On October 7th 2022, President Biden signed an executive order to implement the European Union-US Data Privacy Framework. Upon further inspection however, the executive order appears to be replicating the failings of its predecessor. Is the Privacy Shield 2.0 destined to share the fate of its predecessor?
Read article
At the Tory Party conference last week, the UK digital secretary Michelle Donelan announced that the Government planned to replace the UK GDPR with a new data protection legislation. Cutting through the buzz-words and political ‘phrase of the day’, the Government’s plans represent a potentially major change for UK businesses. This change may not be a positive one.
Read article
At the heart of the GDPR legislation lies the 7 fundamental principles. These guiding tenets underpin all aspects of the GDPR. But what are they and how do they affect your business’ GDPR compliance status? In this blog we’re going to look at each of the 7 principles in turn and provide practical examples of how they are applied in a day-to-day setting.
Read article
Incorrect management of website cookies is one of the most common areas of GDPR non-compliance. Businesses of all sizes and sectors are required to abide by the GDPR’s rules on the application of non-essential cookies and management of consent. But what does this mean for your website and your cookies? In this Tacita Tips we’ll be looking at some common questions that can help you to audit your website cookies.
Read article
In September 2022, the first fine of the Californian Consumer Privacy Act (CCPA) was issued. Sephora, the cosmetics giant, were fined $1.2 million for three violations of the CCPA. This fine followed an official warning from the Californian Attorney General after Sephora were investigated as part of a spot-check by Californian data privacy authorities
Read article
On 2nd September, Instagram and its parent company Meta were fined $403m for inadequate handling of children’s data under the EU GDPR. The fine was the culmination of a long running investigation by the Irish Data Protection Commission (DPC) into the social media company and is the largest fine that Meta has been issued to date. This fine is the second largest ever issued by a European data protection authority, following the €746m fine issued by the Luxembourg data authority against Amazon last year.
Read article
The overturning of Roe v Wade by the U.S. Supreme Court on the 24th June this year (2022) has upended women’s reproductive rights in the USA. It is unlikely to end there. As the ripple effects continue to be felt across the States and beyond, serious questions regarding erosion of women’s privacy are being raised. The answers to these privacy questions posit a deeply unsettling future for women in America and the use of their personal data.
Read article