Deutsche Wohnen fine now declared invalid by a German court
There has been a big bang in the data protection world in Berlin as the first and most spectacular GDPR fine in Germany has just been declared invalid.
Court cases
CJEU fines Spain €15 million for failure to implement Data Protection Law Enforcement Directive
The Court of Justice of the European Union (CJEU) ordered Spain to pay the European Commission 15.5 million euros and a potential daily fine thereafter for failing to transpose the Data Protection Law Enforcement Directive (Directive (EU) 2016/680).
Federal Constitutional Court: CJEU must clarify whether GDPR provides materiality threshold
The decision means the Court of Justice of the European Union will need to clarify the framework for EU General Data Protection Regulation damages claims.
Google challenges French data watchdog’s €100 million fine in court
Google has appealed to the one-stop-shop mechanism provided for in the General Data Protection Regulation (GDPR) which, in its view, requires it to report on data protection matters only to the corresponding authority in the country in which it is based, namely Ireland.
1st Circuit Upholds Border Searches of Phones and Laptops
The ruling says customs officials can rummage through highly personal information even absent any reason to think their owner did something wrong.
Facebook faces new UK class action after data harvesting scandal
Facebook is facing a second London High Court class action over allegations it failed to protect the personal details of about one million people in England and Wales, in the latest lawsuit to spring from a scandal over data harvesting.
‘Orwellian’ AI lie detector project challenged in EU court
A legal challenge was heard today in Europe’s Court of Justice in relation to a controversial EU-funded research project using artificial intelligence for facial “lie detection” with the aim of speeding up immigration checks.
“Party affinity” data may not be processed without the consent, Austrian court rules
The Federal Administrative Court of Austria confirmed that “party affinity” data may not be processed without the consent.
US publisher not within GDPR scope despite European readership
A US-registered publisher’s processing of a British resident’s personal data did not breached EU data protection laws as High Court in London ruled that the GDPR do not apply to it.
Constitutional court bans bulk Internet surveillance in South Africa
The constitutional court banned the South African state from bulk surveillance of online communication, preventing security agencies from hoovering up Internet data.
noyb brings Luxemburg’s Data Protection watchdog to court for refuses to act on US companies
noyb filed an appeal against decisions of the Luxemburg Data Protection Authority (CNPD) for dismissing complaints against US-based companies.
UK Case Tests the Territorial Application of the GDPR to U.S. Run Website
The recent UK case of Soriano v Forensic News and Others tested the territorial reach of the General Data Protection Regulation (GDPR) and represents the first UK judgment dealing with the territorial scope of the GDPR.