EU regulator launches third Apple investigation
The principle regulator for Apple in Europe, the Irish Data Protection Commission, has begun a third investigation into data privacy […]
compliance
Cookie consent – What “good” compliance looks like according to the ICO
On 3 July 2019, the UK data protection authority (the ICO) updated its guidance on the rules that apply to […]
French lawsuit accuses Google of violating EU privacy rules
A leading French consumer group has filed a class-action lawsuit accusing Google of violating the European Union’s landmark 2018 privacy […]
FTC Takes Action Against Companies Misrepresenting Compliance with the EU-U.S. Privacy Shield
The Federal Trade Commission announced that it has taken action against a number of companies that allegedly misrepresented their compliance […]
ICO admits its own cookie policy is non-compliant with GDPR
The Information Commissioners Office has admitted that its current consent notice relating to the use of cookies on devices failed […]
Swedish DPA digs into Spotify’s responses to SARs
The Swedish data protection authority – Datainspektionen – had initiated a review of Spotify Technology S.A.’s responses to data subject access requests (SARs). […]
Lithuanian DPA launches investigation into D-Link
In response to publicly available information, the Lithuanian data protection authority – State Data Protection Inspectorate – launched an self-initiated […]
Fingerprint case highlights importance of biometric policies and consent
An unfair dismissal case has highlighted the need for companies to update policies and procedures and to obtain full consent […]
CNIL Fines French Real Estate Service Provider for Data Security and Retention Failures
On June 6, 2019, the French Data Protection Authority (the “CNIL”) announced that it levied a fine of €400,000 on […]
Spanish DPA fines soccer league 250K euros
La Liga has been fined 250,000 euros for violating the Spanish Data Protection Agency (AEPD) and the European General Data […]
One Year Into GDPR, Most Apps Still Harvest Data Without Permission
Unauthorized data harvesting from mobile apps has continued nearly unabated in the year since Europe’s General Data Protection Regulation came […]
GDPR compliance: Hits and misses
Privacy professionals have now lived with EU General Data Protection Regulation compliance requirements for a full year. Many rebuilt, rewrote […]