Loading

Category: IT law

Spanish DPA AEPD publishes Guidelines on AI audits

AEPD, the Spanish data protection authority, has published Guidelines on the requirements that should be implemented for conducting audits of data processing activities that embed AI. Early this month, the Spanish DPA, AEPD, published Guidelines on the requirements that should be considered when undertaking audits of personal data processing activities which involve AI elements. The

FRA report on AI and fundamental rights: Getting the future right.

European Union Agency for Fundamental Rights (FRA) has released a report on Artificial Intelligence and its effects on fundamental rights.   With the increased use of Artificial Intelligence (AI), there have been mixed reactions to the technology from the general public. Despite the varied opinions and reactions, the fact remains that it is quickly being

ICO urges UK businesses: ensure compliance to data protection law before the end of the UK’s transition.

ICO urges UK businesses to ensure compliance to data protection law before the end of the UK’s transition on December 31st 2020.    December 31st 2020 will officially end the transitionary period for the UK, out of the EU, and the ICO is calling on UK businesses to ensure that if they are impacted by

EU to tackle online gatekeepers through Digital Services Act and the Digital Markets Act

According to the European Commission, the Digital Services Act package is a modern legal framework which will ensure the safety of users online, and maintain a fair and open online platform environment. The European Commission has recently announced the intended implementation of two new pieces of legislation . The Digital Services Act (DSA), and the

Google and Amazon fined: CNIL has fined the two major companies for unlawful cookies.

Google and Amazon, fined by CNIL of France, for placing cookies on users’ computers without getting prior consent or giving satisfactory information. The CNIL reported last week that both companies have been sanctioned, for their misuse of cookies which breached the French Data Protection Act. Following several investigations from December 12th 2019 to May 19th

New regulatory regime for tech giants from the Competition and Markets Authority.

New regulatory regime for tech giants from the Competition and Markets Authority on the UK’s new pro-competition regime for digital markets.   The new advice issued to the UK government today, includes an outline of the design and implementation of the new pro-competition regime for digital markets. This forward-looking, targeted advice was produced by the

Healthcare providers’ broad data access authorisations lead to fines of over 2.9 million euros.

Healthcare providers’ broad data access authorisations lead to fines of over 2.9 million euros in Sweden.    The Swedish DPA, after reviewing eight healthcare providers found that there were deficiencies in the way that they protected access to electronic health records. The assessments primarily examined whether the health care providers had conducted the needs’ and

Draft of new Standard Contractual Clauses published by the European Commission

On 12 November 2020, the European Commission published a draft Implementing Decision on new Standard Contractual Clauses for the transfer of personal data to third countries. The CJEU judgement in the Schrems II case has brought to light some deficiencies in the current guarantees applied to international data transfers. Apart from invalidating the Privacy Shield,

Marketing Executive banned by the Insolvency Service for thousands of unsolicited marketing calls.

Marketing executive banned by the Insolvency Service for six years after making 75,500 unsolicited marketing calls. A former director of a marketing company has been banned from acting as a director or directly or indirectly becoming involved, in the promotion, formation or management of a company, without the permission of the court. For the next

New national privacy bill proposed in Canada.

New national privacy bill proposed in Canada, is expected to significantly increase protections to Canadians’ personal information.  Bill C-11, Canada’s newly proposed national privacy bill, which is also referred to as Digital Charter Implementation Act, 2020, will give Canadians more control and transparency when companies handle their personal information, and therefore expected to increasingly protect