Category

Data Protection and Privacy

Key points from EDPB’s guidelines on the right of access

March 9, 2022, , ,
Arts. 12 and 15 of the EU Data Protection Regulation (EU) 2016/679 (“GDPR“) regulate the right of access (“RoA“). This right consists of three main components: (i) confirmation of whether...
Read More

Spain: Amazon Road Transport fined for requesting criminal records from job candidates

February 25, 2022, , , , , , ,
On 11 February 2022, the Spanish Data Protection Authority (Agencia Española de Protección de Datos) fined Amazon Road Transport Spain, S.L. (“Amazon RT“) EUR 2,000,000, for including criminal record certificates...
Read More

Law firm as a data controller: careful with the disclosure of sensitive data

October 26, 2021, , , ,
On 22 September 2021, the Icelandic data protection authority (“Persónuvernd“) issued a ruling against a law firm, Magna Lögmanna ehf (“Magna“), in which it determined that the law firm’s disclosure...
Read More

CNIL refuses to let Monsanto off the hook

September 10, 2021, , , , ,
On 26 July 2021, the French Data Protection Authority (“CNIL“) issued a fine of EUR 400,000 against Monsanto, leading company in the field of agricultural biotechnologies. The decision elucidates the...
Read More

Supervisory authority and court disagree on freedom of expression vs. data protection

May 20, 2021, ,
On 20 November 2020, the Austrian Federal Administrative Court issued a judgement. Contrary to the decision of the Data Protection Authority (“DPA“), the Court found a violation of the data...
Read More

How far can a data controller go in relying on “legal obligation” (GDPR Art. 6.1(c))?

April 13, 2021 and , , , , , ,
The Arnhem-Leeuwarden Court of Appeal, in the Netherlands, recently issued a decision concerning compliance with a legal obligation as legal basis for data processing (Article 6.1(c) of GDPR). The decision...
Read More

Dutch court clarifies the limits to the right of access

April 7, 2021, , , ,
The Court of Amsterdam rendered on 11 March 2021 the decision in a proceeding initiated against Uber for an alleged failure to observe the data subjects’ right of access (Article...
Read More

Mistakenly sending an email is data processing, but not data breach?

March 22, 2021, , ,
On 29 January 2021, the Belgian Data Protection Authority (“GBA“) issued a decision interesting for its contrast between a simple set of facts, on the one hand, and inclusion of...
Read More

Privacy overrides free expression in a Dutch blacklist case

February 17, 2021, , , ,
District Court of Central Netherlands in Utrecht rendered a decision on 8 January 2021 concerning the “naming and shaming” scheme published on a Dutch website. The court provided valuable insights...
Read More

Booking an appointment digitally – issues under the GDPR

February 8, 2021, , , , , ,
The Italian Data Protection Authority (Garante) issued on 17 December 2020 a EUR 40,000 fine against an Italian software company (Miropass s.r.l.) for GDPR violations connected to the use of...
Read More
1 2 3 4 5 … 8

ARCHIVE

Cart
Checkout - 0,00 RSD
  • 0
  • 1