Loading

Category: GDPR

Page 8

EDPS reprimands European Parliament for use of Google Analytics

Illegal EU-US data transfers by the European Parliament lead to sanction from EDPS    Due to a complaint made approximately one year prior, the European Parliament has been sanctioned by the EDPS over illegal EU-US data transfers, among other violations. On a COVID-19 testing site, the use of Google Analytics and Stripe (both US companies)

Employee right of access: how does it work?

The CNIL of France has released an article explaining the employee right of access under the EU GDPR.   Article 15 of the GDPR gives individuals the right to request a copy of any of their personal data from a data controller. This also applies when the data controller is the individual’s employer. CNIL has

International Data Protection Committee established by Danish DPA

An international data protection committee has been established by the Danish DPA to protect Danish interests regarding international data protection.   The Danish DPA has established a special committee with the aim of giving the Authority’s stakeholders more and better insight into the international data protection work done by the Data Inspectorate. It will also

DATA PROTECTION AND GDPR: LESSONS LEARNED FROM 2021

The data protection industry is constantly evolving as the GDPR is implemented by organisations and enforced by the Data Protection Authorities.    New year, new beginnings? That is not always the case, at least definitively not when the previous year has provided valuable insights for the upcoming one. Considering that the GDPR has been in

CLEARVIEW AI ordered to delete photos by French DPA; CNIL

CLEARVIEW AI, ordered to delete photos by the French DPA after investigation revealed unlawful collection and processing of photos from the Internet.   CLEARVIEW AI, and the facial recognition software the company produces were first reported to the CNIL in May of 2020. This led to an investigation which uncovered two GDPR infractions; the unlawful

Controller and processor fined after app collected an unnecessary amount of data

Controller and processor fined by Icelandic DPA after app collected an unnecessary amount of data without the necessary consent.     At the start of the COVID-19 pandemic the Icelandic government issued gift cards to adult citizens due to the economic strain brought on by the effects of the pandemic. They were issued through an

Bank Millennium fined €80,000 by Polish DPA for failure to report a breach

Bank millennium fined €80,000 by Polish DPA for failure to report, and sufficiently inform data subjects of a breach.   Recently, a fine was imposed on Bank Millennium by the Polish DPA for a data breach which the bank failed to report, and about which they failed to sufficiently inform the affected customers. The supervisory

Algorithmic transparency standard published by UK government

Algorithmic transparency standard for government departments and public sector bodies published by the UK government.     A new standard for algorithmic transparency has recently been published by the UK government giving guidance to government departments and public sector bodies as part of the national data strategy and AI strategy. This initiative was launched recently by the

Data protection standards for adtech outlined by ICO

Data protection standards for adtech have been outlined by the ICO in order to ensure that companies safeguard people’s privacy online.   The ICO has called on various companies to address and eliminate the existing privacy risks associated with the adtech industry. The Information Commissioner recently published an opinion warning companies that are designing novel

Whatsapp privacy policy updated after record fine of €225 million

Whatsapp privacy policy has been updated after the company was hit with a GDPR fine, however, this changes nothing about their service.   Whatsapp has amended their privacy policy after being hit with a record fine for an EU GDPR violation. While the company is still appealing the €225 million fine, their privacy policy is