Sources
Manage your legal data library — 12 sources across 4 jurisdictions
General Data Protection Regulation (GDPR)Art. 5
Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.
General Data Protection Regulation (GDPR)Art. 7-8
Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented.
General Data Protection Regulation (GDPR)Art. 9
Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs shall be prohibited.
Personal Information Protection Law (PIPL)Art. 13
Personal information processors may process personal information only where one of the following circumstances exists.
Cybersecurity LawArt. 41
Network operators collecting and using personal information shall follow the principles of legality, propriety and necessity.
Campbell v MGN Ltd [2004] UKHL 22
The House of Lords held that the publication of photographs of Naomi Campbell attending Narcotics Anonymous meetings constituted a breach of confidence.
Lloyd v Google LLC [2021] UKSC 50
The Supreme Court held that the representative action could not proceed as the claimant had not shown that each member of the class had suffered the same loss.
R (Bridges) v Chief Constable of South Wales Police [2020] EWCA Civ 1058
The Court of Appeal held that the use of automated facial recognition technology by the police was unlawful.
Carpenter v United States, 585 U.S. 296 (2018)
The Supreme Court held that accessing historical cell-site location information constitutes a search under the Fourth Amendment.
EU AI ActArt. 5
The following AI practices shall be prohibited: real-time remote biometric identification systems in publicly accessible spaces for law enforcement purposes.
Data Security LawArt. 27
Those carrying out data processing activities shall establish and improve a whole-process data security management system.
Vidal-Hall v Google Inc [2015] EWCA Civ 311
The Court of Appeal held that misuse of private information is a tort and that damages for distress can be awarded under the Data Protection Act.