Standard Contractual Clauses (SCCs) are a key mechanism by which organisations can transfer personally identifiable data to/from countries outside European Economic Area (EEA). This mechanism is particularly relevant for countries that have not received an adequacy decision by the European Commission. Usually, countries outside the EEA are referred to as “Third Countries”.  SCCs are [...]

Introduction  In April 2017, the European Data Protection Board (EDPB) endorsed the Article 29 Working Party’s Guidelines for identifying a controller or processor’s lead supervisory authority. The EDPB noted that further clarification in these Guidelines was required, especially in relation to the main establishment in the context of joint controllership. Recent weeks have seen updates [...]

Clearview AI, a privately owned company based in the US, has been involved in many suits in the last couple years that highlight the maturing of global data protection laws, as well as the advancement of biometric information identification technologies. Clearview has the largest known database of over 30 billion facial images. Its website [...]

The NCSC and their Role  The National Cyber Security Centre (NCSC) was founded in 2016 as part of the Government Communications Headquarters (GCHQ), the UK’s intelligence, security, and cyber agency. The NSCS is the result of a merger of several previous organisations including the Communications-Electronics Security Group (CESG). The NCSC manages major cybersecurity incidents [...]