The Irish regulator received more than 1300 complaints in the first month of GDPR, showing the level of concern about personal data.
The first legal challenge focuses on obtaining consent
The first legal challenge, launched against Facebook and Google, focuses on how they bundle all sorts of permissions into signing up, most of which are unnecessary for providing the service. We have examined how this will bring clarity to what you can ask for when someone is applying for a job.
Action by Continental shows concerns about employee-provided data
Continental have taken the decision to forbid employees from using services like WhatsApp on company-provided phones. The reason is that, because these services tap into someone's contacts, the organisation is now processing the contacts' data without their permission. We covered how employees providing someone else's data, in the context of employee referrals, could be very problematic.
First probes on how companies plan to handle the enhanced rights of candidates under GDPR
Meanwhile, the first tests have been made on how recruiters handle requests for data from candidates - with enhanced rights and awareness under GDPR. The short answer is badly - and it will be interesting if the regulator gets involved or whether this will lead to legal challenges. The increased user rights seemed to get overlooked in the overall panic on consent and data retention, but we think this could be even more significant in the long run.