RGPD archivos

Cookie Dark Patterns: When Consent Is Not Valid

Of interest to you

What cookie dark patterns are, why they may invalidate consent and a practical checklist for cookie banners.

Loss of an Employee Document and GDPR Breach Notification

Of interest to you

Why losing an employee document may be a personal data breach and when employers must assess GDPR notification duties.

Fitness Apps and Location Privacy: When Exercise Data Reveals Too Much

Of interest to you

How fitness apps and activity maps can reveal sensitive locations, and what users and organisations should do to reduce privacy risks.

Subsidised Training Fraud in Spain: How to Detect It

Of interest to you

How to detect fraud in subsidised training courses in Spain, what evidence to keep and what to review before applying rebates.

How to Protect Against a Trojan: Measures for Businesses and Users

Of interest to you

What a trojan is, how it infects devices and how to reduce the risk of data theft, fraud and personal data breaches.

Imagenes de menores en colegios y consentimiento RGPD

Images of Minors in Schools: Consent, Websites and Social Media

Of interest to you

When a school may publish photos or videos of students, how to manage consent, social media, families and image removal.

Datos de salud de empleados y confidencialidad en la empresa

Employee Health Data: How to Process It Under the GDPR

Of interest to you

How to process employee health data: what the company may know, common mistakes, confidentiality, minimisation and AEPD guidance.

Unsolicited Commercial Calls in Spain: AEPD Rules and Risks

Of interest to you

When unsolicited commercial calls are lawful in Spain, AEPD requirements, Robinson List impact and risks for companies.

Plan de igualdad en empresas y registro retributivo

Equality Plan in Spanish Companies: Obligation, Register and LGTBI Measures

Of interest to you

Which companies need an equality plan in Spain, what it includes, pay register, salary audit and mandatory LGTBI measures for companies.

El registro horario y la protección de datos

Working Time Records and Data Protection in Spain

Of interest to you

How to implement working time records in Spain while complying with the GDPR: legal basis, employee information, geolocation, biometrics and minimisation.

How to Detect Phishing: Warning Signs and What to Do

Of interest to you

Guide to detecting phishing: warning signs, checklist before clicking, what to do if you fall for it and prevention measures for companies.

WhatsApp group and GDPR fine for adding someone without consent.

Fine for adding someone to a WhatsApp group without consent

Of interest to you

The AEPD fined a sports club 4,000 euros for adding a former user to WhatsApp groups without consent. GDPR lessons for companies.

Right to be forgotten for cancer survivors in Spain

Of interest to you

Spain recognises the right to be forgotten for cancer survivors after five years without relapse, limiting discrimination in insurance and mortgages.

Anonymisation and GDPR concept illustrating identification through web browsing patterns.

Identifying people through anonymous web browsing patterns

Of interest to you

Anonymous web browsing data can identify people when URLs, habits and clickstream patterns are combined. GDPR lessons for data brokers and analytics.

Twitter metadata and anonymisation concept illustrating privacy risks for users.

Twitter metadata is a privacy nightmare

Of interest to you

Twitter/X metadata can reveal behavioural patterns and identify users even when the content of a post appears anonymous.

Posts