Certified Information Privacy Professional/Europe (CIPP/E)

When does the GDPR provide more latitude for a company to process data beyond its original collection purpose?

In which situation would a data controller most likely be able to justify the processing of the data of a child without parental consent?

According to the GDPR, when should the processing of photographs be considered processing of special categories of personal data?

Which GDPR principle would a Spanish employer most likely depend upon to annually send the personal data of its employees to the national tax authority?

An online company’s privacy practices vary due to the fact that it offers a wide variety of services. How could it best address the concern that explaining them...