While the sale of marketing lists is generally prohibited, as retail insolvencies increase Handley Gill’s specialist data protection consultants analyse the Information Commissioner’s laissez-faire approach to the purchase and use of the CRM databases of companies in administration and consider the opportunity this offers to administrators and potential purchasers of distressed businesses by reference to the recent case studies of Tesco’s purchase of Paperchase’s assets and the sale of The Body Shop’s assets.

Let the cookie crumble…

As the Information Commissioner warns websites they have 30 days to achieve cookie compliance or face regulatory enforcement action, Handley Gill’s specialist data protection consultants advise on how to ensure that the Information Commissioner’s appetite for enforcing cookie compliance under PECR isn’t a recipe for disaster for your organisation. While amending your cookie banner is a bitter pill to swallow, your website won’t be toast and you can avoid having to eat humble pie.

Nicola Cain11 December 2023Data Protection, Personal Data, UK GDPR, UK GENERAL DATA PROTECTION REGULATION, PECR, Privacy and Electronic Communications (EC Directive) Regulations 2003, SI 2003/2426, Cookies, Third Party Cookies, Cookie Consent, Consent, First Party Cookies, Session Cookies, Persistent Cookies, Cookie Banner, Cookie Notice, Cookie Policy, Online Tracking, Tracking Technologies, Tracking Pixels, Data Protection & Digital Information (No.2) Bill, Data Protection & Digital Information Bill, Bill 001 2023-24, Bill 265 2022-23, Bill 314 2022-23, HL Bill 30, Device Fingerprinting, Strictly Necessary Cookies, Online Advertising, Personalised Advertising, Behavioural Advertising, Data Regulation, Data enforcement, Information Commissioner, ePrivacy Directive, Directive 2002/58/EC, GDPR, General Data Protection Regulation, Regulation 6 Privacy and Electronic Communications Regulations, Regulation 6 PECR, Article 7 GDPR, Article 7 General Data Protection Regulation, Recital 32 GDPR, Recital 32 General Data Protection Regulation, Article 7 UK GDPR, Recital 32 UK GDPR, Dark Patterns, Online Choice Architecture, CMA, Competition & Markets Authority, OCA, DRCF, Digital Regulation Co-operation Forum, Article 4(11) GDPR, Article 4(11) UK GDPR, Privacy by Design, Article 25 UK GDPR, Article 25 GDPRComment

Data Downgrade Down Under?

Handley Gill Limited’s data protection consultants consider the implications of the 2021 Free Trade Agreement between the UK and Australia - taking effect on 31 May 2023 - for the protection of personal data and the ease of international transfers of personal data.

Nicola Cain31 May 2023BREXIT, UK, United Kingdom, Australia, Data Protection, Personal Data, Privacy, Data Privacy, GDPR, General Data Protection Regulation, UK GDPR, UK GENERAL DATA PROTECTION REGULATION, DATA PROTECTION ACT 2018, Section 17A Data Protection Act 2018, Adequacy Decision, Adequacy Regulations, New Zealand, European Commission, Secretary of State for Science Innovation & Technology, Marketing, Direct Marketing, Consent, Marketing Consent, Privacy Act, Privacy Act Review, Foreign Commonwealth and Development Office, Foreign Office, Department for Business and Trade, Department for Science Innovation and Technology, Department for Culture Media & Sport, Data Transfer, Restricted Data Transfer, Restricted International Data Transfers, International data transfers, Standard contractual clauses, Derogations, Data Controller, Data ProcessorComment

Watch and learn

Handley Gill Limited, and its specialist data protection consultants, respond to the Information Commissioner’s (ICO’s) consultation on its draft ‘Employment practices: monitoring at work’ guidance, which addresses the lawfulness of the use of workplace monitoring and surveillance technologies in the workplace (whether office, home or remote working) and on workers’ devices.

Who's Under Investigation?

The Information Commissioner recently published an opinion, 'Who’s Under Investigation? The processing of victims’ personal data in rape and serious sexual offence investigations', which calls on the police, CPS and other prosecution agencies to overhaul their approach to the obtaining and retention of victim personal data.

Nicola Cain13 June 2022Data Protection, Personal Data, Data Protection Act 2018, Part 3 Data Protection Act 2018, Law enforcement processing, Information Commissioner, Police, Training, Consent, Lawful Basis for Processing, Criminal Justice System, Victims, Witnesses, Law EnforcementComment