The EDPB’s Anonymisation Standard: New Draft Guidelines
When is personal data anonymous? The EDPB has published draft Guidelines 02/2026 setting out its standard for data anonymisation under the GDPR.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
When is personal data anonymous? The EDPB has published draft Guidelines 02/2026 setting out its standard for data anonymisation under the GDPR.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
On 4 September 2025, the CJEU clarified what constitutes personal data when transferring pseudonymised information externally.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The European Health Data Space Regulation is set to transform how health data is accessed and used across the EU. This article outlines key obligat...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
High Court upholds DPC's decision that HSE was not a data controller for non-work-related personal data on an employee's work phone.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
DSARs: motive is not a relevant factor to Europe's highest court and regulators will conduct a Coordinated Action in 2024.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
A recent European court decision has shifted the goalposts on the standard of data anonymisation and impacting the meaning of personal data. This m...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The CJEU has handed down a landmark ruling that clarifies what legal bases controllers can rely on for online and behavioural advertising.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
First award of damages in a data subject claim given by an Irish Court.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Green light for EU-US transfers? Meta appeal against DPC Decision remains on hold but sheds light on timing for the "adequacy" of EU-US transfers.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Ahead of the Council of Europe's annual Data Protection Day on 28 January 2021, we unpack the key data protection stories of 2020 and look ahead to...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
On International Data Protection Day our Technology team round-up some of the key data protection stories of 2018 and look ahead to the likely even...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Video: Adele Hall & Michelle Martin of our litigation team examine some recent trends in data protection litigation including the increased use of ...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Article 29 Working Party has published eagerly awaited guidelines on the obligation of transparency in relation to the processing of personal d...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The newly introduced Data Protection Act 2018 (Access Modification) (Health) Regulations 2022 bring about changes for businesses in receipt of data...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
A former civil servant has been jailed for receiving corrupt payments in exchange for selling personal data to two private investigators.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
European Court of Justice rules that exam scripts and examiner's comments constitute personal data.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The European Commission adopted a common EU toolbox for the use of mobile applications and geolocation data in the fight against COVID-19. The reco...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Irish Data Protection Commission (DPC) has announced a series of fines for Irish Child and Family Agency, TUSLA for breaches of the General Dat...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
This week saw the publication of draft guidance by the European Data Protection Board and draft standard contractual clauses by the European Commis...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Article in Silicon Republic: William Fry’s David Cullen and David Kirton look at the Austrian data watchdog’s Google Analytics concerns and what it...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The 2021 Health Research Regulations introduce significant new revisions to the law on processing personal data for health research purposes.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
As expected, an adequacy decision was not granted by the European Commission as part of the UK-EU Trade and Co-operation Agreement, but a maximum s...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
What constitutes a reasonable request for further information for verifying identity? Do you need to ask for additional information in all circumst...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
50% of employers say their main data protection concern for returning to work is dealing with a confirmed COVID-19 case in the workplace. Here we d...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The EU's Data Protection authorities express concerns in relation to the World Anti-Doping Code's compatibility with the GDPR.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
As the end of the UK/EU transition period draws near, fund promoters and management companies can use our Q&A checklist tool to do a health-check o...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Data Protection Commission has issued guidance to assist landlords in understanding what information they may request from prospective tenants.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Welcome to the June 2019 edition of Legal News. We at William Fry aim to keep you up to date on legal developments that may affect you or your busi...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Welcome to the July 2019 edition of Legal News. We at William Fry aim to keep you up to date on legal developments that may affect you or your busi...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5480
[filter] => raw
[cat_ID] => 49
[category_count] => 5480
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Since the coming into force of the GDPR, organisations are dealing with an increase of queries concerning the processing of personal data, while th...