October

The Department for Culture, Media & Sport confirmed its plans to present its Data Protection Bill to Parliament in early September.

The Bill's primary aim is to ensure that the UK retains the same data protection laws as the rest of the EU once it leaves the EU, scheduled to be in March 2019. The Bill would follow Germany's lead, after the German Federal Parliament in April of this year passed a new German Data Protection Act that adapted current data protection laws to cover derogations from the GDPR's provisions.

Global companies face stricter rules on employee data privacy, in particular when using social media and internal monitoring tools.

It also now becomes clearer that many EU Member States will use the opening clause of the GDPR to re-implement their "old" data privacy laws. An update to the GDPR includes information on use of social media and employee analysis tools, recruiting profiles, inspecting current employees, checking on post-contractual duties, restrictions on monitoring tools, and more.

In sum, said the update, it appears that EU employee data privacy law will be more fractioned which makes it indispensable for global companies to always also check for local compliance.

If you're collecting personal information from European citizens, the upcoming GDPR imposes very specific documentation requirements. The Kantara Initiative's Consent and Information Sharing Work Group has been working on “consent receipt” specification so that it’s clear to both parties’  data controller and data subject what consent has been granted for which data and how that data is going to be used, stored, and destroyed. Kantara released its consent receipt API documentation to the public.
 
Kantara also certifies that organizations are implementing the Identity Assurance program effectively, and it is actively working towards assessment and approval of the proper use of the consent receipt specification, and consent management systems in general, for release later next year.