Hawktalk

“How to write a suicidal job application?” or “How not to become a member of the Information Commission”

Last June, I applied to become a Non-Executive Member of the new Information Commission; there were seven places up for grabs.  My application has been turned down without an interview – so clearly I am NBG as far as HMG is concerned. I knew that my application was unlikely to be successful, but just in case I made the cut, my application was based on the following observations made in my application: The Open Rights Group letter Anyway, I thought

Read article

EDPB complains that Commission’s draft Decision which concludes the UK’s DP regime is Adequate, is inadequate

In my previous blogs (August 12 and 17), I showed that the Commission’s analysis of the Draft Adequacy Agreement/Decision covering the Data (Use and Access) Act (DUAA) was both deficient and superficial. Well the European Data Protection Board’s (EDPB) analysis of the Commission’s Draft Agreement has come to the same conclusion (see references). Of course, the EDPB uses far more polite language than in my blog (i.e. it’s not as rude).  It cushions its criticism in gentle words like: “inviting

Read article

Facial Recognition CCTV: Human Rights Commission action exposes ICO inaction

How embarrassing! The UK’s Equality and Human Rights Commission (EHRC) is joining a judicial review (JR) to ensure the Metropolitan Police’s current use of live facial recognition technology (FRT) complies with human rights law. Ten days earlier, our laissez-faire ICO issued the blandest of non-statements (13 August 2025) concerning the Police use of FRT:  “When used by the police, FRT must be deployed in a way that respects people’s rights and freedoms, with appropriate safeguards in place”. What these appropriate

Read article

Commission’s Draft Adequacy Agreement contains erroneous analysis of UK’s Data (Use and Access) Act 2025 – Part 2

This blog is the continuation from Part 1 published last Tuesday.  In summary, the draft Adequacy Agreement (“the Agreement”) published by the Commission does not accurately describe the UK’s Data Protection regime and the impact of the Data (Use and Access) Act 2025 (“DUAA”). This blog explores the error surrounding: Research International Transfers National Security- In Part 1 of the analysis, the blog considered errors relating to: Annex 1 – lawful basis Special category of personal data Annex 2 – incompatibility

Read article

Commission’s Draft Adequacy Agreement contains an erroneous analysis of UK’s Data (Use and Access) Act 2025 – Part 1

The draft Adequacy Agreement (the “Agreement”) published by the European Commission last month contains seven basic errors of analysis which calls into question whether the Agreement accurately reflects the current state of UK data protection law.  This is important because the European Parliament is likely to OK this Agreement on the back of a very deficient analysis. This blog (and the next one) explores the main errors.  In summary, these errors involve: Annex 1 – lawful basis Special category of personal

Read article
Search Hawktalk blogs by month :
Select Date
View blogs by category:
Hawktalk Taxonomy
Upcoming courses:
2 February – 6 February 2026
13 April – 17 April 2026
24 March – 26 March 2026
15 June – 17 June 2026

Workshop: Thursday 20 Nov

Cartoon: