Data and cyber

Contact: Jon Bartley and Richard Breavington

Data and cyber

ICO launches data protection audit framework

The ICO has launched a new audit framework to help organisations assess their own compliance. It covers a range of areas that the ICO look at when it assesses an organisation's data protection compliance, conducting both consensual and compulsory audits. This framework has nine toolkits covering the following areas:

•   accountability
•   records management
•   information and cyber security
•    training and awareness
•    data sharing
•    requests for data
•    personal breach data management
•   artificial intelligence
•   age-appropriate design.

Find out more

EDPB releases guidance on processors and legitimate interests

The European Data Protection Board (EDPB) adopted an opinion regarding a controller's obligations when using multiple processors and sub-processors. Answering questions posed by the Danish data regulator, the EDPB advised on the extent of checks that a controller must implement to verify whether processors (and sub-processors) provide "sufficient guarantees" to implement appropriate technical and organisational measures under Article 28. Find out more.

Separately, the EDPB is consulting on guidance regarding the legitimate interest lawful basis until 20 November 2024. The guidance contains a number of requirements that must be fulfilled before a controller can rely on this lawful basis, including that legitimate interests must be clearly and precisely articulated, real and present.

Find out more

Data and cyber

Data Dispatch newsletter:
key developments in data protection law

The latest edition of our data dispatch newsletter launched on 2 October 2024, providing an easy-to-digest summary of key developments in data protection law.

Read the latest update

DORA Watch – August and September 2024

As financial entities and ICT service providers undergo the final stages of implementation of the Digital Operational Resilience Act (DORA) requirements into their systems and processes, it is imperative to understand the legal developments and ongoing updates arising from EU Member States as they go through their respective transposition and alignment processes. Through TerraLex – our global legal network, which provides us with access to 22,000 lawyers from highly regarded and carefully vetted law firms stretching more than 120 countries – we have collated legal updates focusing on DORA and its implications in EU jurisdictions.

Find out more