Archive – GDPR (2026)

Companies involved in the development of medicinal products and therapeutic treatments process patients’ health data, yet they often cannot rely on the same legal basis for processing as healthcare providers. Many therefore choose patient consent as apparently the safest route. Supervisory authoriti

Smart glasses are no longer a mere technological curiosity. The less conspicuous they appear, the more legal issues they raise – particularly in the workplace. A recent decision by the Catalan data protection authority, APDCAT, shows that even if it cannot be proven that recording has actually taken

Under certain conditions, employers may access an employee’s work email account. A recent judgment of the Supreme Administrative Court confirms that what matters is not who owns the account, but whether the employer has clear internal rules in place, whether the employee was informed in advance, and

Sending marketing messages via SMS is a complex discipline. Since regulation was first introduced, senders have been grappling with a near‑impossible challenge: how to meet all legal requirements within the technical limit of 160 characters per message, while still leaving enough room for the actual