Posted by Pedro Méndez de Vigo
12 April, 2021
As we noted in previous posts, 2020 was an important year for the data economy in the European Union. In
Read MoreData protection
European Data Protection Board Strategy for 2021-2023
Posted by Pedro Méndez de Vigo
17 March, 2021
On December 15, the European Data Protection Board (EDPB) published its strategy for 2021-2023. The EDPB’s mission is to ensure
Read MoreSpain sanctioned for the delay in transposing the Data Protection Directive in criminal investigations
Posted by Jorge Monclús
4 March, 2021
In a recent blog post, we reported on the approval of the draft Organic Act by the Council of Ministers
Read MoreThe European Data Protection Supervisor issues an opinion on the proposed Digital Services Act
Posted by Ane Alonso
1 March, 2021
On February 10, the European Data Protection Supervisor (EDPS) published an opinion on the proposal for a Digital Services Act
Read MoreThe proposed e-Privacy Regulation gets a new lease on life and is set to be negotiated with the European Parliament
Posted by Inés Cabañas
23 February, 2021
On February 10, the Council of the European Union finally approved its position on the proposed Regulation on Privacy and
Read MoreSanctions for infringing data protection legislation
Posted by Miquel Peguera
22 February, 2021
May will mark three years since the General Data Protection Regulation (GDPR) became directly applicable. Since May 25, 2018, national
Read MoreProgress in processing the new regulation on data protection in criminal investigations
Posted by Jorge Monclús
17 February, 2021
On Tuesday, February 9, 2021 the Council of Ministers approved the Draft Organic Law regulating the protection of personal data
Read MoreCrossborder personal data processing: Which authority has competence? Conclusions of the Advocate General in case C-645/19
Posted by Ainhoa Rey
16 February, 2021
What powers do national supervisory authorities have regarding infringements caused by crossborder data processing? This is the fundamental question examined
Read MoreRoyal Decree 43/2021: the implementation of the cybersecurity framework in Spain
Posted by Albert Agustinoy
8 February, 2021
Royal Decree 43/2021 (“RD 43/2021”) published on January 28, implements many aspects of Royal Decree-Law 12/2018 (“RD 12/2018”) on the
Read MoreGuidelines on the requirements for audits of processing involving Artificial Intelligence (“IA”)
Posted by Adaya Esteban
5 February, 2021
On January 12, the Spanish Data Protection Agency (“AEPD”) published new guidelines on the requirements that audits of processing involving
Read More