In an injunction of July 10, 2021, published the following month, the Italian data protection authority (Garante per la protezione dei dati personali) has fined the Airport of Bologna € 40,000 for not having implemented adequate technical and organizational measures for a whistleblowing application. Further, the authority held that for that application, a data protection […]
GDPR
The New California Privacy Rights Act (CPRA)
Not that long ago, in January 2020, the California Consumer Privacy Act (CCPA) entered into force. Shortly after that, a proposition was made to amend the CCPA, introducing a new privacy law in California, the CPRA. We reported here. Californians once more voted in favor of a new data protection law on November 3, 2020, […]
Are portable body temperature cameras GDPR compliant?
According to the French Conseil d’Etat: No! In order to combat Covid-19, the French municipality of Lisses installed one fixed thermal camera in a municipal building that was able to report excessive body temperatures. Additionally, several portable thermal cameras were entrusted to municipal officials who at the entrance of schools could measure excessive temperatures of […]
The Marketing Guide to the GDPR- Video Series
We are proud to present the first chapter of 4 whiteboard videos that focus on the most common issues faced by Marketing Departments regarding GDPR obligations. “The Marketing Guide to the GDPR” contains relatable and comprehensible examples that allow for the viewer to grasp a very broad overview of the impact of personal data in […]
Swiss Hotel Booking Platform must comply with the GDPR
The Austrian Data Protection Authority has ordered a Swiss online hotel booking platform to comply with the requirements set forth in the EU General Data Protection Regulation (GDPR), in particular to provide the information according to Art. 13 GDPR to the data subject. The ordinance was based on the following facts: An Austrian citizen living […]
The Long Arm of the GDPR
The new General Data Protection Regulation (GDPR) strictly regulates the collection, use and storage of personal data, but does the long arm of the law stretch beyond the EU borders more than anyone could have anticipated? If you are surfing the web to see who the GDPR applies to, you could come to the conclusion […]
VIOLATION OF CHILDREN’S PRIVACY – Record COPPA Enforcement against Oath, Inc.
In December 2018, the office of the New York Attorney-General issued the largest ever US penalty for the violation of the Children’s Online Privacy Protection Act (COPPA), to Oath Inc, the Verizon-owned company formerly known as AOL. In addition to the penalty amount of 4.95 Million USD, Oath Inc, agreed to adopt extensive COPPA compliant […]
Give me all your data: US CLOUD Act & Australian “Decryption” Bill vs. the GDPR
Nowadays crimes are more and more committed or at least facilitated by a smartphone or other computing device. That is why digital evidence in form of data is essential in almost all criminal investigations.[1] But that does not mean that the collection of such evidence is straightforward and effortless. Law enforcement authorities (LEAs) face, among […]
España: Aprobada la Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales.
Con un apoyo parlamentario del 93% la nueva Ley entrará en vigor al día siguiente de su publicación en el Boletín Oficial del Estado. La nueva Ley adapta el derecho español al Reglamento General de Protección de Datos (RGPD) e introduce novedades mediante el desarrollo de materias contenidas en tal reglamento. Las más importantes de […]
Spain: The Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights has been approved.
With 93% parliamentary support, the new Law will enter into force the day after its publication in the Official State Gazette (Boletín Oficial del Estado BOE). The new Law adapts Spanish law to the General Data Protection Regulation (GDPR) and introduces novelties through the development of certain matters contained in the GDPR. The following are […]
Portuguese Data Protection Authority Imposes 400,000 € Fine on Hospital
The Barreiro Hospital in Portugal was fined 400,000 € by the Portuguese Data Protection Authority CNPD (Comissão Nacional de Proteção de Dados) for incompliancy with the EU General Data Protection Regulation (GDPR) by not separating access rights to patents’ clinical data. The public sector hospital had granted access to patients’ clinical data via their system […]
España: El Pleno del Congreso de los Diputados convalida el Real Decreto-Ley para adaptar el Derecho español a la normativa de la Unión Europea en materia de protección de datos.
El Pleno del Congreso de los Diputados ha convalidado el “Real Decreto-ley 5/2018, de 27 de julio, de medidas urgentes para la adaptación del Derecho español a la normativa de la Unión Europea en materia de protección de datos”. La adaptación del marco normativo interno al Reglamento General de Protección de Datos europeo fue tratada […]
Change is Coming in Ireland: Implementing the GDPR
With the General Data Protection Regulation (GDPR) less than a year away from implementation, Ireland’s Data Protection Commission could quickly become one of the busiest in Europe. New rules dictating that multinationals can treat any supervisory authority as their single regulating body may lead to Google, Amazon, Facebook, Twitter, LinkedIn, Microsoft, and many more tech […]
Legislative procedure ongoing: The Council of European Union and its version of the planned ePrivacy Regulation.
Background The European Commission, in April 2016, launched a public consultation in order to gather opinions of different stakeholders in regard to the future of Directive 2002/58/EC (ePrivacy Directive). The ePrivacy Directive concerns the processing of personal data and the protection of privacy in the electronic communications sector. Almost a year later and after the publication of […]
Japan on Its Way to Data Protection Adequacy?
Data transfers to countries outside the European Economic Area are only legal if –in addition to the requirement of a legal basis or the data subject’s consent– an adequate level of data protection in that country can be guaranteed. One way this can be achieved is an Adequacy Decision of the European Commission. The Commission […]
1 2