For the past several months, news of the reauthorization of and potential amendments to Section 702 of the U.S. Foreign Intelligence Surveillance Act has had policy and privacy professioals on their toes. FISA Section 702, which authorizes limited warrantless surveillance of certain communications, ...

There are more than 70 references to certification, covering privacy by design, data transfers to processors, adequacy of technical and organizational measures, and international data transfers, in the EU General Data Protection Regulation. The European Data Protection Seal is a GDPR-certification ...

European Center for Certification and Privacy co-Chair Sébastien Ziegler writes about how to reduce risks and qualify for the European Data Protection Seal under the EU General Data Protection Regulation. He broke down the process for certification to two major steps as well as the benefits of seeki...

Norway's data protection authority, Datatilsynet, said it disagreed with the proposal to modify the Civil Protection Act due to personal data processing implications. Datatilsynet said the changes would allow "personal data collected in crisis situations to be further processed for incompatible purp...

Switzerland's Federal Data Protection and Information Commissioner published details on its investigation into online retailer Digitec Galaxus. The FDPIC claimed the company violated the principle of proportionality by "linking the examined data processing to the obligation to create a customer acco...