Home » Blog
The latest news,
Stay informed with expert perspectives, industry updates, and actionable insights on data protection, privacy, and cybersecurity.

The Future of the EU-US Data Privacy Framework after Slaughter
HewardMills15 September 2026
The Future of the EU-US Data Privacy Framework after Slaughter

AI companion regulation is becoming a global compliance priority
HewardMills8 September 2026
AI companion regulation is becoming a global compliance priority

DPDP and insurance: Mapping the IRDAI and data protection frameworks
HewardMills27 August 2026
DPDP and insurance: Mapping the IRDAI and data protection frameworks

WhatsApp’s username pause in India: Key lessons for DPOs and DPDP compliance
HewardMills25 August 2026
WhatsApp’s username pause in India: Key lessons for DPOs and DPDP compliance

DPDP and India’s insurance sector: The practical implications for insurers
HewardMills19 August 2026
DPDP and India’s insurance sector: The practical implications for insurers

AI in the workplace: access governance matters more than the tool you choose
HewardMills18 August 2026
AI in the workplace: access governance matters more than the tool you choose

What the EDPB’s new anonymisation guidelines mean for organisations
HewardMills18 August 2026
What the EDPB’s new anonymisation guidelines mean for organisations

EU AI Act updates: What the latest measures mean for organisations
HewardMills3 August 2026
EU AI Act updates: What the latest measures mean for organisations

AI Governance is now a Data Protection issue
HewardMills27 July 2026
AI Governance is now a Data Protection issue

South Korea expands Privacy by Design certification programme
HewardMills27 July 2026
South Korea expands Privacy by Design certification programme

Cognizant subsidiary, TriZetto Provider Solutions’ breach exposes data of 3.4 million people
HewardMills27 July 2026
Cognizant subsidiary, TriZetto Provider Solutions’ breach exposes data of 3.4 million people

Q2 2026: Key regulatory developments
HewardMills16 July 2026
Q2 2026: Key regulatory developments

Children’s Data Privacy in the US: A Snapshot
HewardMills13 July 2026
Children’s Data Privacy in the US: A Snapshot

Malaysia’s Child Protection code under the Online Safety Act 2025
HewardMills8 July 2026
Malaysia’s Child Protection code under the Online Safety Act 2025

Ban on Social Media for U16s
HewardMills8 July 2026
Ban on Social Media for U16s

Navigating AI cyber threats in the Indian banking sector under the DPDP Act
HewardMills24 June 2026
Navigating AI cyber threats in the Indian banking sector under the DPDP Act

Privacy is a human right: why privacy matters more for some communities than others
HewardMills17 June 2026
Privacy is a human right: why privacy matters more for some communities than others

Protecting Ghana’s future: A guide to children’s data in a digital age
HewardMills9 June 2026
Protecting Ghana’s future: A guide to children’s data in a digital age

Cybersecurity gaps in data privacy and incident response: What Indian enterprises need to get right
HewardMills3 June 2026
Cybersecurity gaps in data privacy and incident response: What Indian enterprises need to get right

One month to go: the UK’s Data (Use and Access) Act 2025 new data protection complaints regime
HewardMills19 May 2026
One month to go: the UK’s Data (Use and Access) Act 2025 new data protection complaints regime

Cookie compliance audit in India: Why it matters under the DPDP Act
HewardMills18 May 2026
Cookie compliance audit in India: Why it matters under the DPDP Act

Ghana’s AI era has arrived: What does it mean for your organisation?
HewardMills6 May 2026
Ghana’s AI era has arrived: What does it mean for your organisation?

Q1 2026: Key regulatory developments
HewardMills15 April 2026
Q1 2026: Key regulatory developments

AI governance and data privacy: A global landscape and what it means for India
HewardMills9 April 2026
AI governance and data privacy: A global landscape and what it means for India

Ghana spotlight: Why personal data matters and how to protect it
HewardMills17 March 2026
Ghana spotlight: Why personal data matters and how to protect it

Building trusted, compliant B2B experiences in India’s data-driven automotive sector – a DPO’s perspective
HewardMills10 March 2026
Building trusted, compliant B2B experiences in India’s data-driven automotive sector – a DPO’s perspective

Ghana Independence Day, community, and the meaning of responsible leadership as we celebrate B Corp Month 2026
HewardMills6 March 2026
Ghana Independence Day, community, and the meaning of responsible leadership as we celebrate B Corp Month 2026

Artificial Intelligence Action Summit – India 2026, Key Takeaways
HewardMills5 March 2026
Artificial Intelligence Action Summit – India 2026, Key Takeaways

Safer Internet Day: Where does the real risk to children’s data lie?
HewardMills26 February 2026
Safer Internet Day: Where does the real risk to children’s data lie?

What does the proposed EU Digital Omnibus Regulation mean for organisations?
HewardMills11 February 2026
What does the proposed EU Digital Omnibus Regulation mean for organisations?

India’s top court questions Meta on data privacy
HewardMills11 February 2026
India’s top court questions Meta on data privacy

What DPOs and privacy pros need to know about Vietnam’s new personal data protection law
HewardMills16 December 2025
What DPOs and privacy pros need to know about Vietnam’s new personal data protection law

Cyber Monday spotlight: Why cyber awareness training should be a critical business priority and the role of the DPO
HewardMills1 December 2025
Cyber Monday spotlight: Why cyber awareness training should be a critical business priority and the role of the DPO

Black Friday and beyond: A governance checklist for ethical and compliant AI recommendations in retail
HewardMills27 November 2025
Black Friday and beyond: A governance checklist for ethical and compliant AI recommendations in retail

Why Data Protection Officers are essential partners in the age of data-driven ESG
HewardMills25 November 2025
Why Data Protection Officers are essential partners in the age of data-driven ESG

International Men’s Day: The privacy risks behind health wearables
HewardMills19 November 2025
International Men’s Day: The privacy risks behind health wearables

What role do you think the DPO should play in shaping your organisation’s AI governance framework?
HewardMills17 November 2025
What role do you think the DPO should play in shaping your organisation’s AI governance framework?

Stay compliant this 双十一 (Singles Day): a DPO’s checklist for a safe shopping season
HewardMills11 November 2025
Stay compliant this 双十一 (Singles Day): a DPO’s checklist for a safe shopping season

India’s Privacy rules are coming: are you ready?
HewardMills7 November 2025
India’s Privacy rules are coming: are you ready?

The Jaguar Land Rover cyber attack: Data protection and resilience lessons
HewardMills31 October 2025
The Jaguar Land Rover cyber attack: Data protection and resilience lessons

Haunted by data – Cyber horror stories and how DPOs can help turn crises into opportunities
HewardMills30 October 2025
Haunted by data – Cyber horror stories and how DPOs can help turn crises into opportunities

What privacy teams need to know about CCTV DSAR disclosures
HewardMills21 October 2025
What privacy teams need to know about CCTV DSAR disclosures

Who holds control? Understanding controllership in modern clinical trials
HewardMills13 October 2025
Who holds control? Understanding controllership in modern clinical trials

How to build trust and value with holistic AI Governance
HewardMills2 October 2025
How to build trust and value with holistic AI Governance

Cookie compliance enforcement: Key trends and actions in the UK and U.S.
HewardMills26 September 2025
Cookie compliance enforcement: Key trends and actions in the UK and U.S.

Why Data Subject Rights Requests are a growing global priority
HewardMills23 September 2025
Why Data Subject Rights Requests are a growing global priority

Bridging the AI governance gap: HewardMills partners with UC Berkeley to democratise data protection and AI governance knowledge
HewardMills19 September 2025
Bridging the AI governance gap: HewardMills partners with UC Berkeley to democratise data protection and AI governance knowledge

Breaking News: Brazil’s new international data transfer rules effective August 2025!
HewardMills28 August 2025
Breaking News: Brazil’s new international data transfer rules effective August 2025!

Breaking News: What the EU’s new Data Act means for organisations, DPOs and privacy teams
HewardMills28 August 2025
Breaking News: What the EU’s new Data Act means for organisations, DPOs and privacy teams

Data protection regulations strengthening in the UAE
HewardMills28 August 2025
Data protection regulations strengthening in the UAE

Prioritising personal data and cybersecurity in India’s digital payments sector
HewardMills28 August 2025
Prioritising personal data and cybersecurity in India’s digital payments sector

Deadline approaching: Complying with China’s new PIPO online filing system
HewardMills30 July 2025
Deadline approaching: Complying with China’s new PIPO online filing system

What DPOs need to Know about Nigeria’s General Application and Implementation Directive (GAID) 2025
HewardMills30 July 2025
What DPOs need to Know about Nigeria’s General Application and Implementation Directive (GAID) 2025

Why Data Protection Officers are increasingly critical to minimising privacy risks in health tracking apps
HewardMills30 July 2025
Why Data Protection Officers are increasingly critical to minimising privacy risks in health tracking apps

India’s evolving cybersecurity landscape and the crucial role of Data Protection Officers
HewardMills30 July 2025
India’s evolving cybersecurity landscape and the crucial role of Data Protection Officers

How data protection officers can help businesses to balance the use of ‘Subcontracting Regulatory Technical Standards’ with evolving privacy regulations
HewardMills30 July 2025
How data protection officers can help businesses to balance the use of ‘Subcontracting Regulatory Technical Standards’ with evolving privacy regulations

Jamaica begins data controller registration under Data Protection Act
HewardMills24 June 2025
Jamaica begins data controller registration under Data Protection Act

Understanding DPO criminal liability under Chinese law
HewardMills23 June 2025
Understanding DPO criminal liability under Chinese law

How educational institutions can protect personal data as AI adoption accelerates
HewardMills23 June 2025
How educational institutions can protect personal data as AI adoption accelerates

A year on from the EU AI Act coming into force, what has been the impact on organisations?
HewardMills18 June 2025
A year on from the EU AI Act coming into force, what has been the impact on organisations?

The challenges inherent in the updated Investigatory Powers Act
HewardMills16 June 2025
The challenges inherent in the updated Investigatory Powers Act

What the UK’s new Data (Use and Access) Act means for DPOs and privacy teams
HewardMills15 June 2025
What the UK’s new Data (Use and Access) Act means for DPOs and privacy teams

ESG will become mandatory for thousands of companies by 2027 Here’s how improved data protection can help you prepare
HewardMills28 May 2025
ESG will become mandatory for thousands of companies by 2027 Here’s how improved data protection can help you prepare

UK retailers’ wave of recent breaches highlight need for tighter data protection controls
HewardMills27 May 2025
UK retailers’ wave of recent breaches highlight need for tighter data protection controls

How DORA and the EU AI ACT are shaping compliance in the financial services sector
HewardMills26 May 2025
How DORA and the EU AI ACT are shaping compliance in the financial services sector

MTN Ghana data breach highlights rising data protection risks in African telecom sector
HewardMills17 May 2025
MTN Ghana data breach highlights rising data protection risks in African telecom sector

How to protect personal data on fintech platforms in a new age of AI
HewardMills29 April 2025
How to protect personal data on fintech platforms in a new age of AI

Global roundup from data protection regulators
HewardMills28 April 2025
Global roundup from data protection regulators

Navigating the European Health Data Space Regulation in the life sciences sector
HewardMills28 April 2025
Navigating the European Health Data Space Regulation in the life sciences sector

A specialised route to qualification via the HewardMills Data Protection and Privacy Solicitor Qualification Programme
HewardMills28 April 2025
A specialised route to qualification via the HewardMills Data Protection and Privacy Solicitor Qualification Programme

A DPO’s guide to navigating Conformity Assessments under the EU AI Act
HewardMills31 March 2025
A DPO’s guide to navigating Conformity Assessments under the EU AI Act

Mitigating privacy risks when integrating AI agents into business operations
HewardMills31 March 2025
Mitigating privacy risks when integrating AI agents into business operations

The importance of data protection – what airlines and hotels must do to safeguard your information on vacation
HewardMills31 March 2025
The importance of data protection – what airlines and hotels must do to safeguard your information on vacation

How DPOs support organisations to mature their privacy programme
HewardMills31 March 2025
How DPOs support organisations to mature their privacy programme

How DPOs Support Organisations to Implement and Grow Privacy Programmes
HewardMills28 February 2025
How DPOs Support Organisations to Implement and Grow Privacy Programmes

A DPO’s Perspective: Apple Siri Privacy Lawsuit and Lessons Learnt
HewardMills20 February 2025
A DPO’s Perspective: Apple Siri Privacy Lawsuit and Lessons Learnt

How China’s New Surveillance Laws Could Impact Privacy Compliance
HewardMills20 February 2025
How China’s New Surveillance Laws Could Impact Privacy Compliance

India publishes Draft Digital Personal Data Protection Rules
HewardMills17 February 2025
India publishes Draft Digital Personal Data Protection Rules

What the UK & US Rejection of the Paris Declaration Signals for Global AI Governance
HewardMills15 February 2025
What the UK & US Rejection of the Paris Declaration Signals for Global AI Governance

Managing Privacy and Data Security in the Hospitality Industry
HewardMills7 February 2025
Managing Privacy and Data Security in the Hospitality Industry

What data protection teams need to note as Malaysia amends its Data Protection Act
HewardMills29 January 2025
What data protection teams need to note as Malaysia amends its Data Protection Act

A DPO’s perspective on Navigating Privacy Obligations in the Era of Smart Cars
HewardMills13 January 2025
A DPO’s perspective on Navigating Privacy Obligations in the Era of Smart Cars

Preparing for data protection and privacy laws coming into force in 2025
HewardMills2 January 2025
Preparing for data protection and privacy laws coming into force in 2025

What Data Protection Officers must understand about South Africa’s latest Direct Marketing Guidance Note
HewardMills30 December 2024
What Data Protection Officers must understand about South Africa’s latest Direct Marketing Guidance Note

How your DPO can help your business navigate the new EU Cyber Resilience Act
HewardMills20 December 2024
How your DPO can help your business navigate the new EU Cyber Resilience Act

What the new UK Data Use and Access Bill means for data protection
HewardMills28 November 2024
What the new UK Data Use and Access Bill means for data protection

Brazilian Data Protection Authority launches consultation on AI regulations
HewardMills16 November 2024
Brazilian Data Protection Authority launches consultation on AI regulations

Safeguarding personal data and reducing risk of data breaches during the holiday season
HewardMills11 November 2024
Safeguarding personal data and reducing risk of data breaches during the holiday season

The US privacy landscape in mid-2024: How new state laws impact marketing, AI, and the health sector
HewardMills7 November 2024
The US privacy landscape in mid-2024: How new state laws impact marketing, AI, and the health sector

Australia’s federal government introduces a ‘Privacy & Other Legislation’ Bill
HewardMills7 November 2024
Australia’s federal government introduces a ‘Privacy & Other Legislation’ Bill

The impact of ‘International Treaty for AI’ on global data protection management
HewardMills7 November 2024
The impact of ‘International Treaty for AI’ on global data protection management

Saudi Arabia’s Personal Data Protection Law comes into force
HewardMills6 November 2024
Saudi Arabia’s Personal Data Protection Law comes into force

Why your clinical trials need a DPO
HewardMills6 November 2024
Why your clinical trials need a DPO

Australia Tables Cyber Security Bill
HewardMills30 October 2024
Australia Tables Cyber Security Bill

Safeguarding personal data during a clinical trial
HewardMills27 October 2024
Safeguarding personal data during a clinical trial

How a clearer ESG framework can boost privacy programmes
HewardMills23 October 2024
How a clearer ESG framework can boost privacy programmes

How do you select the right Data Protection Officer?
HewardMills20 October 2024
How do you select the right Data Protection Officer?

Thailand’s data protection authority’s landmark fine highlights importance of appointing a DPO
HewardMills15 October 2024
Thailand’s data protection authority’s landmark fine highlights importance of appointing a DPO

The ICO takes action against the UK Labour party
HewardMills15 October 2024
The ICO takes action against the UK Labour party

Avoiding the risks of data breaches in using AI chatbots
HewardMills15 October 2024
Avoiding the risks of data breaches in using AI chatbots

Mitigating Cybersecurity & Privacy Risks in India
HewardMills15 October 2024
Mitigating Cybersecurity & Privacy Risks in India

5 easy ways to balance DEI with data protection & privacy practices in the workplace
HewardMills15 October 2024
5 easy ways to balance DEI with data protection & privacy practices in the workplace

The key role of governance in making business better
HewardMills26 September 2024
The key role of governance in making business better

Why DPOs and privacy teams need to consider adequate cross-border data transfers mechanisms critical for data protection compliance
HewardMills9 September 2024
Why DPOs and privacy teams need to consider adequate cross-border data transfers mechanisms critical for data protection compliance

South Korean regulator fines AliExpress for breaches of data transfer rules
HewardMills30 August 2024
South Korean regulator fines AliExpress for breaches of data transfer rules

How working closer with your Data Protection Officer can reduce the risk of fines
HewardMills9 August 2024
How working closer with your Data Protection Officer can reduce the risk of fines

How privacy teams can prepare for the EU AI Act coming into force
HewardMills2 August 2024
How privacy teams can prepare for the EU AI Act coming into force

Installing data protection guardrails to tackle AI-related cyberattacks
HewardMills26 July 2024
Installing data protection guardrails to tackle AI-related cyberattacks

Privacy and Security in cross-border genetic data transfers
HewardMills25 July 2024
Privacy and Security in cross-border genetic data transfers

CrowdStrike outage – key lessons for DPOs and CPOs
HewardMills22 July 2024
CrowdStrike outage – key lessons for DPOs and CPOs

Latest roundup in global data protection and privacy
HewardMills27 June 2024
Latest roundup in global data protection and privacy

UK general election: What the major parties are saying about data protection and AI
HewardMills25 June 2024
UK general election: What the major parties are saying about data protection and AI

Texas Data Privacy and Security Act: The most significant US privacy law yet?
HewardMills23 June 2024
Texas Data Privacy and Security Act: The most significant US privacy law yet?

Latest regulatory roundup in global data protection and privacy
HewardMills29 May 2024
Latest regulatory roundup in global data protection and privacy

How laws, regulators, and gatekeepers are reshaping digital advertising
HewardMills27 May 2024
How laws, regulators, and gatekeepers are reshaping digital advertising

Navigating privacy regulations on the use of biometric data
HewardMills24 May 2024
Navigating privacy regulations on the use of biometric data

As the European Council adopts the AI Act, here are three recent AI developments from outside the EU
HewardMills22 May 2024
As the European Council adopts the AI Act, here are three recent AI developments from outside the EU

April’s global data protection and privacy regulatory roundup
HewardMills29 April 2024
April’s global data protection and privacy regulatory roundup

Brazilian ANPD seeks views on high-risk processing: Here’s a round-up of the regulator’s activities
HewardMills28 April 2024
Brazilian ANPD seeks views on high-risk processing: Here’s a round-up of the regulator’s activities

Does ‘consent or pay’ comply with the GDPR’s concept of freely given consent? European regulators weigh in on digital advertising’s most contentious topic.
HewardMills27 April 2024
Does ‘consent or pay’ comply with the GDPR’s concept of freely given consent? European regulators weigh in on digital advertising’s most contentious topic.

There’s a new US federal privacy bill: What happens if it passes — or doesn’t?
HewardMills26 April 2024
There’s a new US federal privacy bill: What happens if it passes — or doesn’t?

March global DPP regulatory roundup
HewardMills27 March 2024
March global DPP regulatory roundup

As new AI law pass, remember: AI is already regulated
HewardMills24 March 2024
As new AI law pass, remember: AI is already regulated

Latest regulatory roundup in global data protection and privacy
HewardMills27 February 2024
Latest regulatory roundup in global data protection and privacy

The ‘right of access’: Renewed focus on a long-established cornerstone of data protection
HewardMills22 February 2024
The ‘right of access’: Renewed focus on a long-established cornerstone of data protection

Three key takeaways from DoorDash’s California privacy settlement
HewardMills19 February 2024
Three key takeaways from DoorDash’s California privacy settlement

AI regulation in the EU and the UK: Two diverging approaches
HewardMills13 February 2024
AI regulation in the EU and the UK: Two diverging approaches

The AI Act’s near final draft
HewardMills31 January 2024
The AI Act’s near final draft

Latest regulatory roundup in global data protection and privacy
HewardMills29 January 2024
Latest regulatory roundup in global data protection and privacy

US Privacy Law 2024: New legislation, an enforcement sweep (And it’s only January)
HewardMills27 January 2024
US Privacy Law 2024: New legislation, an enforcement sweep (And it’s only January)

EDPB’s Data Protection Officer research shows significant compliance gaps
HewardMills22 January 2024
EDPB’s Data Protection Officer research shows significant compliance gaps

Three things that probably *Won’t* happen in data protection in 2024
HewardMills21 December 2023
Three things that probably *Won’t* happen in data protection in 2024

December’s global privacy news roundup
HewardMills21 December 2023
December’s global privacy news roundup

Brexit and Beyond: Adapting to the UK’s evolving data privacy landscape
HewardMills21 December 2023
Brexit and Beyond: Adapting to the UK’s evolving data privacy landscape

EU agrees landmark deal on regulation of artificial intelligence
HewardMills19 December 2023
EU agrees landmark deal on regulation of artificial intelligence

November global regulatory roundup
HewardMills29 November 2023
November global regulatory roundup

Singapore’s PDPC fines two companies for alleged privacy security violations
HewardMills27 November 2023
Singapore’s PDPC fines two companies for alleged privacy security violations

RBI sets sew IT Governance Standards for banks and NBFCs to enhance data protection
HewardMills26 November 2023
RBI sets sew IT Governance Standards for banks and NBFCs to enhance data protection

Navigating data protection laws worldwide during the busy shopping season
HewardMills25 November 2023
Navigating data protection laws worldwide during the busy shopping season

GDPR and Automated Decision Making in Precision Medicine
HewardMills17 October 2023
GDPR and Automated Decision Making in Precision Medicine

Latest regulatory roundup in global data protection and privacy
HewardMills27 September 2023
Latest regulatory roundup in global data protection and privacy

How to spot a Business Email Compromise and prevent future attacks
HewardMills26 September 2023
How to spot a Business Email Compromise and prevent future attacks

AI’s growing role in privacy, dinner with Da Vinci and the importance of listening
HewardMills25 September 2023
AI’s growing role in privacy, dinner with Da Vinci and the importance of listening

How to navigate the recent updates to the VERBIS registration criteria in Turkey
HewardMills13 September 2023
How to navigate the recent updates to the VERBIS registration criteria in Turkey

India is updating its data protection bill
HewardMills29 August 2023
India is updating its data protection bill

South Korea takes strong stance with regulatory actions against OpenAI and Meta
HewardMills26 August 2023
South Korea takes strong stance with regulatory actions against OpenAI and Meta

UK’s NCSC publishes new Shadow IT guidance
HewardMills25 August 2023
UK’s NCSC publishes new Shadow IT guidance

Mass data leaks by large institutions highlight the severe threat of inadequate privacy measures
HewardMills17 August 2023
Mass data leaks by large institutions highlight the severe threat of inadequate privacy measures

Data Health checks in healthcare sector
HewardMills31 July 2023
Data Health checks in healthcare sector

UK and US announce Atlantic Declaration on cooperation on AI and data transfers
HewardMills30 July 2023
UK and US announce Atlantic Declaration on cooperation on AI and data transfers

New Nigeria data protection law
HewardMills29 July 2023
New Nigeria data protection law

The Italian Supervisory Authority imposes a €676,956 fine for data protection failures on Sorgenia S.p.A.
HewardMills28 July 2023
The Italian Supervisory Authority imposes a €676,956 fine for data protection failures on Sorgenia S.p.A.

Sound of Silence: Sweden Slaps Spotify with SEK 58m Fine for Mishandling Data Subject Requests
HewardMills27 July 2023
Sound of Silence: Sweden Slaps Spotify with SEK 58m Fine for Mishandling Data Subject Requests

Five years of DPO Excellence
HewardMills29 June 2023
Five years of DPO Excellence

Microsoft facing an uninsurable $425m fine in relation to LinkedIn targeted advertising
HewardMills27 June 2023
Microsoft facing an uninsurable $425m fine in relation to LinkedIn targeted advertising

Five years strong – HewardMills’ journey to delivering global data dignity
HewardMills26 June 2023
Five years strong – HewardMills’ journey to delivering global data dignity

Switzerland and the Revised Federal Data Protection Act (revFADP) – what you need to know before September 1, 2023.
HewardMills26 June 2023
Switzerland and the Revised Federal Data Protection Act (revFADP) – what you need to know before September 1, 2023.

Celebrating Five Years of Data Protection with GDPR
HewardMills22 May 2023
Celebrating Five Years of Data Protection with GDPR

Regulation on Dosimetry and application of administrative Sanctions of the Brazilian General Data Protection Law
HewardMills22 May 2023
Regulation on Dosimetry and application of administrative Sanctions of the Brazilian General Data Protection Law

Decoding Digital Health: Trans-Atlantic transfers of Health Data
HewardMills20 May 2023
Decoding Digital Health: Trans-Atlantic transfers of Health Data

Addressing data discrimination in Artificial Intelligence technologies
HewardMills19 May 2023
Addressing data discrimination in Artificial Intelligence technologies

Pageantry and Privacy
HewardMills7 May 2023
Pageantry and Privacy

CNIL’s priority topics for investigations in 2023: “smart” cameras, mobile apps, bank and medical records
HewardMills24 April 2023
CNIL’s priority topics for investigations in 2023: “smart” cameras, mobile apps, bank and medical records

The EDPB has kicked off its 2023 coordinated enforcement action on the role of the DPO
HewardMills24 April 2023
The EDPB has kicked off its 2023 coordinated enforcement action on the role of the DPO

Data Protection and Digital Information Bill
HewardMills24 April 2023
Data Protection and Digital Information Bill

ChatGPT and Cybersecurity – A Closer Look
HewardMills24 April 2023
ChatGPT and Cybersecurity – A Closer Look

HewardMills’ journey to attaining B Corp Certification
HewardMills27 March 2023
HewardMills’ journey to attaining B Corp Certification

Privacy by Design to become an ISO Standard
HewardMills15 March 2023
Privacy by Design to become an ISO Standard

The EU AI Framework
HewardMills15 March 2023
The EU AI Framework

Encryption – The Benefits for Businesses
HewardMills15 March 2023
Encryption – The Benefits for Businesses

HewardMills Celebrates Ghana Data Protection
HewardMills13 February 2023
HewardMills Celebrates Ghana Data Protection

HewardMills Celebrates Black History Month
HewardMills13 February 2023
HewardMills Celebrates Black History Month

Who is Responsible for Data Breaches?
HewardMills13 February 2023
Who is Responsible for Data Breaches?

2021 UN Resolution Right to Privacy in the Digital Age
HewardMills13 February 2023
2021 UN Resolution Right to Privacy in the Digital Age

Cookie Law Blog – The Importance of Having a Compliant Website to Improve Accountability and Transparency
HewardMills13 February 2023
Cookie Law Blog – The Importance of Having a Compliant Website to Improve Accountability and Transparency

Meta Fined €390M for GDPR Breach Arising from its Behavioural Ads
HewardMills10 January 2023
Meta Fined €390M for GDPR Breach Arising from its Behavioural Ads

EU-U.S. Data Privacy Framework draft adequacy decision
HewardMills10 January 2023
EU-U.S. Data Privacy Framework draft adequacy decision

2023 latest eye-catching trends / predictions in the cyber industry
HewardMills10 January 2023
2023 latest eye-catching trends / predictions in the cyber industry

2022 Highlights
HewardMills21 December 2022
2022 Highlights

Celebrating 1000 UK B Corps at the Natural History Museum
HewardMills19 December 2022
Celebrating 1000 UK B Corps at the Natural History Museum

Discord fined 800 000 euros over several GDPR breaches
HewardMills14 December 2022
Discord fined 800 000 euros over several GDPR breaches

ICO publishes new set of International Data Transfers guidance
HewardMills14 December 2022
ICO publishes new set of International Data Transfers guidance

What is the EU’s proposed AI Act and how is it pertinent to Life Sciences?
HewardMills14 December 2022
What is the EU’s proposed AI Act and how is it pertinent to Life Sciences?

SCCs December Deadline
HewardMills30 November 2022
SCCs December Deadline

EDPB Guidance on Determining a Lead Supervisory Authority Updates
HewardMills30 November 2022
EDPB Guidance on Determining a Lead Supervisory Authority Updates

Clearview AI Fine
HewardMills30 November 2022
Clearview AI Fine

Latest news on the scanning of internet-accessible systems hosted in the UK as recently announced by NCSC
HewardMills30 November 2022
Latest news on the scanning of internet-accessible systems hosted in the UK as recently announced by NCSC

What’s New in the Cyber Realm – A Spotlight on the EU Cyber Resilience Act
HewardMills28 October 2022
What’s New in the Cyber Realm – A Spotlight on the EU Cyber Resilience Act

Singapore Increases Financial Penalties for Data Breach under New Amendment
HewardMills28 October 2022
Singapore Increases Financial Penalties for Data Breach under New Amendment

ICO Issues Notice of Intent to TikTok
HewardMills28 October 2022
ICO Issues Notice of Intent to TikTok

Britain is Considering Replacing GDPR with its Own Privacy Laws
HewardMills28 October 2022
Britain is Considering Replacing GDPR with its Own Privacy Laws

Diversity, Equity, Inclusion and Data Protection
HewardMills28 October 2022
Diversity, Equity, Inclusion and Data Protection

Facial Recognition: Greek DPA imposes a fine of 20 million Euros on Clearview AI
HewardMills30 September 2022
Facial Recognition: Greek DPA imposes a fine of 20 million Euros on Clearview AI

US Children’s Privacy Law Updates
HewardMills30 September 2022
US Children’s Privacy Law Updates

Children’s Data Rights
HewardMills29 September 2022
Children’s Data Rights

Recent Federal Trade Commission (FTC) Litigation & Top 5 Preventative Measures
HewardMills29 August 2022
Recent Federal Trade Commission (FTC) Litigation & Top 5 Preventative Measures

Google increases data protection in the dispute over the legality of abortions in the USA
HewardMills28 July 2022
Google increases data protection in the dispute over the legality of abortions in the USA

Compliance with ePrivacy made simple
HewardMills14 July 2022
Compliance with ePrivacy made simple

Pride and privacy
HewardMills24 June 2022
Pride and privacy

Top 10 tips for Diversity and Inclusion in the workplace
HewardMills16 June 2022
Top 10 tips for Diversity and Inclusion in the workplace

Should you consider CBPR certification?
HewardMills9 June 2022
Should you consider CBPR certification?

Data Protection and Privacy in Sales and Marketing
HewardMills27 May 2022
Data Protection and Privacy in Sales and Marketing

Clinical trials in Spain: translating the AEPD’s new rules
HewardMills20 May 2022
Clinical trials in Spain: translating the AEPD’s new rules

Tabletop exercises prepare your team for real cybersecurity disasters
HewardMills12 May 2022
Tabletop exercises prepare your team for real cybersecurity disasters

Top 5 tips for introducing new tools to works councils
HewardMills9 May 2022
Top 5 tips for introducing new tools to works councils

Registering with data protection regulators when sponsoring or conducting clinical trials
HewardMills26 April 2022
Registering with data protection regulators when sponsoring or conducting clinical trials

Top 10 tips on compliance for retail organisations
HewardMills12 April 2022
Top 10 tips on compliance for retail organisations

Key considerations for tackling ransomware
HewardMills30 March 2022
Key considerations for tackling ransomware

Top 10 tips on kicking off a privacy compliance project
HewardMills21 March 2022
Top 10 tips on kicking off a privacy compliance project

When is doing the right thing actually right?
HewardMills10 March 2022
When is doing the right thing actually right?

The Ukraine crisis and the heightened risk of cyberattacks
HewardMills25 February 2022
The Ukraine crisis and the heightened risk of cyberattacks

Top 10 tips on building a framework for privacy accountability
HewardMills18 February 2022
Top 10 tips on building a framework for privacy accountability

Diversity and privacy go hand in hand
HewardMills11 February 2022
Diversity and privacy go hand in hand

Top considerations for clinical trials
HewardMills26 January 2022
Top considerations for clinical trials

The CNIL cookie decision and DSB Google Analytics decision
HewardMills20 January 2022
The CNIL cookie decision and DSB Google Analytics decision

Data Protection Day
HewardMills19 January 2022
Data Protection Day

Key considerations in Works Council relationships
HewardMills12 November 2021
Key considerations in Works Council relationships

Footballers threaten to sue for breaches of GDPR
HewardMills19 October 2021
Footballers threaten to sue for breaches of GDPR

Africa focus – Kenya’s Data Protection Act
HewardMills6 October 2021
Africa focus – Kenya’s Data Protection Act

The role of privacy in ESG investing
HewardMills4 October 2021
The role of privacy in ESG investing

Analysing the €225 million fine against WhatsApp
HewardMills8 September 2021
Analysing the €225 million fine against WhatsApp

HewardMills develops Transfer Impact Assessment template
HewardMills2 September 2021
HewardMills develops Transfer Impact Assessment template

HewardMills supports Cyber Essentials certification
HewardMills1 September 2021
HewardMills supports Cyber Essentials certification

Differences between a Data Protection Officer and a Chief Privacy Officer
HewardMills18 August 2021
Differences between a Data Protection Officer and a Chief Privacy Officer

DPO qualifications – what are they?
HewardMills3 August 2021
DPO qualifications – what are they?

Brazilian consumer protection authority fines several banks for personal data misuse
HewardMills28 July 2021
Brazilian consumer protection authority fines several banks for personal data misuse

New UK data sharing obligations
HewardMills8 July 2021
New UK data sharing obligations

Works councils and data privacy rights
HewardMills8 July 2021
Works councils and data privacy rights

Schrems II decision – sanctions and enforcement
HewardMills2 July 2021
Schrems II decision – sanctions and enforcement

European Commission confirms UK adequacy decisions
HewardMills30 June 2021
European Commission confirms UK adequacy decisions

HewardMills’ fast-track privacy health checks
HewardMills17 June 2021
HewardMills’ fast-track privacy health checks

France and Germany crack down on cookie compliance
HewardMills28 May 2021
France and Germany crack down on cookie compliance

EDPB adopts favourable opinion on draft UK adequacy decision
HewardMills30 April 2021
EDPB adopts favourable opinion on draft UK adequacy decision

The EU Commission has proposed harmonised rules on AI
HewardMills23 April 2021
The EU Commission has proposed harmonised rules on AI

Data protection software tools
HewardMills12 April 2021
Data protection software tools

Tackling Covid-19 variants and its implications on global personal health data sharing
HewardMills12 April 2021
Tackling Covid-19 variants and its implications on global personal health data sharing

The EDPB’s response to European Commission’s questions on health research and the application of the GDPR
HewardMills17 March 2021
The EDPB’s response to European Commission’s questions on health research and the application of the GDPR

CNIL imposes joint accountability fines on a controller and processor for GDPR infringement
HewardMills17 March 2021
CNIL imposes joint accountability fines on a controller and processor for GDPR infringement

What’s on the horizon this year for data protection
HewardMills20 January 2021
What’s on the horizon this year for data protection

China’s Personal Information Protection Law Generates High Demand for DPO Services
HewardMills15 January 2021
China’s Personal Information Protection Law Generates High Demand for DPO Services

BluJay Solutions appoints HewardMills as external DPO
HewardMills11 January 2021
BluJay Solutions appoints HewardMills as external DPO

What do you need to know about CPRA?
HewardMills20 December 2020
What do you need to know about CPRA?

Apple’s Focus on Personal Data Protection
HewardMills3 November 2020
Apple’s Focus on Personal Data Protection

Importance of organisations to take responsibility of their data management
HewardMills2 November 2020
Importance of organisations to take responsibility of their data management

Black History Month: Why diversity in data protection matters?
HewardMills29 October 2020
Black History Month: Why diversity in data protection matters?

Diving into Class Action claims, what you need to know
HewardMills20 October 2020
Diving into Class Action claims, what you need to know

Court rules police use of facial recognition technology unlawful
HewardMills8 October 2020
Court rules police use of facial recognition technology unlawful

Brazil’s LGPD to take immediate effect
HewardMills14 September 2020
Brazil’s LGPD to take immediate effect

Machine Learning Algorithms in Online Learning
HewardMills9 September 2020
Machine Learning Algorithms in Online Learning

Hospitality industry faces data scrutiny
HewardMills25 August 2020
Hospitality industry faces data scrutiny

HewardMills talks with Active Navigation and Faegre Drinker on the PrivSec panel
HewardMills24 August 2020
HewardMills talks with Active Navigation and Faegre Drinker on the PrivSec panel

Why organisations need to follow all DPO requirements
HewardMills20 August 2020
Why organisations need to follow all DPO requirements

Privacy Shield Struck Down by European Court of Justice
HewardMills11 August 2020
Privacy Shield Struck Down by European Court of Justice

GDPR vs CCPA: top 5 obligations global DPOs should pay attention to
HewardMills6 July 2020
GDPR vs CCPA: top 5 obligations global DPOs should pay attention to

Data mapping, DPOs and consumer protection
HewardMills1 July 2020
Data mapping, DPOs and consumer protection

EU DPA’s response to coronavirus – balancing data protection, public health, and economies amid a pandemic
HewardMills3 April 2020
EU DPA’s response to coronavirus – balancing data protection, public health, and economies amid a pandemic

Coronavirus and data protection
HewardMills19 March 2020
Coronavirus and data protection

The new European strategy for data – implications for Big Tech
HewardMills10 March 2020
The new European strategy for data – implications for Big Tech

What’s next for data security in 2020?
HewardMills3 February 2020
What’s next for data security in 2020?

Children’s data protection in the age of datafication: a need for balance
HewardMills15 October 2019
Children’s data protection in the age of datafication: a need for balance

The legal fallout of the Capital One data breach
HewardMills7 September 2019
The legal fallout of the Capital One data breach

The DPO must be independent, but how?
HewardMills28 August 2019
The DPO must be independent, but how?

The Marriot International data breach fine – yet another reminder to prioritise personal data protection
HewardMills19 August 2019
The Marriot International data breach fine – yet another reminder to prioritise personal data protection

Privacy and Security Forum (Washington DC)
HewardMills5 August 2019
Privacy and Security Forum (Washington DC)

Facebook databreach
HewardMills26 July 2019
Facebook databreach

183 million reasons to invest in your Data Protection Officer (DPO) function.
HewardMills16 July 2019
183 million reasons to invest in your Data Protection Officer (DPO) function.

JP Reis & HewardMills Breakfast briefing
HewardMills30 May 2019
JP Reis & HewardMills Breakfast briefing

A comparison between the GDPR and the California Consumer Privacy Act 2018
HewardMills29 April 2019
A comparison between the GDPR and the California Consumer Privacy Act 2018

IAPP Data Protection Intensive UK 2019
HewardMills14 March 2019
IAPP Data Protection Intensive UK 2019

The new Washington Privacy Act; a move towards enhanced Information privacy laws in the US
HewardMills12 March 2019
The new Washington Privacy Act; a move towards enhanced Information privacy laws in the US

How to build client relationships
HewardMills4 March 2019
How to build client relationships

The new EU ePrivacy Regulation & new Data Protection laws
HewardMills4 March 2019
The new EU ePrivacy Regulation & new Data Protection laws

Certified Data Protection Officer: Friend or Foe?
HewardMills4 December 2018
Certified Data Protection Officer: Friend or Foe?

Is your processing legit? Using a legitimate interest assessment to process data under the GDPR
HewardMills3 May 2018