerns

The EU’s digital ID wallet is supposed to land in every member state by 24 December 2026, but the Commission itself doubts everyone will make…
Guide to Data Protection Officer (DPO) Services
Data Protection

Guide to Data Protection Officer (DPO) Services

Ask most business owners whether they need a Data Protection Officer, and the answer is no. It sounds like a rule for banks and hospitals,…
Top 5 GDPR Fines in 2026
GDPR

Top 5 GDPR Fines in 2026

Five fines dominate 2026’s GDPR enforcement record so far, ranked by size: a combined €42 million penalty against two French telecom brands, a £14.47 million…
Do You Need a GDPR Representative A Guide to Requirements, Rules, and Setup
GDPR

Do You Need a GDPR Representative? A Guide to Requirements, Rules, and Setup

You can run your entire business outside Europe and still be subject to European privacy law. Your location does not decide this. Your users do….
Brave Privacy and GDPR Purpose Limitation in Practice
Data Protection

Brave Privacy and GDPR: Purpose Limitation in Practice

Brave browser has spent years pushing GDPR enforcement forward: filing a formal complaint against Google’s ad business, and separately accusing 27 EU member states of…
DuckDuckGo Privacy The GDPR Lessons Behind Their Approach
Data Protection

DuckDuckGo Privacy: The GDPR Lessons Behind Their Approach 

DuckDuckGo built its entire brand on one sentence: “We don’t track you.” That claim holds up better than most privacy marketing does, but it’s not…
Singapore AI Training Data Guidelines
AI

Singapore AI Training Data Guidelines: What the PDPC’s Rules Mean For Businesses

On 23 July 2026, Singapore’s Personal Data Protection Commission published its Advisory Guidelines on the Use of Personal Data in Generative AI, alongside a new…
GDPR Myths Eight Common Misconceptions About GDPR
GDPR

GDPR Myths: Eight Common Misconceptions About GDPR

GDPR has been in force since 2018, and it still gets misquoted constantly, sometimes by organisations trying to over-comply out of caution, and sometimes by…
GDPR Compliance for Affiliate Marketing
GDPR

GDPR Compliance for Affiliate Marketing: Roles, Legal Basis, and Cookie Consent

Affiliate marketing runs on tracking. A click on a publisher’s site, a cookie that follows the visitor to the advertiser’s checkout, a network that reports…
NIST vs ISO
Data Protection

NIST vs ISO: Choosing a Security Framework and What It Means for GDPR

Ask a security team whether to build around NIST or ISO 27001, and you will usually get an answer shaped by geography and customer base…
Show more posts