Sign in Subscribe

Lawfulness

Coverage of the requirement that collecting, using, sharing, and retaining data comply with applicable law. Articles examine legal authority, consent, statutory restrictions, prohibited practices, and the interaction between privacy rules and other legal obligations. Explore how organizations assess whether their data practices are lawful, distinguish legal permission from fairness and ethical considerations, and respond when laws impose overlapping or conflicting requirements.

Canada’s Federal Private-Sector Privacy Law: The Personal Information Protection and Electronic Documents Act (PIPEDA)

Canada’s Federal Private-Sector Privacy Law: The Personal Information Protection and Electronic Documents Act (PIPEDA)

Canada’s PIPEDA establishes the federal framework for private-sector privacy, regulating how organizations collect, use, disclose, safeguard, and retain personal information. This article explains its scope, consent rules, individual rights, accountability duties, and breach requirements.

What does “lawfulness, fairness and transparency” mean under the GDPR?

What does “lawfulness, fairness and transparency” mean under the GDPR?

What do the GDPR's requirements of lawfulness, fairness, and transparency actually mean? This article explains the legal basis for processing, the obligation to treat individuals fairly, and the duty to be open and honest about how personal data is collected, used, and disclosed.

Österreichischer Rundfunk: When Salary Transparency Meets the Right to Privacy

Österreichischer Rundfunk: When Salary Transparency Meets the Right to Privacy

Austria required certain publicly controlled bodies to disclose the names and annual income of highly paid employees. The CJEU held that salary transparency may serve the public interest—but identifying individuals must still be necessary, appropriate, and proportionate.