ICYMI December 2017

December 11, 2017

Article 29 Working Party Guidance

There has been a flurry of guidance from the Article
29 Working Party:

WP250 covers personal data breach notification

WP251 deals with automated individual
decision-making and profiling

WP252 deals with processing personal data in the
context of Cooperative Intelligent Transport Systems

WP253 covers application and setting of
administrative fines

WP259 gives guidance on consent

WP260 deals with transparency

The Article 29 Working Party has also published its
findings on the Privacy Shield (WP255), in respect of which it has major
concerns, and has published ‘working documents on Binding Corporate Rules
(WP256 and WP257).

Tech Sector Mergers

The Department for Business, Energy and Industrial
Strategy has published proposals to widen the powers of government to intervene
in mergers where national security is in question. The consultation on the
proposals closes on 9 January 2018.

Automated and Electric Vehicles Bill

The Bill received its Second Reading in the House
of Commons on 23 October and is currently awaiting a date for its report stage.

Data Protection Bill

The Bill is proceeding in the House of Lords and
received its report stage on 13 December.

Data Retention and Acquisition

The Home Office has initiated a seven-week
consultation on proposed changes to the UK’s communications data retention and
acquisition regime in light of concerns over the incompatibility of the various
powers, especially under the Investigatory Powers Act 2016, with EU law. The
consultation closes on 18 January.