Robert Bateman - Page 8
Post-graduate law degree, CIPP/E from the International Association of Privacy Professionals (IAPP). Privacy and Data Protection Research Writer at TermsFeed.
Robert is a freelance writer covering privacy, data protection, security, and AI. He is a respected voice on privacy and has covered been writing, researching, and leading conversations in the field since 2017. Throughout his career, Robert has interviewed some of the leading figures in privacy, including Max Schrems and Johnny Ryan. He has worked with dozens of high-profile privacy professionals and campaigners and has written about almost every aspect of data protection. Robert earned a post-graduate law degree in 2019 and a CIPP/E from the International Association of Privacy Professionals (IAPP) in 2021. His 2019 research on the compatibility of the UK's "immigration exemption" in the Data Protection Act 2018 and the European Convention on Human Rights (ECHR) won the DMH Stallard Prize for Best Project.
Updated GDPR Data Processing Agreement Guidance
The European Data Protection Board (EDPB) has published an opinion that has significant implications for data processing agreements (DPAs). It's crucial for all businesses covered by the EU General Data Protection Regulation (GDPR) to note this updated guidance. Any transfer of personal data from a controller to a processor must be...
CCPA (CPRA): How to Legally Sell Personal Information
The headline provision of the California Consumer Privacy Act (CCPA/CPRA) is the "right to opt out:" the right of consumers to object to the sale of their personal information. Since the CCPA came into force, its broad scope has become increasingly clear. And then the CPRA amended the CCPA by expanding...
Biometrics and the CCPA (CPRA)
The California Consumer Privacy Act (CCPA) as amended by the CPRA is changing how businesses collect and use consumers' personal information. If your business processes biometric information, it's essential that you're aware of your obligations under this law. The CCPA (CPRA) follows privacy laws such as the EU General Data Protection...
GDPR Lawful Basis: Legal Obligation
If you have customers or users in the European Union, you must have a "lawful basis for processing" under the General Data Protection Regulation (GDPR). Having a valid lawful basis is a core requirement under the GDPR. You must carefully consider your lawful basis every time you collect, use, erase, or...
GDPR Requirements for U.S.-Based Businesses
When the EU General Data Protection Regulation (GDPR) came into force in 2018, it brought many changes for businesses inside and outside of the EU. Developments in 2020 have only increased the compliance challenges for non-EU businesses, particularly those in the United States. This article will look at the main GDPR compliance...
What the EasyJet Data Breach Means for Your Business
In May 2020, UK airline EasyJet announced that the personal data of over 9 million of its customers had been breached in a cyberattack. The airline could face massive financial and reputational consequences, including a multi-billion dollar lawsuit and a possible administrative fine under the EU General Data Protection Regulation (GDPR). This...