Data protection enforcement trends, AI regulation developments, supply chain due diligence guidance, and cross-border transfer analysis from the Priventia team.
The EU AI Act introduces a four-tier risk classification system for AI systems. This article explains the tiers, the Annex III high-risk categories, and the compliance obligations that apply to each.
A DPIA is only as defensible as its methodology. This article examines the EDPB guidelines on DPIAs, the nine criteria for mandatory assessments, and the structure regulators expect.
The NDPA 2023 represents a significant development in African data protection law. This article outlines the key obligations, the role of the NDPC, and how the annual audit requirement works in practice.
Cross-border data transfers remain one of the most complex areas of GDPR compliance. This article surveys the current state of transfer mechanisms, including SCCs, the UK IDTA, and the EU-US Data Privacy Framework.
Article 6(1)(f) GDPR permits processing on the basis of legitimate interests, but only where the processing passes a three-part test. This article explains how to conduct a properly structured LIA.
An analysis of enforcement actions under GDPR since 2018, examining the areas that attract the largest fines and what this means for compliance programme design.
The CSDDD introduces mandatory human rights and environmental due diligence obligations across value chains. This article examines the scope, phased application timeline, and the six-step due diligence process companies must implement.
Germany’s Supply Chain Due Diligence Act has been in force since January 2023. This article reviews early BAFA enforcement actions, common compliance gaps, and what the German experience signals for CSDDD preparedness.
The CSDDD, LkSG, and UNGPs all require organisations to establish or participate in grievance mechanisms. This article examines the effectiveness criteria under UNGP Principle 31 and how to design a complaints procedure that satisfies multiple regulatory frameworks.
Enforcement decisions, new guidance, and regulatory developments. No marketing. Unsubscribe at any time.