Category

Data Protection and Privacy

Legitimate interest assessment as a precondition for the lawfulness of data processing

May 29, 2023, , , ,
On 11 January 2023, the Italian data protection authority (“Garante“) issued a decision against Commify Italia Srl for several violations of the GDPR. The decision demonstrates that the lawfulness of...
Read More

Norwegian Datatilsynet fines a fitness company for GDPR violations

May 17, 2023, , , , ,
On 6 February 2023 the Norwegian Data Protection Authority (“Datatilsynet“) issued an administrative fine in the amount of approx. EUR 860,000 against the Norwegian fitness company SATS ASA (“SATS“), for...
Read More

Sending bulk emails by using CC or TO option is not allowed

May 8, 2023, , , , ,
Two recent decisions of the Italian data protection authority (Garante), one from January 2023 and the other from February 2023, lay down basic principles that the data controllers should follow...
Read More

CNIL consistently censures continual collection of geolocation data

April 27, 2023, , , ,
On 16 March 2023, the French supervisory authority (“CNIL“) imposed an administrative fine in the total amount of EUR 125,000 against Cityscoot, a company that provides electric scooter rental service....
Read More

Don’t take lightly the “necessity” requirement for collection of geolocation data, CNIL says

August 26, 2022, , , , ,
On 7 July 2022, the French supervisory authority (CNIL) imposed a EUR 175,000 fine on Ubeeqo International (Ubeeqo), a car rental service provider. Ubeeqo was found to be collecting customers’...
Read More

Cloud provider a joint controller? Slovenian regulator joins CNIL in saying Yes

August 15, 2022 and , , , , ,
On 1 June 2022, the Slovenian supervisory authority (Information Commissioner) rendered a decision (no. 0612-23/2019/19) ordering a cloud provider (CP) to enter into joint controllership arrangements with its clients. The...
Read More

Key takeaways from the ongoing UK data protection reform

July 21, 2022, , , , , ,
On 17 June, the UK government introduced in the House of Commons the Data Protection and Digital Information Bill, a 192-page document containing numerous amendments to the country’s data protection...
Read More

Handle departing employee’s e-mails with care, Belgian DPA reiterates

May 18, 2022, , , , , , ,
On 1 April 2022, the Belgian DPA rendered a decision against an employer for restoring in an indiscriminate manner personal data on a former employee’s work laptop. The facts The...
Read More

Spain: Hotel fined for using photos of the IDs of their guests

March 21, 2022, , , , ,
In a recent decision, the Spanish Data Protection Authority (Agencia Española de Protección de Datos – “AEPD“) fined Marins Playa, S.A. (“Marins Playa“), a provider of hotel services, with 30,000...
Read More

Key points from EDPB’s guidelines on the right of access

March 9, 2022, , ,
Arts. 12 and 15 of the EU Data Protection Regulation (EU) 2016/679 (“GDPR“) regulate the right of access (“RoA“). This right consists of three main components: (i) confirmation of whether...
Read More
1 2 3 4 … 8

ARCHIVE

Cart
Checkout - 0,00 RSD
  • 0
  • 1