EU Court Holds Websites Responsible for GDPR Compliance with User Content
The EU court ruled that websites hosting user content must actively protect user privacy and comply with GDPR, including for anonymous users, or face heavy fines.
controller
Belgian Court Partially Overturns APD Decision on IAB Europe’s GDPR Joint Controllership
The Belgian Market Court annulled part of the APD’s decision on IAB Europe’s TCF, limiting its joint controllership to TC Strings only, aligning with the CJEU ruling.
EDPB Launches 2025 Action on Right to Erasure
The EDPB has initiated its 2025 Coordinated Enforcement Framework focusing on the right to erasure, involving 32 European Data Protection Authorities.
EDPB Issues Opinion on Processor and Sub-Processor Obligations Under GDPR
The EDPB’s recent opinion clarifies controllers’ obligations regarding processors and sub-processors under the EU GDPR, emphasizing the need for transparency and compliance.
CJEU’s Advocate General Issues Opinion on Concept of Controller, Joint Controller, Processor, and Administrative Fines
Advocate General released an opinion on the concepts of “controller”, “joint controller” and “processor”, and also liability system established by the GDPR.
German court rules CEO to be held personally liable for data privacy violations
German court decided that a CEO was personally liable for a data privacy breach after they hired a detective to investigate possible criminal acts by the plaintiff.
Security Incident Mitigation Strategy: Effective Negotiation of Technology Contract Limitations of Liability
There is always significant negotiation around caps on liability when negotiating a contract with a technology vendor. If the vendor […]
The road to GDPR certifications won’t be a short one
The EU General Data Protection Regulation has been in effect for five months, and yet there has not been much […]
GDPR: the ‘controller v processor’ debate in financial services
Lessons can be learned in the financial services sector from the rush to update contracts to account for the General […]
Every vendor wants to be… a data controller?!
Closing data-related deals seemed so much simpler pre-GDPR, didn’t it? Remember the days when every enterprise customer was a controller […]
Managing commercial risk within the supply chain post
In the pre-GDPR days, it was fairly clear where risk and liability lay with regards to data protection issues within […]
1 2