It has been five years since the GDPR came fully into force. We now have a good idea of how data protection will be interpreted and should be applied. We also understand that it's always a moving target with internal organisation changes, external guidance, sanctions, and judgement needing to be understood and addressed.
In this issue, we discuss:
- The AI Act.
- Chat GPT and large language models.
- The implications of the €1.2bn fine for Facebook.
- Certification as an enabler to international transfers.
- DPC guidance on Records of processing activities.
Document
Data protection newsletter - Issue 15
The French Data Protection Authority (CNIL) has fined an organisation €3.5 million for improper use of customer match tools, reinforcing the growing regulatory focus on social media‑based targeted advertising. The decision highlights the need for clear transparency, specific consent and strong governance when sharing customer data with advertising platforms.
Data Subject Access Requests (DSARs) remain one of the most frequently exercised GDPR rights, yet their purpose and limits are often misunderstood. Recent decisions at both national and EU level provide clearer direction for organisations responding to access requests and highlight how regulators and courts view the underlying intent of the right.
Fire authorities across Ireland are navigating rapid demographic change, evolving housing patterns and increasingly complex climate challenges.
Forvis Mazars supports you in achieving and maintaining data protection and privacy compliance
Build technological resilience so you can operate with confidence
Amplify your business with innovative solutions.
Tailored solutions for assurance and value creation in a changing world.
Information is one of the most important assets in any organisation
Helping you create a resilient framework and culture that keeps you a step ahead of uncertainty