Further to my previous blog explaining the IPA’s new data protection working group, I have written to the Information Commissioner’s Office and to DCMS, asking for clarity on parts of the new EU General Data Protection Regulation.
There are numerous issues which need explanation in order that organisations, including agencies, will be able to better understand what they will need to do in order to comply. In particular, I have asked for confirmation as to whether the Regulation’s prohibition on profiling will apply to online behavioural advertising.
I have also been in discussions with the IAB to consider whether our organisations might collaborate to produce guidance for those of our members operating at different positions within the advertising eco-system. Since all organisations processing personal data – and that term is very broadly defined in the Regulation – will have to comply with the new law, it surely makes sense to try and achieve a common industry position.
Part of this collaborative process will involve trying to create some standard data protection clauses for agency contracts which all data processors in the chain will need to “back-to-back” in their own contracts with their data processing suppliers.
Last updated 16/06/2016