Kukie.io’s Post

⚖️ Data protection legislation has changed. Has your knowledge changed with it? The updated BCS Practitioner Certificate in Data Protection (v9.9) covers the latest reforms introduced through the Data (Use and Access) Act, helping professionals stay current on UK GDPR, accountability, data subject rights, regulatory oversight, and AI privacy considerations. 📌 Booking link in the comments. #DataProtection #UKGDPR #DataPrivacy #Compliance #BCS #InformationGovernance #AIGovernance #PrivacyProfessionals

GDPR compliance is not optional for websites serving EU visitors. Product Recommendation Engines and GDPR: Do Personalisation Cookies Need Consent? Do personalisation and product recommendation cookies need GDPR consent? Yes, under the ePrivacy Directive. Learn why legitimate interest arguments fail. In this article: What Personalisation Cookies Actually Do, The Legal Framework: ePrivacy Directive Article 5(3), Why Legitimate Interest Does Not Work for Personalisation Cookies. https://lnkd.in/difF7YDH #GDPR #Cookies #Privacy #Compliance

One framework. Two jurisdictions. And a growing number of ways to get it wrong. For businesses operating across the UK and the EU, GDPR compliance is no longer as simple as treating it as a single rulebook. UK GDPR and EU GDPR may share the same foundations, but evolving regulations, enforcement priorities, and compliance requirements can create important differences to navigate in 2026. For organizations handling data across borders, overlooking those nuances can mean unnecessary risk, complexity, and compliance headaches. Our latest blog breaks down what businesses need to know about UK GDPR vs. EU GDPR in 2026 and where the differences matter most. 👇 🔗 https://lnkd.in/diefZjuN #YASHTechnologies #Microsoft #Blog #GDPR #PartnerGTM #MicrosoftPartner #MSPartner | Depesh Kumar | Aakash Yakhmi | Ganesh Babu Tanneru | Hrishikesh Ligaade | Ravi K. | Microsoft

Collective redress changes the maths of GDPR compliance. Just 3% of affected data subjects could be enough to bankrupt the company. noyb.eu Max Schrems #NPA2026

When will a GDPR breach lead to a fine? The EDPB has published draft guidelines to harmonise the methodology for determining whether an administrative fine should be imposed in respect of an infringement of the GDPR in addition to, or instead of, other corrective measures under Article 58(2) GDPR. The draft guidelines also contain some noteworthy indications of how DPAs are likely to deal with organisations believed to have infringed the GDPR, as considered in our latest briefing. Read the full briefing here: https://lnkd.in/d-KXuNcf Adam Finlay | Amy Brick | Gabrielle Wall #GDPR #EDPB #GoFurther

Duplicitous EU First they pass safeguard law to monitor protect all privacy information (see below) and then they pass a law to monitor all smartphone communications. Guidelines 01/2025 on Pseudonymisation #EU #GDPR The GDPR defines the term ‘pseudonymisation’ for the first time in EU law and refers to it several times as a safeguard that may be appropriate and effective for the fulfilment of certain data protection obligations. As per that definition, pseudonymisation can reduce the risks to the data subjects by preventing the attribution of personal data to natural persons1 in the course of the processing of the data, and in the event of unauthorised access or use.

European Data Protection Board: Guidelines 3/2025 on the #interplay between the #DSA and the #GDPR, adopted on 17 September 2026 After public consultation, the EDPB adopted the final version of its guidelines on the interplay between the DSA and the GDPR. The guidelines support the consistent application of both legal acts, particularly where DSA provisions concern the processing of personal data by intermediary service providers and refer to concepts and definitions laid down in the GDPR.

On 23 September 2026, the European Data Protection Board (EDPB) adopted the final version of Guidelines 3/2025 on the interplay between the Digital Service Act (DSA) and the EU General Data Protection Regulation (GDPR) following public consultation. The Guidelines aim to contribute to the consistent interpretation and application of the DSA and the GDPR insofar as some provisions of the DSA concern the processing of personal data by intermediary service providers and include references to GDPR concepts and definitions. Read more here: https://lnkd.in/eQFt_BQF

🚨 Google fined $460M for EU GDPR violations Google has been fined $460 million by the European Union for violating the EU's GDPR privacy rules. The penalty was issued under the General Data Protection Regulation.

"We're not based in the EU, so the GDPR doesn't apply to us." It might. The GDPR can apply to organisations outside the EU if they offer goods or services to people in the EU, or monitor their behaviour online. In many cases, organisations without an EU establishment must appoint an EU Representative under Article 27 GDPR. An EU Representative serves as a local point of contact for supervisory authorities and individuals, helping organisations meet their regulatory obligations. Not sure whether the requirement applies to your business? We can help assess your obligations and act as your appointed EU Representative.🔗 https://ow.ly/MpcW50ZKCAP #GDPR #DataProtection #Privacy #Compliance #EURepresentative