CJEU Advocate General Backs WhatsApp in €225 Million EDPB Fine Dispute
WhatsApp receives support from a CJEU adviser in its challenge against the EDPB over a €225 million fine for privacy violations.
CJEU
French MP Latombe Could Bring Down EU-US Data Privacy Framework
Philippe Latombe’s legal challenge to the Trans-Atlantic Data Privacy Framework raises questions about EU-US data transfers and potential implications for data protection.
EDPB Adopts Statement on PNR Directive Implementation
The EDPB adopted a statement on the PNR Directive, urging EU countries to implement changes in line with the CJEU’s judgment to enhance passenger data protection.
EU Court Upholds EDPB’s Authority Over Irish DPC
The European General Court supports the EDPB’s authority, requiring Ireland’s DPC to conduct separate investigations into Meta’s data processing, reinforcing GDPR enforcement.
Train Companies Cannot Require Gender Information, Says EU Court
The European Court of Justice ruled that train companies cannot require gender identification for ticket purchases, promoting inclusivity and privacy rights.
EU Court Orders Commission to Pay Damages for Non-compliant Data Transfer
The EU court ordered the European Commission to pay damages for illegal data transfers, highlighting the importance of compliance with EU data transfer rules and potential for class actions.
EU Court rules GDPR complaints can’t be rejected based on frequency
The CJEU ruled that complaint frequency doesn’t invalidate GDPR complaints unless they are clearly vexatious or abusive, impacting data protection enforcement across the EU.
WhatsApp Appeals €225 Million GDPR Fine to EU’s Top Court
WhatsApp appeals a €225 million fine at the CJEU, challenging the EDPB’s decision over alleged GDPR violations related to user data transparency.
Estonia to limit telecommunication data retention obligation
Estonia’s Ministry of Justice faces challenges in aligning data retention policies with EU regulations while balancing privacy rights and national security.
Schrems wins another case over Meta
Schrem’s privacy case against Meta highlights GDPR violations regarding the processing of personal data on sexual orientation, impacting ad targeting practices.
DPA is not obliged to impose sanctions, CJEU rules
Supervisory authorities under GDPR can choose not to impose penalties for data breaches if the controller has already taken corrective actions.
Germany to amend federal privacy law
The Draft Law amending the German Federal Data Protection Act (BDSG) introduces significant changes to data protection regulations in Germany, including the institutionalization of the Data Protection Conference (DSK) and amendments to data subject access rights and scoring practices.