header-logo header-logo

15 December 2017 / David White , Tom Morrison
Issue: 7774 / Categories: Features , Data protection
printer mail-detail

Mind the GDPR (Pt 2)

nlj_7774_morrison

In the second of a series of articles, Rollits LLP consider the role of data protection officers & the issues surrounding obtaining valid consent

 

  • What the appointment of a data protection officer means in practice.
  • When is it appropriate to rely on consent as a lawful basis for processing personal data?

In the first part in this series on the General Data Protection Regulation (GDPR), we considered why current data protection legislation needed updating and provided an overview of the key provisions under the GDPR (see ‘Mind the GDPR’, NLJ , 22 September 2017, p 8). Our focus now turns to two key action points organisations will need to consider early on in their preparations for the GDPR: (1) the appointment of a Data Protection Officer (DPO) and what that means in practice; and (2) when it is appropriate to rely on consent as a lawful basis for processing personal data.

Appointment of a DPO

Under the GDPR, both controllers and processors are under an obligation

If you are not a subscriber, subscribe now to read this content
If you are already a subscriber sign in
...or Register for two weeks' free access to subscriber content

MOVERS & SHAKERS

Bellevue Law—Lianne Craig

Bellevue Law—Lianne Craig

Workplace law firm expands commercial disputes team with senior consultant hire

EIP—Rob Barker

EIP—Rob Barker

IP firm promotes patent attorney to partner

Muckle LLP—Ryan Butler

Muckle LLP—Ryan Butler

Banking and restructuring team bolstered by insolvency specialist

NEWS
A High Court ruling involving the Longleat estate has exposed the fault line between modern family building and historic trust drafting. Writing in NLJ this week, Charlotte Coyle, director and family law expert at Freeths, examines Cator v Thynn [2026] EWHC 209 (Ch), where trustees sought approval to modernise trusts that retain pre-1970 definitions of ‘child’, ‘grandchild’ and ‘issue’
Fresh proposals to criminalise ‘nudification’ apps, prioritise cyberflashing and non-consensual intimate images, and even ban under-16s from social media have reignited debate over whether the Online Safety Act 2023 (OSA 2023) is fit for purpose. Writing in NLJ this week, Alexander Brown, head of technology, media and telecommunications, and Alexandra Webster, managing associate, Simmons & Simmons, caution against reactive law-making that could undermine the Act’s ‘risk-based and outcomes-focused’ design
Recent allegations surrounding Peter Mandelson and Andrew Mountbatten-Windsor have reignited scrutiny of the ancient common law offence of misconduct in public office. Writing in NLJ this week, Simon Parsons, teaching fellow at Bath Spa University, asks whether their conduct could clear a notoriously high legal hurdle
A landmark ruling has reshaped child clinical negligence claims. Writing in NLJ this week, Jodi Newton, head of birth and paediatric negligence at Osbornes Law, explains how the Supreme Court in CCC v Sheffield Teaching Hospitals NHS Foundation Trust [2026] UKSC 5 has overturned Croke v Wiseman, ending the long-standing bar on children recovering ‘lost years’ earnings
A Court of Appeal ruling has drawn a firm line under party autonomy in arbitration. Writing in NLJ this week, Masood Ahmed, associate professor at the University of Leicester, analyses Gluck v Endzweig [2026] EWCA Civ 145, where a clause allowing arbitrators to amend an award ‘at any time’ was held incompatible with the Arbitration Act 1996
back-to-top-scroll