Loading

Categoría: Data Protection

The National Biometric Information Privacy Act introduced by US Senator Jeff Merkley.

The National Biometric Information Privacy act of 2020, was introduced last week by US Senator Jeff Merkley, accompanied by Senator Bernie Sanders.   The National Biometric Information Privacy Act, a groundbreaking legislation prohibiting private companies from collecting and profiting off biometric data without consumers and employees consent, was recently introduced by US Senator Jeff Merkley.

EU-US Privacy Shield invalidation business implications follow-up

Since the Court of Justice of the European Union (CJEU) invalidated the EU-US Privacy Shield in their Schrems II judgement delivered two weeks ago, many questions have arisen around international data transfers to the US. After the invalidation of the EU-US Privacy Shield by the CJEU two weeks ago, as reported by Aphaia, data transfers

BCR Changes for Brexit: EDPB releases statement guiding enterprises.

The European Data Protection Board (EDPB) released a statement of guidance on Binding Corporate Rules (BCRs), for groups of undertakings, or enterprises which have the UK ICO as their lead supervisory authority (BCR Lead SA).   The EDPB released a statement of guidance on Binding Corporate Rules (BCRs), for groups of undertakings, or enterprises which

EU-US Privacy Shield invalidation business implications

On 16th July, the Court of Justice of the EU delivered a ruling in the case known as Schrems II by which it invalidated EU-US Privacy Shield and confirmed the validity of Standard Contractual Clauses, with caveats. After the CJEU’s Advocate General Henrik Saugmandsgaardøe published his opinion in the so-called ‘Schrems II’ in January, now the CJEU

Biometric identification and authentication: 14 common misconceptions debunked

Biometric identification and authentication, are often misconstrued, or mistakenly used interchangeably. A joint paper by the EDPS and the Spanish DPA, offers clarification on 14 common misconceptions on the two.    Biometric identification and authentication, although sometimes linked, refer to two distinguishable concepts. Biometric Identification is the process of identifying an individual among a group

EU Digital Sovereignty: Ideas for a more resilient EU.

EU digital sovereignty is of paramount importance in the face of the rapid technological evolution currently taking place globally.   A call for EU digital sovereignty had been brought to the forefront of many conversations among policy makers, in light of growing concerns over EU citizens losing their control of their data, capacity for innovation

German court: Facebook data practices breach competition law.

German court: Facebook data practices breach competition law due to its data collection practices from its suite of apps and through external websites.   Germany strikes Facebook’s business model as the German Competition Authority  has launched an inquiry into the data collection practices of the social media and data collection giant with their local court.

Opportunities for online marketplaces have grown during COVID

Opportunities for online marketplaces have grown during the COVID-19 pandemics, from second-hand clothes to artworks. Since privacy risks grow with the number of users and transactions, this is a good time for the platforms to review their approach to data protection. This article builds on my earlier article on COVID-19 business adaptation published as part

CNIL Smart and Thermal Cameras Caution

French data protection authority CNIL calls for caution in the use of smart and thermal cameras, due to the fact that certain proposed systems do not comply with the legal framework for the protection of personal data.    The preservation of anonymity in public spaces is an essential part of exercising personal freedoms like the

Spanish DPA issues €25,000 fine to Glovo for Data Protection Officer appointment violation

The Spanish Data Protection Authority (DPA) AEPD fined Glovo €25,000 for not appointing a Data Protection Officer pursuant to article 37 GDPR. Have you ever wondered whether your business is subject to the DPO designation requirement covered by the GDPR? The ambiguity of the GDPR when it comes to the definition of the cases where