Loading

Categorie: Data Protection

EU cyber-attacks framework

The Council has established a framework (Council Regulation (EU) 2019/796)which allows the EU to impose sanctions in relation to cyber-attacks which constitute an external threat to the EU or its Member States. It also includes cyber-attacks against third States or international organisations where restricted measures are considered necessary to achieve the objectives of the Common

Practical guidance on how to process mixed datasets

The European Commission has published guidance on the interaction between the Regulation on the free flow of non-personal data and the GDPR. One year after the GDPR started to apply, most controllers are (or at least they should) well aware of the security and privacy requirements that should govern the datasets which contain personal data.

What data should a controller disclose under a data subject access request?

A recent decision from the Cologne Regional Court addresses whether individuals are entitled to receive emails and personal notes as part of a DSAR. “I want access to all personal data you handle about me”. What should you do as the controller if you receive an email like this? According to GDPR, individuals have the right to obtain:

Aphaia delivers its first data protection workshop in Madrid

The workshop took place at Aphaia’s premises and it was focus on privacy, cybersecurity and data protection. Taking advantage of the first GDPR anniversary, Aphaia decided to deliver a workshop to share our experience with other businesses that may be struggling with data protection issues. Even though GDPR came into force in 2018, Aphaia has

Workplace collection of Biometric Data

Does the collection of biometric data by employer violate privacy? For the first time in Australian history, an employee was fired for refusing to submit biometric finger scanning data required by his employer. The employee believes that he had been wrongfully terminated. After he was denied an unfair dismissal claim by an Australia’s Fair Work

Google’s Huawei ban

Google blocks Huawei access to Android after blacklisting due to some security and privacy concerns The Trump administration adds Huawei to the U.S. Department of Commerce’s Entity List via executive order, thereby blacklisting the company as far as U.S. corporations are concerned.  The world’s second biggest smartphone maker, Huawei, has been barred by Google from

EU-Japan artificial intelligence cooperation

EU Vice-President Ansip and Japan Minister Hirai discussed bilateral cooperation to promote a human-centric approach to artificial intelligence (AI), building on the joint statement of the 26th EU-Japan summit. European Commission Vice-President for the Digital Single Market, Andrus Ansip and Japan’s Minister of State for Science and Technology Policy, Takuya Hirai said after their meeting: “The

Unlawful voice data to be deleted!

A complaint from the Big Brother Watch instigated an investigation into HMRC’s Voice ID service. The ICOs investigation mainly dealt with the voice authentication for customer verification on some of HMRC’s helplines since January 2017. Customers were given insufficient information when it came to how their biometric data would be processed. Biometric data is considered

Cookies, Security and Website tracking

The Dutch data protection authority has recently published its fining policy for violations of GDPR and the Dutch law implementing GDPR. When it comes to cookies, the Dutch DPA’s conclusion is that it is not compliant with GDPR for website pop-ups to block users from access to the site unless they consent to the use

Svea Ekonomi ordered to correct its practices in the processing of personal data

Due to two cases concerning data protection, financial credit company Svea Ekonomi has to improve its practices when it comes to the processing of personal data related to the assessment of creditworthiness, the right of inspect one’s own personal data and notification practices. One of the cases deals with the personal data of a data subject