Category

Blog

Spain: Hotel fined for using photos of the IDs of their guests

March 21, 2022, , , , ,
In a recent decision, the Spanish Data Protection Authority (Agencia Española de Protección de Datos – “AEPD“) fined Marins Playa, S.A. (“Marins Playa“), a provider of hotel services, with 30,000...
Read More

Key points from EDPB’s guidelines on the right of access

March 9, 2022, , ,
Arts. 12 and 15 of the EU Data Protection Regulation (EU) 2016/679 (“GDPR“) regulate the right of access (“RoA“). This right consists of three main components: (i) confirmation of whether...
Read More

Spain: Amazon Road Transport fined for requesting criminal records from job candidates

February 25, 2022, , , , , , ,
On 11 February 2022, the Spanish Data Protection Authority (Agencia Española de Protección de Datos) fined Amazon Road Transport Spain, S.L. (“Amazon RT“) EUR 2,000,000, for including criminal record certificates...
Read More

Planning for merger control process in Serbia, Montenegro and Bosnia and Herzegovina

January 6, 2022, , ,
Low notification thresholds Competition laws of Serbia, Montenegro and Bosnia and Herzegovina have notoriously low merger control notification thresholds. In all three jurisdictions, it is sufficient for one party to...
Read More

Serbian state aid watchdog issues its first recovery order

November 10, 2021, , ,
The first recovery order since the enactment of the Serbian State Aid Control Act was issued on 1 November 2021. It directs the Ministry of Finance to recover from the...
Read More

Law firm as a data controller: careful with the disclosure of sensitive data

October 26, 2021, , , ,
On 22 September 2021, the Icelandic data protection authority (“Persónuvernd“) issued a ruling against a law firm, Magna Lögmanna ehf (“Magna“), in which it determined that the law firm’s disclosure...
Read More

CNIL refuses to let Monsanto off the hook

September 10, 2021, , , , ,
On 26 July 2021, the French Data Protection Authority (“CNIL“) issued a fine of EUR 400,000 against Monsanto, leading company in the field of agricultural biotechnologies. The decision elucidates the...
Read More

Supervisory authority and court disagree on freedom of expression vs. data protection

May 20, 2021, ,
On 20 November 2020, the Austrian Federal Administrative Court issued a judgement. Contrary to the decision of the Data Protection Authority (“DPA“), the Court found a violation of the data...
Read More

How far can a data controller go in relying on “legal obligation” (GDPR Art. 6.1(c))?

April 13, 2021 and , , , , , ,
The Arnhem-Leeuwarden Court of Appeal, in the Netherlands, recently issued a decision concerning compliance with a legal obligation as legal basis for data processing (Article 6.1(c) of GDPR). The decision...
Read More

Dutch court clarifies the limits to the right of access

April 7, 2021, , , ,
The Court of Amsterdam rendered on 11 March 2021 the decision in a proceeding initiated against Uber for an alleged failure to observe the data subjects’ right of access (Article...
Read More
1 2 3 4 5 6 … 22

ARCHIVE

Cart
Checkout - 0,00 RSD
  • 0
  • 1