The Autoriteit Persoonsgegevens, Dutch data protection authority, imposed a fine on a company, which relied on scanning their employees’ fingerprints for attendance and time registration.[1] Facts in a nutshell In the case at hand, the respective company introduced the new fingerprint system in order to reduce the fraudulent abuse of the previous attendance and time […]
mb-firstprivacyenglisch
COVID-19 – New Guidelines on the processing of health data for scientific research
On 21st April 2020, the European Data Protection Board (EDPB) released new guidelines. As a preliminary remark, the EDPB sees that “there are currently great scientific research efforts in the fight against SARS-CoV-2”, which should lead to research results as soon as possible. At the same time, there are legal questions regarding the processing of […]
Dutch Data Protection Authority publishes Decision Aid for Video calling Apps
As a result of the ongoing corona crisis, a lot of companies, as well as private individuals, have increasingly been making use of video calling applications. The Dutch Data Protection Authority (AP) received many questions on how privacy-compliant these apps are and have analysed the 13 most commonly used apps, in particular, their privacy aspects. […]
The Marketing Guide to the GDPR- Video Series
We are proud to present the first chapter of 4 whiteboard videos that focus on the most common issues faced by Marketing Departments regarding GDPR obligations. “The Marketing Guide to the GDPR” contains relatable and comprehensible examples that allow for the viewer to grasp a very broad overview of the impact of personal data in […]
Should we copy the South Korean model of fighting Covid-19?
Covid-19 is spreading rapidly across Europe right now with rising case counts and deaths, especially in Spain and Italy. As a result, many countries have enforced lockdowns and closed their borders to mitigate a further spreading of the virus. Inevitably, these measures are prone to detrimentally affect the economy and our mental health. The Regional […]
Fine imposed on Royal Dutch Lawn Tennis Association for non-compliance with GDPR
Following a two-year long investigation, the Dutch Data Protection Authority (AP) has issued a fine of 525.000€ on the Royal Dutch Lawn Tennis Association (KNLTB) for selling personal data of its members to third parties. Which data was sold? KNLTB sold personal data of a few hundred thousand of its members to two sponsors in […]
The California Consumer Privacy Act, or “Do Not Sell My Personal Information”
On January 1, 2020, the California Consumer Privacy Act (CCPA) has entered into effect, described by many as a landmark law and, according to the American Bar Association, the most comprehensive privacy legislation to be enacted in the United States of America. The CCPA was passed in 2018 and is aimed at providing consumers with […]
Data Protection Foundation Awards Journalist Prize
The year is coming to an end ever so rapidly – at least it feels like that for many of us. It is also the time of retrospection and of awards for this past year’s achievements. One such award is the Journalist Prize presented each year by Germany’s Data Protection Foundation, a private trust that […]
Swiss Hotel Booking Platform must comply with the GDPR
The Austrian Data Protection Authority has ordered a Swiss online hotel booking platform to comply with the requirements set forth in the EU General Data Protection Regulation (GDPR), in particular to provide the information according to Art. 13 GDPR to the data subject. The ordinance was based on the following facts: An Austrian citizen living […]
Digital marketing as a legitimate interest? Dutch DPA clarifies.
On the first of November the Dutch DPA (Autoriteit Persoonsgegevens) has tried to shed some more light on the subject of the legitimate interest as a lawful ground of processing. Besides reconfirming the common understanding and best practices, the Dutch DPA clarifies the legal basis for direct marketing if and to the extent, that the […]
New Rules for the Protection of Whistleblowers
You’ll find a german version here. The Council of Europe announced through a press release on the 7th of October 2019 that it had formally adopted new rules for the protection of whistle-blowers. With the adoption of the “Whistle-blower Directive” across the EU, European private and public organisations have an obligation to make available safe […]
La Agencia Española de Protección de Datos (AEPD) multa a VUELING con 30.000 euros
La AEPD ha multado a VUELING AIRLINES S.L. con 30.000 euros[1] por no haber obtenido el consentimiento adecuado para el uso de cookies en su página web. Con el fin de proporcionar a los interesados la información requerida a efectos de transparencia de conformidad con el artículo 13 del RGPD, la empresa proporciono la información […]
The Spanish DPA fines VUELING with 30.000 EURO
The Spanish data protection authority fined VUELING AIRLINES S.L. with 30.000 Euro[1] for failing to collect appropriate consent for the use of cookies on their website. In order to provide data subjects with the required information for transparency purposes under article 13 GDPR, the company implemented a 2-layer approach: In the first layer, the wording […]
B2B Marketing Days in Würzburg – Data Protection meets Marketing
The two-day conference “B2B Marketing Days” by marconomy took place in Würzburg from October 15-16 2019. The conference is a specialist’s conference for medium-sized companies discussing B2B specific marketing challenges, facilitate knowledge and Best Practice exchange via interactive formats and seeks to support cross-company networking activities. Around 350 participants and workshop lecturers have joined the […]
How Will the German Data Protection Authorities Determine Fines For Companies? – The DSK Publishes a New Concept.
On October 14, 2019, the German Conference of Data Protection Authorities (DSK) published a concept for determining fines in accordance with the GDPR. In some regards, this concept resembles the model of the Berlin Data Protection Authority which was presented in June of this year (we reported in German), but some aspects remain less concrete. […]