1.    ICO fines Cabinet Office £500,000 for disclosing addresses of 2020 the New Year Honours recipients (link (https://ico.org.uk/action-weve-taken/enforcement/cabinet-office-mpn/)). 2.    Draft EU directive on improving working conditions in platform work (link (https://ec.europa.eu/commission/presscorner/detail/en/ip_21_6605)). 3.    UK Government's Roadmap to an effective AI assurance ecosystem (link (https://www.gov.uk/government/publications/the-roadmap-to-an-effective-ai-assurance-ecosystem/the-roadmap-to-an-effective-ai-assurance-ecosystem)). 4.    EDPB on the interplay between GDPR's extraterritoriality and data transfer provisions (link (https://edpb.europa.eu/system/files/2021-11/edpb_guidelinesinterplaychapterv_article3_adopted_en.pdf)). 5.    Wiesbaden court orders university to stop using a cookie consent management platform because of transfers of data to the US due to the use of Akamai Content Delivery Network services (link (https://www.jurpc.de/jurpc/show?id=20210172)). 6.    Updated guidance on data transfers and EU SCCs from the Baden-Württemberg authority in Germany (link (https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/10/OH-int-Datentransfer.pdf)). 7.    Information Commissioner’s Opinion: Data protection and privacy expectations for online advertising proposals (link (https://ico.org.uk/media/about-the-ico/documents/4019050/opinion-on-data-protection-and-privacy-expectations-for-online-advertising-proposals.pdf)). 8.    CJEU's C‑102/20 in StWL v. eprimo GmbH on inbox advertising (link (https://curia.europa.eu/juris/document/document.jsf?text=&docid=250043&pageIndex=0&doclang=DE&mode=req&dir=&occ=first&part=1&cid=925901)). 9.     Advertising Platform OpenX has been fined $2 Million for breaching Children’s Privacy Law (link). 10. EDPB statement on the Digital Services Package and Data Strategy (link (https://edpb.europa.eu/system/files/2021-11/edpb_statement_on_the_digital_services_package_and_data_strategy_en.pdf)). 11. Proposal for a European regulation on the transparency and targeting of political advertising (link (https://eur-lex.europa.eu/resource.html?uri=cellar:9cec62db-4dcb-11ec-91ac-01aa75ed71a1.0001.02/DOC_1&format=PDF)). 12. NHS Business Authority v Information Commissioner & Spivack [2021] UKUT 192 (AAC) (link (https://assets.publishing.service.gov.uk/media/6135fb748fa8f503c7dfb8a3/GIA_0136_2021-00.pdf)) 13. Council of Europe recommendation on automatic processing of personal data in the context of profiling (link) (https://edoc.coe.int/en/international-law/10670-protection-of-individuals-with-regard-to-automatic-processing-of-personal-data-in-the-context-of-profiling-recommendation-cmrec20218.html).