XpertDPO publishes submission on EDPB Recommendations on Controller Binding Corporate Rules (BCRs) XpertDPO has provided feedback to the European Data Protection Board (EDPB) on Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR). The EDPB recommendations build upon the agreements…
Who is responsible for demonstrating GDPR compliance? When we are working with prospective or new clients, we are often asked this question. There isn’t a short answer but we will highlight some steps you can take to begin to demonstrate that you are complying with the GDPR. This is not an exhaustive list by any…
The EC has published its draft Data Act. The draft Data Act (which takes the form of a Regulation) clarifies who can create value from data (personal and non-personal) and under what conditions. It is the second major legislative initiative of the European Strategy for Data and follows on from the Data Governance Act which creates…
XpertDPO are delighted to announce expansion into the Middle East market by acquiring a strategic client in Saudi Arabia. XpertDPO will be acting as the Outsourced Data Protection Officer to this valued client in relation to their ongoing personal data processing operations and new projects. We have also been very successful at gaining two new…
The United Arab Emirates (UAE) has issued its first federal data protection law (Federal Decree Law No. 45/2021 on the Protection of Personal Data) (the Data Protection Law), alongside a law establishing the new UAE Data Office (Federal Decree Law No. 44/2021 on Establishing the UAE Data Office). The issuance of the Data Protection Law…