Loading

Category: GDPR

Page 7

Fine for lack of cooperation imposed by the Polish DPA

A recent fine imposed by the Polish DPA was for lack of cooperation with the supervisory authority.   The Polish DPA recently imposed a fine on Pactum Poland for lack of cooperation. The case was initiated by a complaint which led the Polish DPA to request information from the company, Pactum Poland. The company’s failure

Violation of data minimisation leads to administrative fine

The Finnish DPA has fined the Finnish Motor Insurers’ Centre, after this controller was found to be in violation of data minimisation.  The Finnish DPA has fined the Finnish Motor Insurers’ Centre over their inability to adhere to the principle of data minimisation. The company was fined late last year, for collecting an unnecessary amount

AI powered age verification systems being tested at UK supermarkets for alcohol purchases.

AI powered age verification systems are now being tested at a few UK supermarkets to verify the ages of people attempting to buy alcohol at self-checkout.  UK supermarkets have begun testing an automated age verification system at self-checkouts when buying alcohol. According to this BBC report, this system will utilize cameras that can estimate a

Stop using Google Analytics: CNIL gives formal notice to website managers.

CNIL has given formal notice to website managers to come into compliance and to stop using Google Analytics due to illegal EU – US Data transfers.    CNIL has joined several other EU watchdogs in ordering website managers to stop using Google Analytics. As a result of several complaints being filed by NOYB, against a

Data subject right of access: Guidelines by the EDPB

The EDPB recently released guidelines on data subject right of access in the context of the GDPR.   The right of access aims to provide individuals with sufficient, transparent and easily accessible information about the processing of their personal data. This is expected to add greater ease to the process of data subjects exercising their

VIII IAB Spain Digital Advertising Regulation Summit Overview

The VIII IAB Spain Digital Advertising Regulation Summit was hosted online on Wednesday 2nd February.   The VIII edition of the IAB Spain Digital Advertising Regulation Summit took place last Wednesday 2nd February in an online half-day event which was sponsored by Google, OneTrust and PrimCity.    The event The IAB Spain Digital Advertising Regulation Summit

Declaration on digital rights and principles proposed by the European Commission

The Commission has proposed a declaration of rights and principles to the European Parliament and Council that is intended to guide digital transformation in the EU.   The European Commission has prepared a draft declaration on digital rights and principles with the aim of providing a clear reference point on the kind of digital transformation

Explore alternatives to Google Analytics: advice from the Norwegian DPA

With multiple European authorities ruling against the use of this service, the Norwegian DPA suggests that companies explore alternatives to Google Analytics.    In a recent blog, we covered why the use of Google Analytics (and Stripe) by the European Parliament was considered a violation of the Court of Justice’s (CJEU) “Schrems II” ruling on

Fine imposed by Italian DPA for aggressive telemarketing

Fine imposed by Italian DPA on Enel Energia, amounting to €26.5 million for aggressive telemarketing.   The Italian DPA has imposed a fine of €26.5 million on Enel Energia for aggressive telemarketing according to this recent report. After hundreds of reports and complaints about unwanted promotional calls to customers from Enel Energia, Garante, the Italian

How subcontractors can reuse data: CNIL outlines specific conditions

How subcontractors can reuse data: this is possible only under specific conditions, which CNIL has outlined with specific context.   Under the GDPR, there are several conditions which need to be met in order for subcontractors to reuse data provided to them by the data controller. French regulator; CNIL has outlined the context under which