Data Protection and Privacy Archives

EDPB Opinion 22/2024: Key insights on using processors and sub-processors under GDPR

November 6, 2024Pablo Pérez LayaBDKnowledge, Blog, Controller and processor, European Union, Transfer

In its Opinion 22/2024, dated 9 October 2024, the European Data Protection Board (EDPB) clarifies data controllers’ responsibilities under Article 28 of the GDPR when engaging processors and sub-processors. This...

Indirect effect of CJEU’s “legitimate interest” judgment in Montenegro and BiH?

October 16, 2024Bogdan IvaniševićBDKnowledge, Blog, Bosnia and Herzegovina, Data Protection and Privacy, European Union, Legal basis for processing, Montenegro

A recent judgment of the Court of Justice of the European Union might prove to serve a purpose the parties and the Court surely did not have in mind: it...

Recent judicial scrutiny of the shadow banning practices

August 20, 2024Jelena Hrle and Bogdan IvaniševićAutomated Decision-Making, BDKnowledge, Blog, European Union, Social media

The controversial practice of shadow banning by social media platforms has been recently scrutinized for its compliance with GDPR by a court in Belgium. The Court of Appeal in Ghent...

Mandatory registration of online customers contrary to the GDPR, says Finnish supervisory authority

June 5, 2024Anja GligorevićBDKnowledge, Blog, Data Protection and Privacy, Data protection by design and by default, Retention

On 6 March 2024, the Finnish Office of the Data Protection Ombudsman (“ODPO“) issued a decision against Verkkokauppa.com Oyj (“Verkkokauppa“), a company that sells electronics and other goods online and...

Slovenian court admits evidence obtained in possible violation of the Slovenian Personal Data Protection Act

December 7, 2023Jelena HrleBDKnowledge, Blog, European Union, Proportionality, Video surveillance

In its decision of 23 July 2023, the Ljubljana Higher Court upheld the lower court’s decision that the recordings from surveillance cameras should not be excluded as evidence in criminal...

Austrian authorities interpret GDPR access right

November 29, 2023Pablo Pérez LayaBDKnowledge, Blog, Data subject's rights, European Union

In a case resulting in a recent decision of the Austrian Federal Administrative Court, the Court and the Austrian supervisory authority (Datenschutzbehörde) offered insightful interpretations of the General Data Protection...

CNIL decides that the French subsidiary of a Chinese parent company is the data controller

October 31, 2023Kristina PintarBDKnowledge, Blog, Controller and processor, Data Protection and Privacy, Employment, European Union, Special categories of data

On 18 September 2023, the French Data Protection authority (CNIL) imposed an administrative fine of EUR 200,000 against SAF LOGISTICS, a French company that carries out air cargo activity from...

“Tracking”, “monitoring”, and “profiling” in recent Clearview AI cases

September 27, 2023Bogdan Ivanišević and Jelena HrleBlog, Data Protection and Privacy, European Union, Monitoring, Profiling

In the past two years, most recently on May 10, 2023, when the Austrian Datenschutzbehörde issued its decision, supervisory authorities in several European countries declared the processing of personal data...

Uber judgment: On human involvement in automated decision-making

July 20, 2023Anđela ŠušljikAutomated Decision-Making, BDKnowledge, Blog, Data subject's rights, European Union

The recent decision by the Amsterdam Court of Appeals, against Uber, underscores the significance of meaningful human involvement in automated decision-making. The judgment, dated 4 April 2023, provides specifics on...

Belgian regulator delineates the boundaries of “special category of data” and “law”

June 28, 2023Bogdan IvaniševićBDKnowledge, Blog, Data Protection and Privacy, European Union, Legal basis for processing, Special categories of data

The Belgian supervisory authority (APD) recently decided that the information about teachers’ participation in a strike is not a special category of data, because it does not amount to data...

1 2 3 … 8

EDPB Opinion 22/2024: Key insights on using processors and sub-processors under GDPR

Indirect effect of CJEU’s “legitimate interest” judgment in Montenegro and BiH?

Recent judicial scrutiny of the shadow banning practices

Mandatory registration of online customers contrary to the GDPR, says Finnish supervisory authority

Slovenian court admits evidence obtained in possible violation of the Slovenian Personal Data Protection Act

Austrian authorities interpret GDPR access right

CNIL decides that the French subsidiary of a Chinese parent company is the data controller

“Tracking”, “monitoring”, and “profiling” in recent Clearview AI cases

Uber judgment: On human involvement in automated decision-making

Belgian regulator delineates the boundaries of “special category of data” and “law”

Blog

Newsletter

Publications

ARCHIVE

BDK Serbia

BDK Montenegro

BDK Bosnia and Herzegovina

Category