Of interest to you archivos

Using Candidate CVs from LinkedIn: GDPR Limits in Recruitment

Of interest to you

When companies may use LinkedIn profiles or CVs in recruitment and what GDPR limits apply.

Cookie Dark Patterns: When Consent Is Not Valid

Of interest to you

What cookie dark patterns are, why they may invalidate consent and a practical checklist for cookie banners.

Consent or Pay: Privacy, Personalised Advertising and the GDPR

Of interest to you

What consent or pay means, what the EDPB requires and when consent may not be freely given under the GDPR.

Publishing Images Found on Social Media: GDPR Risks

Of interest to you

When reusing images found on social media may breach the GDPR and what companies, media and creators should check.

EU-US Data Privacy Framework: What Companies Should Check

Of interest to you

What the EU-US Data Privacy Framework is, when it helps international transfers and what companies should verify.

Rejecting Non-Essential Cookies: What the AEPD Requires

Of interest to you

What the Spanish Data Protection Authority requires for rejecting non-essential cookies and how companies should configure banners.

Amendment to Spain’s Data Protection Act: Key Points for Companies

Of interest to you

Key points of the amendment to Spain’s Data Protection Act and what companies should review for GDPR compliance.

Loss of an Employee Document and GDPR Breach Notification

Of interest to you

Why losing an employee document may be a personal data breach and when employers must assess GDPR notification duties.

Real Estate Agencies and the GDPR Duty to Inform Data Subjects

Of interest to you

Why real estate agencies must inform clients about personal data processing and how to comply with GDPR transparency duties.

Fitness Apps and Location Privacy: When Exercise Data Reveals Too Much

Of interest to you

How fitness apps and activity maps can reveal sensitive locations, and what users and organisations should do to reduce privacy risks.

Data Is a Fingerprint: Reidentification and Anonymity Risks

Of interest to you

Why supposedly anonymous data may still identify people and what organisations should review before sharing or analysing datasets.

LinkedIn Contacts: Privacy, Fake Profiles and Business Risks

Of interest to you

Risks of accepting LinkedIn contacts without checking them: fake profiles, phishing, social engineering and professional exposure.

Partidos politicos no podrán usar las opiniones publicadas en redes

Political Opinions and Data Protection: Key Lessons from Spain’s Constitutional Court

Of interest to you

Key lessons from the Spanish Constitutional Court ruling on political parties, political opinions and personal data processing.

Consejos para tener un servicio correcto Protección de Datos

How to Choose a Good Data Protection Service for Your Company

Of interest to you

Key points for choosing a reliable data protection service: GDPR knowledge, processor agreements, clear deliverables and ongoing support.

Cybersecurity Challenges for Businesses: Practical Checklist

Of interest to you

Four cybersecurity challenges for businesses and a basic checklist to reduce risks, protect data and respond to incidents.

Subsidised Training Fraud in Spain: How to Detect It

Of interest to you

How to detect fraud in subsidised training courses in Spain, what evidence to keep and what to review before applying rebates.

How to Protect Against a Trojan: Measures for Businesses and Users

Of interest to you

What a trojan is, how it infects devices and how to reduce the risk of data theft, fraud and personal data breaches.

Unauthorised Access to Medical Records: GDPR Risks

Of interest to you

Legal risks of unauthorised access to medical records and key GDPR controls for clinics and healthcare providers.

Imagenes de menores en colegios y consentimiento RGPD

Images of Minors in Schools: Consent, Websites and Social Media

Of interest to you

When a school may publish photos or videos of students, how to manage consent, social media, families and image removal.

Datos de salud de empleados y confidencialidad en la empresa

Employee Health Data: How to Process It Under the GDPR

Of interest to you

How to process employee health data: what the company may know, common mistakes, confidentiality, minimisation and AEPD guidance.

Unsolicited Commercial Calls in Spain: AEPD Rules and Risks

Of interest to you

When unsolicited commercial calls are lawful in Spain, AEPD requirements, Robinson List impact and risks for companies.

Data Protection Officer: When Appointing a DPO Is Mandatory

Of interest to you

When appointing a Data Protection Officer is mandatory, DPO functions, common mistakes and official AEPD, EDPB and LOPDGDD sources.

Plan de igualdad en empresas y registro retributivo

Equality Plan in Spanish Companies: Obligation, Register and LGTBI Measures

Of interest to you

Which companies need an equality plan in Spain, what it includes, pay register, salary audit and mandatory LGTBI measures for companies.

Mandatory Whistleblowing Channel in Spain: Guide for Companies

Of interest to you

Guide to mandatory whistleblowing channels in Spain: affected companies, Law 2/2023 requirements, whistleblower protection and data protection.

Public Wi-Fi Networks: Risks and Tips to Protect Your Data

Of interest to you

Risks of using public Wi-Fi networks and tips to protect your data: HTTPS, VPN, fake networks, devices, online banking and remote work.

Cybersecurity for Small Businesses: Common Mistakes and Checklist

Of interest to you

Common cybersecurity mistakes in small businesses and a basic checklist: passwords, MFA, backups, updates, permissions and breaches.

Data Protection for Websites and Blogs: Legal Checklist

Of interest to you

Data protection checklist for websites and blogs: privacy policy, legal notice, cookies, forms, email marketing and providers.

Qué debes hacer para cumplir con el RGPD como autónomo

GDPR for Self-Employed Professionals: Obligations and Checklist

Of interest to you

GDPR guide for self-employed professionals: obligations, basic checklist, provider contracts, security measures and AEPD tools.

Una plantilla formada en protección de datos es la mejor garantía

Employee Data Protection Training: Benefits and Key Content

Of interest to you

Why employee data protection training reduces errors, breaches and GDPR risks. Benefits, minimum content and how to document it.

Las brechas de seguridad deben ser notificadas

Data Breach: When to Notify the AEPD and What to Do in 72 Hours

Of interest to you

What to do after a personal data breach: when to notify the AEPD, when to inform affected individuals and how to act within 72 hours.

El registro horario y la protección de datos

Working Time Records and Data Protection in Spain

Of interest to you

How to implement working time records in Spain while complying with the GDPR: legal basis, employee information, geolocation, biometrics and minimisation.

Nuevo curso sobre cómo detectar fraudes y estafas en internet

Online Fraud and Scams: How to Identify and Avoid Them

Of interest to you

Guide to identifying online fraud and scams: phishing, smishing, vishing, fake stores, warning signs and what to do if you fall for one.

How to Identify a Website You Should Not Buy From

Of interest to you

Checklist to detect fraudulent online stores: warning signs, unsafe payments, HTTPS, legal details and what to do if you already paid.

Secure Passwords: Basic Tips to Protect Your Accounts

Of interest to you

Tips to create secure passwords, avoid password reuse, use password managers and enable multifactor authentication.

Ventajas de tener una copia de seguridad en la nube

Cloud Backup: Advantages and Good Practices for Companies

Of interest to you

Advantages of cloud backup and good practices to protect data, prevent ransomware, comply with the GDPR and restore information on time.

How to Detect Phishing: Warning Signs and What to Do

Of interest to you

Guide to detecting phishing: warning signs, checklist before clicking, what to do if you fall for it and prevention measures for companies.

Correo electronico corporativo seguro y proteccion de datos

Secure Corporate Email: 12 Key Measures to Protect Business Data

Of interest to you

Corporate email security guide: passwords, MFA, phishing, BCC, encryption, internal policies and breach response.

Equality Plan in Spain: Obligations, Salary Record and Fines

Of interest to you

Guide to equality plans in Spain: who must have one, diagnosis, salary record, pay audit, negotiation, registration and fines.

Contratos de encargado de tratamiento y revision RGPD

Updating Data Processing Agreements under the GDPR

Of interest to you

Guide to reviewing and updating data processing agreements under GDPR: Article 28, providers, subprocessors, security and audits.

Images of Children at School: GDPR Fine for Publishing Photos

Of interest to you

Guide to publishing images of children at school, consent, photo removal requests, social media, YouTube and GDPR fines in Spain.

Employee Health Data: Fine for Sharing Medical Information

Of interest to you

Guide to employee health data, GDPR, confidentiality, minimisation and the risks of sharing medical information at work.

Nuevas tecnologias de control empresarial y privacidad laboral

Workplace Monitoring Technologies and Employee Privacy Rights in Spain

Of interest to you

Guide to workplace monitoring technologies in Spain: CCTV, geolocation, corporate email, AI, employee privacy and data protection compliance.

Fine for Failing to Appoint a Data Protection Officer in Spain

Of interest to you

Guide to when appointing a Data Protection Officer is mandatory in Spain, what the GDPR and Spanish law require, and what fines may apply.

Unsolicited Commercial Calls in Spain: AEPD, Robinson List and Fines

Of interest to you

Updated guide to unsolicited commercial calls in Spain, the Robinson List, AEPD Circular 1/2023, consent, legitimate interest and fines.

WhatsApp group and GDPR fine for adding someone without consent.

Fine for adding someone to a WhatsApp group without consent

Of interest to you

The AEPD fined a sports club 4,000 euros for adding a former user to WhatsApp groups without consent. GDPR lessons for companies.

Lawyer using WhatsApp and a court judgment with personal data, illustrating a GDPR fine in Spain.

Lawyer fined for sending personal data by WhatsApp

Of interest to you

A Spanish lawyer was fined for sending a court judgment with personal data by WhatsApp. Key GDPR lessons on legal basis and confidentiality.

Right to be forgotten for cancer survivors in Spain

Of interest to you

Spain recognises the right to be forgotten for cancer survivors after five years without relapse, limiting discrimination in insurance and mortgages.

Anonymisation and GDPR concept illustrating identification through web browsing patterns.

Identifying people through anonymous web browsing patterns

Of interest to you

Anonymous web browsing data can identify people when URLs, habits and clickstream patterns are combined. GDPR lessons for data brokers and analytics.

Twitter metadata and anonymisation concept illustrating privacy risks for users.

Twitter metadata is a privacy nightmare

Of interest to you

Twitter/X metadata can reveal behavioural patterns and identify users even when the content of a post appears anonymous.

Legal document with Bitcoin, laptop and private keys illustrating Bitcoin adverse possession and digital ownership.

Can Bitcoin Be Acquired by Adverse Possession? Blockchain, Digital Ownership and the Risk of Confusing Control with Legal Title

Of interest to you

Can Bitcoin adverse possession apply in Spain? We explain why blockchain control is not always legal title and what companies with crypto-assets should document.

Data Processing Agreement under GDPR explained visually with controller, processor, security and personal data protection.

Data Processing Agreement under GDPR: when it is required and what it must include

Of interest to you

Learn when a Data Processing Agreement is required under GDPR, what clauses it must include, and how to review processors, subprocessors, security, AI and international transfers.

Mesa de trabajo con móvil, documentos legales y ordenador en un contexto de cumplimiento digital empresarial.

Personal tools used for work: what companies should know after the Vivendi/Lagardère ruling

Of interest to you

A recent EU General Court ruling confirms that professional communications kept in personal tools may be requested under strict conditions. Here is what companies should review now.

Director de colegio preocupado consultando a abogados de ciberacoso escolar ante crisis de deepfakes

School Cyberbullying Lawyers: The Deepfake Mistake

Of interest to you

School Cyberbullying Lawyers: The Deepfake Mistake That Condemns the Principal As school cyberbullying lawyers, we have seen this scene too many times. It is Tuesday morning and a group of families enters your office, visibly upset. They…

Hotel reception checking an ID document, illustrating GDPR limits on keeping copies of guests ID or passports.

Can hotels request a copy of your ID or passport?

Of interest to you

The Spanish Data Protection Agency says hotels and lodgings should not request or keep copies of guests ID or passports. Practical GDPR guidance for accommodation businesses.

Dall-e