Chat to a DPO
Chat to a DPO

Tag: GDPR

Home
Tag: GDPR
Page 7
Read More
  Zandilli Lucien

Explore alternatives to Google Analytics: advice from the Norwegian DPA

With multiple European authorities ruling against the use of this service, the Norwegian DPA suggests that companies explore alternatives to Google Analytics.    In a recent blog, we covered why the use of Google Analytics (and Stripe) by the European Parliament was considered a violation of the Court of Justice’s (CJEU) “Schrems II” ruling on
February 1, 2022 Comments (0) Share
Read More
  Zandilli Lucien

Fine imposed by Italian DPA for aggressive telemarketing

Fine imposed by Italian DPA on Enel Energia, amounting to €26.5 million for aggressive telemarketing.   The Italian DPA has imposed a fine of €26.5 million on Enel Energia for aggressive telemarketing according to this recent report. After hundreds of reports and complaints about unwanted promotional calls to customers from Enel Energia, Garante, the Italian
January 27, 2022 Comments (0) Share
Read More
  Zandilli Lucien

How subcontractors can reuse data: CNIL outlines specific conditions

How subcontractors can reuse data: this is possible only under specific conditions, which CNIL has outlined with specific context.   Under the GDPR, there are several conditions which need to be met in order for subcontractors to reuse data provided to them by the data controller. French regulator; CNIL has outlined the context under which
January 25, 2022 Comments (0) Share
Read More
  Zandilli Lucien

EDPS reprimands European Parliament for use of Google Analytics

Illegal EU-US data transfers by the European Parliament lead to sanction from EDPS    Due to a complaint made approximately one year prior, the European Parliament has been sanctioned by the EDPS over illegal EU-US data transfers, among other violations. On a COVID-19 testing site, the use of Google Analytics and Stripe (both US companies)
January 20, 2022 Comments (0) Share
Read More
  Zandilli Lucien

Employee right of access: how does it work?

The CNIL of France has released an article explaining the employee right of access under the EU GDPR.   Article 15 of the GDPR gives individuals the right to request a copy of any of their personal data from a data controller. This also applies when the data controller is the individual’s employer. CNIL has
January 18, 2022 Comments (0) Share
Read More
  Zandilli Lucien

International Data Protection Committee established by Danish DPA

An international data protection committee has been established by the Danish DPA to protect Danish interests regarding international data protection.   The Danish DPA has established a special committee with the aim of giving the Authority’s stakeholders more and better insight into the international data protection work done by the Data Inspectorate. It will also
January 13, 2022 Comments (0) Share
Read More
  cristinac

DATA PROTECTION AND GDPR: LESSONS LEARNED FROM 2021

The data protection industry is constantly evolving as the GDPR is implemented by organisations and enforced by the Data Protection Authorities.    New year, new beginnings? That is not always the case, at least definitively not when the previous year has provided valuable insights for the upcoming one. Considering that the GDPR has been in
January 11, 2022 Comments (0) Share
Read More
  Zandilli Lucien

CLEARVIEW AI ordered to delete photos by French DPA; CNIL

CLEARVIEW AI, ordered to delete photos by the French DPA after investigation revealed unlawful collection and processing of photos from the Internet.   CLEARVIEW AI, and the facial recognition software the company produces were first reported to the CNIL in May of 2020. This led to an investigation which uncovered two GDPR infractions; the unlawful
December 21, 2021 Comments (0) Share
Read More
  Zandilli Lucien

Controller and processor fined after app collected an unnecessary amount of data

Controller and processor fined by Icelandic DPA after app collected an unnecessary amount of data without the necessary consent.     At the start of the COVID-19 pandemic the Icelandic government issued gift cards to adult citizens due to the economic strain brought on by the effects of the pandemic. They were issued through an
December 16, 2021 Comments (0) Share
Read More
  Zandilli Lucien

Bank Millennium fined €80,000 by Polish DPA for failure to report a breach

Bank millennium fined €80,000 by Polish DPA for failure to report, and sufficiently inform data subjects of a breach.   Recently, a fine was imposed on Bank Millennium by the Polish DPA for a data breach which the bank failed to report, and about which they failed to sufficiently inform the affected customers. The supervisory
December 14, 2021 Comments (0) Share