Loading

Category: ePrivacy

ePrivacy

”Pay or ok” — Does this new paid subscription model invalidate consent?

There has been much debate about the validity of consent under the GDPR as it relates to the “Pay or ok” paid subscription model on social media and other platforms and websites.   Since November 7, European users of Facebook and Instagram have had the option to pay a subscription in exchange for an ad-free

Aphaia participates in FOAN 2023

Aphaia’s Partner Cristina Contero Almagro delivered a presentation on NIS 2 Directive at FOAN 2023, which was held in Ghent on 30th and 31st October.   The 11th International Workshop on Fiber Optics in Access Networks (FOAN) took place in Ghent on 30th-31st October, in conjunction with the International Congress on Ultra Modern Telecommunications and

Italian Supervisory Authority orders restrictions on AI app Replika

Garante, the Italian Supervisory Authority orders restrictions on AI app Replika, claiming that the app poses a risk to children and emotionally vulnerable individuals.   Replika is an AI-powered chatbot that can adapt to its user’s preferences and produce a faithful “copy” of their character. The Italian DPA has taken issue with how Replika utilises

Aphaia attends FOAN 2022

Aphaia attended FOAN 2022, which was held in Valencia (Spain) on the 11th and 12th of October.   The 10th International Workshop on Fiber Optics in Access Networks (FOAN) took place in Valencia on 11-12th October, in an all-day event which was organised jointly with the International Congress on Ultra Modern Telecommunications and Control Systems

AI regulatory sandbox: pilot program launched

The Government of Spain and the European Commission recently launched a pilot program for the AI regulatory sandbox.    Last month, the government of Spain and the European Commission presented a pilot of the first regulatory sandbox on Artificial Intelligence. This sandbox aims to bring together the  competent authorities and the companies that develop AI

GDPR-CARPA certification mechanism adopted by CNPD

Luxembourg adopted the GDPR-CARPA verification mechanism  becoming the first country to introduce a certification mechanism under the GDPR.   The National Data Protection Commission of Luxembourg (CNPD) adopted its GDPR-CARPA (Certified Assurance-Report based Processing Activities) certification mechanism last month. This will be known as the first certification mechanism under the GDPR to be adopted on

Google Analytics custom features do not make transfers legal, according to CNIL

CNIL has announced that even with the use of Google Analytics custom features, transfers are still not legal.    CNIL recently announced that even with the use of Google Analytics custom features, transfers are still not legal in the absence of a transfer deal between Europe and the US. This announcement was added in the

The concept of “data exporter” clarified by the Danish DPA

In the light of the Schrems II judgment by the CJEU, questions relating to the concept of “data exporter” have been clarified by the Danish DPA.     Since the CJEU’s Schrems II judgment, the Danish Data Protection Agency has received an increasing number of questions relating to the transfer of personal data to third countries.

New data strategy introduced in the UK

New data strategy introduced in the UK to drive innovation and improve efficiency in the health sector.    The UK recently announced a new data strategy for health data, which focuses on 7 principles to harness the data-driven power and innovation exhibited during the pandemic, and use it to improve the future of healthcare. These

Bank fined by Hungarian SA for unlawful data processing

Budapest Bank fined by Hungarian SA, for unlawful data processing as the controller’s use of AI systems lacked transparency.    Budapest Bank was recently fined by the Hungarian SA due to the fact that the data controller (Budapest Bank) performs automated analyses of customers’ satisfaction using AI on customer service phone calls. This data processing