Privacy Moves Daily2026-08-25Legitimate interests under GDPR: prove the balance before you processA practical GDPR guide to the three-condition legitimate-interests test, the LIA record, and the design choices that make or break Article 6(1)(f).2
Privacy Moves Daily2026-08-24Automated decisions under GDPR: when a human review changes the resultA practical GDPR guide to identifying Article 22 decisions, testing whether human review is real, and recording the safeguards that let people understand and challenge the result.
Privacy Moves Daily2026-08-23GDPR erasure requests: delete across purposes, retain only what the law requiresA practical GDPR guide to deciding what to erase, what to retain under a narrow exception, how to propagate the decision across systems and recipients, and what evidence makes the response defensible.1
Privacy Moves Daily2026-08-22Personal data breach response under GDPR: the 72-hour decision screenA practical GDPR guide to classifying personal data breaches, applying the risk thresholds, meeting the 72-hour authority deadline, and recording the decision.1
Privacy Moves Daily2026-08-21Data subject access requests under GDPR: search before you exportA practical GDPR guide to handling data subject access requests: define the scope, search across systems and processors, review other people's rights, and deliver a complete response.
Privacy Moves Daily2026-08-20Records of processing activities: turn the inventory into a working controlA practical Article 30 guide to structuring a purpose-based record of processing activities, separating it from neighbouring documents, and keeping it current when the real data flow changes.1
Privacy Moves Daily2026-08-19International data transfers under GDPR: why signing the SCCs is not the approvalA practical GDPR guide to international-transfer decisions: what SCCs solve, what destination-law and access-path checks remain, and when a transfer must pause or stop.12
Privacy Moves Daily2026-08-18Data protection by design and by default: test the starting stateA practical GDPR Article 25 guide to building privacy into product, vendor and workflow decisions, with the four default dimensions reviewers should test before launch.11
Privacy Moves Daily2026-08-17Valid consent under GDPR: prove the choice, not just the clickA practical guide to freely given, specific, informed and unambiguous consent, with the evidence and withdrawal controls that make a choice defensible at work.41
Privacy Moves Daily2026-08-16Right to object under GDPR: stop marketing immediately, test other uses case by caseA practitioner guide to separating the absolute stop for direct marketing from the case-by-case override test for other GDPR objections.1
Privacy Moves Daily2026-08-15Special category data: the two-part GDPR testA practical guide to spotting special category data, separating the Article 6 and Article 9 decisions, and recording the safeguards that make approval defensible.22
Privacy Moves Daily2026-08-14Pseudonymisation vs anonymisation: decide whether the identity link survivesA practical GDPR guide to telling pseudonymised personal data from anonymous information, testing identifiability, choosing controls, and recording the decision.11