Meta’s surveillance business model is facing an interesting legal challenge in the U.K.
The Stockholm administrative court held that a complainant under Article 77 GDPR has the right to request a decision from the Swedish DPA after six months.
A Dutch Court of Appeal held that an Internet service provider could not be mandated to link IP addresses with user data to send them warnings.
The Advocate General of the CJEU issued an opinion, which privacy advocates fear could further limit possibilities to get compensation for GDPR breaches.
A remote employee of a U.S. business who was fired for refusing to leave his webcam on while he was working was awarded roughly 75,000 euros by a Dutch court.
An opinion by the advocate general might open the door for antitrust watchdogs to assess compliance with data protection rules in future investigations.
The Advocate General of the CJEU opined that data subjects should be able to lodge a complaint with a DPA and, in parallel, lodge judicial redress proceedings.