Belgian Data Protection Authority Fines Bank for DPO’s Conflicting Roles
Belgian DPA fined a bank €75,000 for not ensuring that the tasks and duties of the Data Protection Officer (DPO) do not result in a conflict of interest.
Belgian DPA fined a bank €75,000 for not ensuring that the tasks and duties of the Data Protection Officer (DPO) do not result in a conflict of interest.
Italian SA fines Enel Energia EUR 26.5 million for using consumers’ data without their consent and non complying with the accountability principle.
The guidance addresses question: when can a processor use personal data for purposes broader than just strictly providing services to the controller?
CNIL fined Google LLC €90 million and Google Ireland Limited €60 million about the way cookies can be refused on the websites google.fr and youtube.com.
The CNIL chair has ordered the company to cease this illegal processing and to delete the data within two months.
The Norwegian Data Protection Authority has imposed an administrative fine of NOK 65 000 000 (€ 6.5 million) for not complying with the GDPR rules on consent.
Norwegian authority says ruling would make data protection law ‘pointless’.
The Irish Data Protection Authority pushed for a liberal interpretation of data protection law that would favour social media companies.
The Data Protection Commission (DPC) submitted a draft decision in an inquiry into Instagram to other Concerned Supervisory Authorities across the EU.
Blackbaud was given a private slap on the wrist by the UK’s Information Commissioner’s Office (ICO) after paying off criminals who stole users’ financial data from the cloud CRM biz’s servers.
Clearview AI may have gathered data without people’s knowledge, says Information Commissioner’s Office.
Austrian lawyer Max Schrems has filed a complaint after the Irish data protection commissioner put his privacy organisation under pressure to sign a non-disclosure agreement.