There are more than 70 references to certification, covering privacy by design, data transfers to processors, adequacy of technical and organizational measures, and international data transfers, in the EU General Data Protection Regulation. The European Data Protection Seal is a GDPR-certification ...

European Center for Certification and Privacy co-Chair Sébastien Ziegler writes about how to reduce risks and qualify for the European Data Protection Seal under the EU General Data Protection Regulation. He broke down the process for certification to two major steps as well as the benefits of seeki...

Norway's data protection authority, Datatilsynet, said it disagreed with the proposal to modify the Civil Protection Act due to personal data processing implications. Datatilsynet said the changes would allow "personal data collected in crisis situations to be further processed for incompatible purp...

France's data protection authority, the Commission nationale de l'informatique et des libertés, ordered an unidentified company to improve data minimization practices for employee and job candidate data. The CNIL said issued the order following a complaint the company collected unnecessary data from...

Switzerland's Federal Data Protection and Information Commissioner published details on its investigation into online retailer Digitec Galaxus. The FDPIC claimed the company violated the principle of proportionality by "linking the examined data processing to the obligation to create a customer acco...