At the beginning of August 2018, the UK Information Commissioner (ICO) issued a fine of £ 140.000 To “Lifecycle Marketing (Mother and Baby) ” Ltd or “LCMB”, also known as “Emma´s Diary” for the illegal collection and sale of personal data of more that 1 million people to a marketing company hired by a political […]
English Posts
Italy integrates GDPR in national privacy legislation
The Italian Council of Ministers has on 8th August 2018 approved a decree which integrates GDPR into Italian Privacy law. The Decree will have to be published to the Italian Official Gazette to come into force. The GDPR will overwrite part of the Italian Privacy Code (decreto legislativo n. 196/2003), it reformulates the duties and […]
Facebook’s response to the ECJ decision on Fanpages. Is this decision being adequately implemented?
As result of the latest European Court of Justice decision regarding the administration of Facebook fanpages, Facebook has recently published an Agreement for data processing activities that aims to comply with the said ruling.(Available here). This article contains an analysis from a data protection law perspective that will determine if the solution implemented by Facebook […]
“US must comply with the EU-US Privacy Shield”
According to the 12 June 2018 European Parliament press release, the Civil Liberties Committee (LIBE Committee) has called on the European Commission to suspend the EU-U.S. Privacy Shield on the grounds that it fails to provide sufficient data protection for EU Citizens. In the press release, the MEPs stated that data transfers between the EU […]
Are companies ready to deal with a high level of scrutiny? – Lessons learned from the Morrisons Case
The purpose of this article is to summarize the lessons that a company can learn from the Morrisons Case with regard to the level of protection that can be considered as “sufficient” and “adequate” for the protection of the personal data of their employees. [1] In our daily practice, our clients are more often than […]
Privacy Impact Assessments: A software tool by the French DPA
The French Data Protection Authority, Commission Nationale Informatique et Liberte (CNIL), released a tool to support data controllers to be compliant with the upcoming General Data Protection Regulation (GDPR). The tool is aimed at automating the obligatory assessments of risk posed by data protection activities to the rights and freedoms of data subjects according to […]
Change is Coming in Ireland: Implementing the GDPR
With the General Data Protection Regulation (GDPR) less than a year away from implementation, Ireland’s Data Protection Commission could quickly become one of the busiest in Europe. New rules dictating that multinationals can treat any supervisory authority as their single regulating body may lead to Google, Amazon, Facebook, Twitter, LinkedIn, Microsoft, and many more tech […]
The obligatory sharing of clinical trial data in the European Union
The European Union aims at entering a new era of clinical trials by enforcing the steps towards personalized medicine. Instead of searching for the best therapy to treat a certain diagnosis, they are moving towards pursuing the best suitable individual therapy. To meet this approach, Big Data technologies have developed new therapies and potential positive […]
New fine to Facebook from the Spanish Data protection Authority
The Spanish Data Protection Authority (AEPD) has condemned Facebook Inc. to the payment of a sanction of 1,200,000 Euros for the existence of two serious and one very serious infringements of Data Protection Law. According to the Agency, Facebook treats personal data for advertising purposes without express consent of the data subjects and does not […]
Privacy at risk: Monitoring of employees and the use of (new) technologies at work
The monitoring of employees at work, or more generally the processing of data in the employment context, is a topic that has been debated for as long as the Data Protection Directive (Dir 95/46/EC – DPD) has been around. Nonetheless, due to the emergence of new technologies and changing work polices, the topic is red […]
Japan on Its Way to Data Protection Adequacy?
Data transfers to countries outside the European Economic Area are only legal if –in addition to the requirement of a legal basis or the data subject’s consent– an adequate level of data protection in that country can be guaranteed. One way this can be achieved is an Adequacy Decision of the European Commission. The Commission […]
Data Protection in the era of Brexit
One of the most controversial matters to be addressed within the context of Brexit, has created uncertainty in the data protection realm. Although United Kingdom is leaving the European Union, there seems to be a general consensus to maintain constant data flows between the UK and the EU. On August 24 2017, the UK government […]
Your Heart Rate Data Can Land You in Jail
This so happened in Ohio last fall, when a man was convicted of aggravated arson and insurance fraud based on evidence provided by the data from his cardiac pacemaker. A man, whose house had burnt down, was investigated against after traces of fire accelerant had been found by the police. The suspect claimed that he […]
Personal Data in China. A Step towards Protection.
Currently, there is no specific data protection law in China; rules relating to personal data protection are found in different laws and regulations. Some weeks ago, on 1 June 2017, the new Cybersecurity Law entered into force. We already wrote about it here. Recently, a new draft of a Standard called “Information security techniques – […]
What do They Know, and How are You Being Tracked Online?
We have heard on how companies are tracking our data, and we have a vague idea on where and when our personal data is being gathered. However, corporate surveillance has been in constant development providing more information about a person than ever before. As an internet user, how much do you know about your personal […]