Loading

Category: Data Protection

Medical data breach leads to major fine from CNIL

Earlier this month, the CNIL imposed a fine of €1.5 million after a medical data breach affecting nearly 500,000 people revealed a company’s security flaws.   Early last year, a major data breach affecting nearly 500,000 people was reported. The breach involved information including users’ surnames, first names , social security numbers, names of their

New cookie consent popup launched by Google following CNIL fine

Google is rolling out a new cookie consent pop up, after receiving a fine from the CNIL under the EU GDPR.   Google recently shared a preview of its new cookie consent popup. This new popup will initially be available on YouTube in France. However Google has expressed that it plans to roll out the

Record fine imposed by the Dutch DPA

A record fine was imposed on the Tax and Customs Administration by the Dutch DPA for multiple GDPR violations.    The Dutch Data Protection Authority has imposed a fine of 3.7 million euros on the Tax and Customs Administration due to years of unlawful processing of personal data in their Fraud Signalling Facility. According to

Danish bank fined for failure to delete the data it no longer needed

The Danish SA has proposed a fine, and had Danske bank reported to police officials, after the bank reportedly neglected to have data deleted.    The Danish Supervisory Authority has filed a police report against Danske Bank and proposed a fine on the bank, of €1.3 million, according to this report from the EDPB. This

Fine from the Dutch DPA for requesting ID for erasure requests

A Company received a fine from the Dutch DPA for the collection of excessive data.    The Dutch Data Protection Authority has imposed a fine of €525,000 on DPG Media according to this EDPB report. The media company was fined for requesting a copy of subjects’ identification to confirm their identity before honoring their right

Forged legal requests result in data breach at Meta and Apple

Apple Inc. and Meta Platforms have fallen victim to forged legal requests from hackers, resulting in data breaches.    Apple Inc. and the parent company of Facebook, Meta Platforms Inc., provided customer data to hackers who pretended to be law enforcement officials, according to this report from Bloomberg. Apple and Meta provided hackers with basic

New agreement on EU-US data transfers

For companies which depend on cross border data transfers, some needed relief may come in the form of a new agreement on EU-US data transfers.  The European Union and the U.S. recently announced that they had reached an agreement  “in principle” on a new framework for cross-border data transfers. This is expected to bring some

Digital Markets Act agreement reached between EU Council and Parliament

An agreement has been reached between the EU Council and European Parliament on the Digital Markets Act. The Digital Markets Act was provisionally agreed upon by the European Parliament and the European Council after several hours of negotiation which involved three-way talks between the Council, Commission and Parliament. Last week, the European Parliament released a

Fine imposed on Meta Platforms by the Irish DPC

A €17 million fine imposed on Meta Platforms resulted from the company’s inability to demonstrate compliance, after several personal data breaches.    The Irish DPC has imposed a fine of €17 million on Meta Platforms Ireland Limited (Meta Platforms). The company, formerly titled Facebook Ireland Limited, was found to have infringed Articles 5 (2) and

Transparency is not enough: EDPS on targeted advertising

The EDPS says “transparency is not enough” and calls for a prohibition on targeted advertising based on pervasive tracking.    In a statement penned by the European Data Protection Supervisor, Wojciech Wiewiórowski, he described the current state of cyberspace as figurative “walled gardens”, lamenting that the internet has become “a space of advertising-driven business models