Category

Data subject’s rights

Austrian authorities interpret GDPR access right

November 29, 2023, , ,
In a case resulting in a recent decision of the Austrian Federal Administrative Court, the Court and the Austrian supervisory authority (Datenschutzbehörde) offered insightful interpretations of the General Data Protection...
Read More

Uber judgment: On human involvement in automated decision-making

July 20, 2023, , , ,
The recent decision by the Amsterdam Court of Appeals, against Uber, underscores the significance of meaningful human involvement in automated decision-making. The judgment, dated 4 April 2023, provides specifics on...
Read More

Norwegian Datatilsynet fines a fitness company for GDPR violations

May 17, 2023, , , , ,
On 6 February 2023 the Norwegian Data Protection Authority (“Datatilsynet“) issued an administrative fine in the amount of approx. EUR 860,000 against the Norwegian fitness company SATS ASA (“SATS“), for...
Read More

Key points from EDPB’s guidelines on the right of access

March 9, 2022, , ,
Arts. 12 and 15 of the EU Data Protection Regulation (EU) 2016/679 (“GDPR“) regulate the right of access (“RoA“). This right consists of three main components: (i) confirmation of whether...
Read More

CNIL refuses to let Monsanto off the hook

September 10, 2021, , , , ,
On 26 July 2021, the French Data Protection Authority (“CNIL“) issued a fine of EUR 400,000 against Monsanto, leading company in the field of agricultural biotechnologies. The decision elucidates the...
Read More

How far can a data controller go in relying on “legal obligation” (GDPR Art. 6.1(c))?

April 13, 2021 and , , , , , ,
The Arnhem-Leeuwarden Court of Appeal, in the Netherlands, recently issued a decision concerning compliance with a legal obligation as legal basis for data processing (Article 6.1(c) of GDPR). The decision...
Read More

Dutch court clarifies the limits to the right of access

April 7, 2021, , , ,
The Court of Amsterdam rendered on 11 March 2021 the decision in a proceeding initiated against Uber for an alleged failure to observe the data subjects’ right of access (Article...
Read More

ICO reins in data broker’s collection and use of data

November 18, 2020, , , , , ,
On 27 October 2020, following a two-year investigation, the UK Information Commissioner’s Office (ICO), published its enforcement notice against credit reference agency Experian Limited (Experian). During the investigation process, Experian...
Read More

Effort to place responsibility on the data processor does not impress Garante

November 9, 2020, , , , , , , ,
On 17 September 2020, Italian data protection authority (Garante) rendered two related decisions, one against a hospital in Naples, and the other against an IT company, concerning a data breach which...
Read More

Garante: Employers, deactivate e-mail account of the departing employees

October 26, 2020, , , , ,
If employers want to be compliant with GDPR, what should they do with employee’s corporate e-mail account after termination of his employment? Italian supervisory authority’s decision of 2 July 2020,...
Read More
1 2

ARCHIVE

Cart
Checkout - 0,00 RSD
  • 0
  • 1