Loading

Category: Data Protection

Facebook View sunglasses questioned by Irish and Italian authorities

Facebook View sunglasses questioned by the Irish and Italian authorities, regarding whether they effectively notify data subjects that they are being recorded.     A new product by Facebook in collaboration with Ray Ban, is now coming under question by European data protection authorities. The product, called “Facebook View” was introduced to the general public

Right to erasure: Controller ordered to delete photos

Right to erasure is behind Slovenia supervisory authority IPRS’s recent decision, ordering a controller to delete 88 photos.   Slovenian SA recently ordered a data controller to delete a collection of 88 photos of a data subject, taken over a period of time 7 to 15 years ago. The order, which came this July, was

Cookie consent pop-ups among the ICO’s intended topics of discussion at the recent G7 meeting

Cookie consent pop-ups need to be tackled in order to provide more meaningful consent and a better browsing experience, according to the ICO.   At a recent meeting for the data protection authorities of G7 countries, the ICO decided to tackle the topic of cookie consent pop-ups. The ICO has mentioned that there have been

Post-Brexit UK to overhaul privacy rules

Post-Brexit UK to overhaul privacy rules in an attempt to increase effectiveness while maintaining adequacy with the EU and other nations.  The British government is looking forward to creating new privacy rules based on “common sense, not box-ticking”. The new privacy rules might drift the UK away from the EU data protection regulations, including the

Exposed records caused by misconfigured Power Apps

Millions of exposed records caused by misconfigured Power Apps from Microsoft include health related data.    Over a thousand misconfigured web apps have resulted in millions of exposed records. An estimated 38 million records were reportedly exposed online. While there is no evidence that the exposed records were accessed by anyone, investigative research uncovered the

Halifax-based company fined by the ICO

A Halifax-based company fined by the ICO was found to have been making unlawful pension calls.  A Halifax-based company, Parker Beach LTD (PBL) has been fined by the ICO, a total of £50,000 for unlawful cold calls regarding pensions, according to this report from the ICO. The ICO’s investigation revealed that the company, which operates

University data breach exposes the personal details of 355,000 users worldwide

University data breach exposes the personal details of hundreds of thousands of staff and students all over the world.    A University data breach has exposed the personal data of hundreds of thousands of staff and students. A recent news report disclosed that a data breach at the University of Kentucky was discovered during a

CNIL opinion on health passes

CNIL opinion on health passes for COVID-19 vaccination and screening, touching on several aspects of its implementation and use.    Since the world’s introduction into this COVID-19 health crisis, well over a year ago, there have been various measures implemented to facilitate people working, socializing, and living what can be considered a “normal” life. In

Vienna based company fined for unlawful data collection and processing under GDPR

A Vienna based company incurred a GDPR fine of €2 million for the unlawful collection and processing of user data.    A GDPR fine of €2 million was recently imposed on the Vienna based loyalty program operator, Unser Ö-Bonus Club GmbH, for unlawfully processing user data. The company was accused of collecting user data without

Fine imposed by CNIL for failing to comply with retention periods and transparency duties under GDPR

A recent fine imposed by CNIL of France for €1.75 million relates to two GDPR violations by SGAM AG2R LA MONDIALE.    A recent fine imposed by CNIL on the Mutual Insurance Group company- SGAM AG2R LA MONDIALE for GDPR violations, will cost the company €1.75 million. The company was found to have customer personal