Dutch education IT crisis averted as Google agrees to ‘major privacy improvements’
‘Google has agreed to become more transparent’ – over optimistic?
DPA
Austrian Data Protection Authority Fines Loyalty Program Operator €2,000,000
‘Unser Ö-Bonus Club GmbH,’ a Vienna-based company that operates a multi-partner loyalty program, got a fine of 2,000,000 EUR from the Austrian Data Protection Authority (Datenschutzbehörde) over multiple violations of the GDPR
Spanish DPA Fines Supermarket Chain 2,520,000 EUR for Unlawful Use of Facial Recognition System
Spanish Data Protection Authority imposed a €2,520,000 fine on Spanish supermarket chain Mercadona, S.A. for unlawful use of a facial recognition system.
French privacy regulator fines Monsanto for privacy breach
Firm fined for for acquiring data on journalists, activists.
Dutch DPA Fines TikTok 725,000 EUR for Transparency Violations
Dutch DPA imposed a €725,000 fine on TikTok for violating the privacy of young children namely for the company’s alleged lack of transparency.
Insights into the Future of Data Protection Enforcement
The FPF released a report “Insights into the future of data protection enforcement: Regulatory strategies of European Data Protection Authorities for 2021-2022”
The Italian DPA sanctions a food delivery company for monitoring drivers
Italian supervisory authority published an injunction against a company operating a food delivery app over the processing of riders’ personal data with respect to the use of algorithms for the management of the orders.
Italian Supervisory Authority Fines Foodinho Over its Use of Performance Management Algorithms
The Italian Supervisory Authority (Garante) announced that it has fined Foodinho S.r.l. 2.6 million EUR for its use of performance algorithms in connection with its employees.
Lithuanian DPA Imposes Fine on a Sports Club for Use of Fingerprints
Lithuanian DPA fined sports club 20.000€ for improper use of fingerprints for identification.
Commission opens an infringement procedure against Belgium on the independence of its Data Protection Authority
The Commission sent formal notice to Belgium for violating Article 52 of the GDPR, which states that the DPA shall be independent.
Norwegian DPA fines company for accessing former employee’s e-mail inbox
The manager of the enterprise had changed the password and logged on to the complainant’s e-mail account every day for a period of six weeks after the employment had ended. Norwegian DPA found that the enterprise lacks a legal basis for accessing e-mail in this manner.
As French automated audits of cookie consent rules continue, non-compliant websites face sanctions
After checking the 1.000 websites with the highest traffic in France, and with several sanctioning procedures already launched, the French DPA CNIL (Commission nationale de l’informatique et des libertés) announced a continuation of the program in the next months.