On August 11, 2023, the President of India gave his assent to the Digital Personal Data Protection Act, 2023 (DPDP Act). India, as a tech-savvy nation with a booming digital economy, recognized the need for a structured data protection framework. It shall come into force on such date as the Central Government may notify in […]
Internationaler Datenschutz
Internationaler_Datenschutz
The Long-Awaited U.S. Adequacy Decision Has Been Issued By The European Commission
Last year in Spring I mentioned in my article, Will Spring Bring a New EU-U.S. Privacy Shield Agreement?, how the EU and the U.S. were working to bring about an easier way to transfer data across the Atlantic. It was stated by Sean Heather, senior vice president of regulatory affairs for the U.S. Chamber of […]
Mehr Rechtssicherheit beim Datentransfer in die USA – Erfreuliche Nachrichten für den Datenschutz
Am 10. Juli 2023 hat die EU-Kommission den Angemessenheitsbeschluss zum EU-US Data Privacy Framework (EU-US DPF) veröffentlicht. Damit gilt ab sofort, dass für Daten, die an ein nach dem EU-US DPF zertifiziertes US-Unternehmen übermittelt werden, ein in den USA ein angemessenes Datenschutzniveau besteht. Die Vorgänger des EU-US DPF – das Safe Harbor-Abkommen und das Privacy […]
Vertreterregelung nach dem neuen Schweizer Datenschutzgesetz
Zum 01. September 2023 ändert sich für Unternehmen und öffentliche Stellen in der Schweiz so einiges in Sachen Datenschutz: Das neue Schweizer Datenschutzgesetz tritt in Kraft (wir berichteten). Das neue Gesetz verspricht vor allem eine Angleichung der datenschutzrechtlichen Regelungen in der Schweiz an das durch die DSGVO in der EU vereinheitlichte Datenschutzrecht. Heute werfen wir […]
Meta Platforms Faced with Largest Fine in GDPR History for Unlawful Personal Data Transfer to the United States
In a remarkable development that has sent shockwaves across the digital domain, Ireland’s Data Protection Commission (DPC) has imposed a €1.2 billion fine to conclude its long-term investigation into Meta Platforms Ireland Limited – formerly Facebook Ireland – over its data transfers from the EU/EEA to the United States. Let us take a look at […]
“Decreto Trasparenza”: Italian businesses to comply with new obligations for automated processing of employee data
In August 2022, Italy implemented the EU Directive No. 2019/1152 of the European Parliament and of the Council of 20 June 2019 on transparent and predictable working conditions in the European Union by adopting the new Legislative Decree 2022/104 (so called “Decreto Trasparenza”, meaning the “Transparency Decree”). What areas does the Decree cover? The new […]
ChatGPT is back in Italy – What changes have been made and what do users need to know?
OpenAI, the company behind the successful ChatGPT, has been in the spotlight recently due to privacy concerns, particularly in the European Union. Italy’s data protection authority, known as the Garante, imposed a temporary ban on the platform on 31 March, following reports of a data breach that affected ChatGPT users‘ conversations and payment information. As […]
New regime for data transfers from China to third countries
February 2023 was a busy month for China’s data protection regulator and supervisory authority – the Cyberspace Administration of China (CAC). This month marks the end of the six-month grace period for the Regulation of Security Assessment for Outbound Data Transfer (hereinafter referred to as the “Regulation”). With the Regulation now fully in force, companies […]
TikTok auf Diensthandys verbannt!
Aus Sicherheitsgründen unternehmen immer mehr Staaten und Institutionen Maßnahmen, um die Nutzung der chinesischen Kurzvideoplattform zu unterbinden. So dürfen Beschäftigte der EU-Kommission und des EU-Parlaments seit Mitte März die App weder auf ihrem Diensthandy installieren noch nutzen. Hintergrund Neben mangelndem Schutz junger Nutzer*innen wird TikTok längst eine unzureichende Datensicherheit vorgeworfen. Mehrere Staaten gehen davon aus, […]
EU – most relevant GDPR fines of the last years
More than four years after the General Data Protection Regulation 2016/679 (GDPR) came into force, companies and organizations that process personal data inside and outside the EU have come to realize the benefits that a privacy-friendly business management can entail. Moreover, in the last years it became evident that processing personal data in violation of […]
The New Look of Cross-Border Transfers in Switzerland
The Swiss Parliament passed the revised Federal Act on Data Protection (nFADP) in the fall of 2020. The Swiss Federal Council announced that the law will enter into force on September 1, 2023. As there will be no transition period, the requirements must be met from the first day the law becomes effective. While we […]
EU Commission published Draft Adequacy Decision for EU – US data transfer
On 13 December 2022, approximately only 1 month after the signing of President Biden’s Executive Order, the European Commission announced the Draft Adequacy Decision for EU – US Data Transfers. This time-record achievement officially launches the process towards the adoption of the Adequacy Decision for the proposed EU-US Data Privacy Framework, and may put a […]
Irish DPC: Facebook Data Scraping not in line with Art. 25 of the GDPR
In 2021, media reports raised serious questions about how Facebook was dealing with the collected personal data of around 530 million Facebook users. Between 2018 and 2019, these datasets, which also included the email addresses and mobile phone numbers of Facebook users, were exposed on the internet. Following the media reports of these serious data […]
Das neue Schweizer Datenschutzgesetz
Das erste Bundesgesetz über den Datenschutz in der Schweiz (DSG) vom 19.06.1992 trat 1993 in Kraft. Seit dem Inkrafttreten des DSG gab es vielfältigste technologische Entwicklungen, die in der bestehenden Form – logischerweise – nicht im Gesetz aus 1992 berücksichtigt werden konnten. In 2008 erfolgte bereits eine Teilrevision des Schweizer DSG mit dem Ziel, die […]
Google and the U.S.: A multi-state historic privacy settlement
Google, the giant U.S. tech company, will pay a total of $391.5 million to 40 U.S. states, which is the largest multi-state privacy settlement with state Attorneys General in the U.S. history. The main reason behind the fine is that the online search engine platform has engaged in deceptive and unfair actions in violation of […]