GDPR vs DPDP: Key Differences in Compliance

US companies facing GDPR Article 15 requests must balance transparency with protecting trade secrets. While GDPR requires providing personal data and processing info, revealing too much risks exposing proprietary information. Courts say companies must give meaningful explanations without disclosing core trade secrets. A strategic, layered approach—such as internal systems for calibrated disclosures and clear documentation—is essential.

European Data Protection Board has adopted: - guidelines on the application of the power to impose administrative fines in relation to other corrective powers under the GDPR subject to public consultation until 13 November 2026 - guidelines on DSA and GDPR finalised after public consultation

On 17 September 2026, the European Data Protection Board (EDPB) published Guidelines 04/2026 on the application of the power to impose administrative fines in relation to other corrective powers under the GDPR for public consultation. The Guidelines aim to harmonize the methodology used by supervisory authorities when determining whether an administrative fine should be imposed – in addition to, or instead of, the other corrective measures under Article 58(2) of the GDPR. The public consultation period is open until 13 November 2026. Read more here: https://lnkd.in/dNtATHYR

Sol 6.1 struggles with writing GDPR compliant text that is accurate and sounds trustworthy. Don't believe Opus 5.5 would do any better. Do others feel that you need a real frontier model (e.g. Astra or Fable) for combining different points-of-views? 🤔

I’m still reflecting on AG’s Opinion in Case C-568/25: how to apply data minimization and accountability principles under GDPR Article 22.

The Swedish DPA has requested an opinion from the European Data Protection Board (EDPB) regarding the processing of criminal data under Article 10 of the GDPR.

PIPEDA (Canada) vs. Law 25 (Quebec): federal vs. provincial privacy. Quebec Law 25 is closer to GDPR. Canadian users processed by a US SaaS are subject to both. → https://lnkd.in/dh6KqD_G #PrivacyLaw

GDPR compliance is not optional for websites serving EU visitors. The 7 Core Principles of GDPR Data Processing (Article 5 Explained). Understand the 7 core principles of GDPR data processing under Article 5. Learn how lawfulness, purpose limitation, and accountability affect your website. In this article: The Foundation of European Privacy Law, The Scope of Article 5: Controllers and Processors, 1. Lawfulness, Fairness, and Transparency. https://lnkd.in/deyZV6Az #GDPR #Privacy #Compliance

Collective redress changes the maths of GDPR compliance. Just 3% of affected data subjects could be enough to bankrupt the company. noyb.eu Max Schrems #NPA2026

🚨 Google fined $460M for EU GDPR violations Google has been fined $460 million by the European Union for violating the EU's GDPR privacy rules. The penalty was issued under the General Data Protection Regulation.