Special categories of data Archives

CNIL decides that the French subsidiary of a Chinese parent company is the data controller

October 31, 2023Kristina PintarBDKnowledge, Blog, Controller and processor, Data Protection and Privacy, Employment, European Union, Special categories of data

On 18 September 2023, the French Data Protection authority (CNIL) imposed an administrative fine of EUR 200,000 against SAF LOGISTICS, a French company that carries out air cargo activity from...

Belgian regulator delineates the boundaries of “special category of data” and “law”

June 28, 2023Bogdan IvaniševićBDKnowledge, Blog, Data Protection and Privacy, European Union, Legal basis for processing, Special categories of data

The Belgian supervisory authority (APD) recently decided that the information about teachers’ participation in a strike is not a special category of data, because it does not amount to data...

Sending bulk emails by using CC or TO option is not allowed

May 8, 2023Jelena BrajkovićBDKnowledge, Blog, Data Protection and Privacy, Legal basis for processing, Remedies and liability, Special categories of data

Two recent decisions of the Italian data protection authority (Garante), one from January 2023 and the other from February 2023, lay down basic principles that the data controllers should follow...

CNIL consistently censures continual collection of geolocation data

April 27, 2023Anđela ŠušljikBlog, Data Protection and Privacy, European Union, Retention, Special categories of data

On 16 March 2023, the French supervisory authority (“CNIL“) imposed an administrative fine in the total amount of EUR 125,000 against Cityscoot, a company that provides electric scooter rental service....

Don’t take lightly the “necessity” requirement for collection of geolocation data, CNIL says

August 26, 2022Jelena BrajkovićBDKnowledge, Blog, Data Protection and Privacy, European Union, Retention, Special categories of data

On 7 July 2022, the French supervisory authority (CNIL) imposed a EUR 175,000 fine on Ubeeqo International (Ubeeqo), a car rental service provider. Ubeeqo was found to be collecting customers’...

Law firm as a data controller: careful with the disclosure of sensitive data

October 26, 2021Jelena BrajkovićBDKnowledge, Blog, Controller and processor, Data Protection and Privacy, Special categories of data

On 22 September 2021, the Icelandic data protection authority (“Persónuvernd“) issued a ruling against a law firm, Magna Lögmanna ehf (“Magna“), in which it determined that the law firm’s disclosure...

Booking an appointment digitally – issues under the GDPR

February 8, 2021Stefan ĐurovićBDKnowledge, Blog, Controller and processor, Data Protection and Privacy, European Union, Health, Special categories of data

The Italian Data Protection Authority (Garante) issued on 17 December 2020 a EUR 40,000 fine against an Italian software company (Miropass s.r.l.) for GDPR violations connected to the use of...

Austria: Probabilities as personal data

January 26, 2021Milica BastaBDKnowledge, Blog, Data Protection and Privacy, Direct marketing, European Union, Special categories of data

The Federal Administrative Court of Austria confirmed by its decision of 26 November 2020 the stance of the Austrian Data Protection Authority (“Datenschutzbehörde“) that so-called “party affinity” data may not...

CNIL decides that the French subsidiary of a Chinese parent company is the data controller

Belgian regulator delineates the boundaries of “special category of data” and “law”

Sending bulk emails by using CC or TO option is not allowed

CNIL consistently censures continual collection of geolocation data

Don’t take lightly the “necessity” requirement for collection of geolocation data, CNIL says

Law firm as a data controller: careful with the disclosure of sensitive data

Booking an appointment digitally – issues under the GDPR

Austria: Probabilities as personal data

Blog

Newsletter

Publications

ARCHIVE

BDK Serbia

BDK Montenegro

BDK Bosnia and Herzegovina

Category