A global right to be forgotten?

In its (in)famous Google Spain judgment in 2014, the CJEU breathed life into the right to be forgotten. That right – explicitly preserved in the GDPR – is one of the more divisive limbs of EU data protection law: it is good for privacy, but it can be very bad for freedom of expression. That […]

Subject access requests: revised guidance from the ICO

As Panopticon devotees will know, the early months of 2017 brought a flurry of judgments about subject access requests – most importantly, in the Dawson-Damer and Ittihadieh/Deer cases. The principles from those judgments have now been incorporated into a revised ICO Code of Practice on subject access requests, published last week. The revised Code is […]

Legitimate Interests: the CJEU off its Trolley(bus)

Back in late January, some fellow whom posterity will not recall wrote a blog about the Opinion of AG Bobek in Case C-13/16 Rigas. This Opinion was notable chiefly because it said things which were obviously unlikely to have come from the European Court, things like using “common sense” to guide the interpretation and operation […]