Data Protection Commission Issues €550,000 Fine Over DSP Biometric Data Use
The DPC fined the Department of Social Protection €550,000 for GDPR violations related to biometric data processing in Public Services Card registration.
DPIA
EU Data Protection Supervisor Issues Guidelines on Generative AI
New guidelines by the EDPS provide practical advice on using generative AI tools in EU institutions to comply with data protection laws under Regulation (EU) 2018/1725, emphasizing safeguarding individuals’ personal information and privacy.
German DSK Publishes Decision on the DPIA on Access of Third Country Public Authorities
the German Data Protection Conference issued a compelling statement regarding third country public authorities’ access to personal data.
When are you switching on E2EE, Dutch govt asks Microsoft
You need to switch on E2EE in group meetings, watch out for US Cloud Act, warns impact assessment.
IAB releases DPIA guidance for Digital Advertising under GDPR
IAB has developed and published practical guide to carrying out data protection impact assessments (DPIA) under the EU’s General Data […]
UK’s COVID-19 tracing app launched before DPIA completion
It has emerged that the UK’s Coronavirus Test and Trace programme failed to complete a data protection impact assessment (DPIA) […]
On privacy impact assessment and leaking data of millions of users
Anonymizing location data is hard. If you absolutely need to do this, better consult someone knowledgable. Privacy impact assessments should […]
New DPIA on Microsoft Office and Windows software: still privacy risks remaining
Three new DPIAs, which Privacy Company has carried out for the central Dutch government, show that Microsoft has mitigated the […]
The Spanish DPA publishes a list of processing operations for which a DPIA is mandatory
After having received the favorable opinion of the European Data Protection Board, the Spanish Data Protection Agency (“AEPD”) released last […]
Belgian DPA Publishes Updated List of Processing Activities Requiring DPIA
The Belgian Data Protection Authority recently published (in French and in Dutch) the updated list of the types of processing activities which require […]
ICO updates data protection impact assessment guide
The revised guidance, published by the Information Commissioner’s Office (ICO), contains changes in response to recommendations issued by an EU-wide […]
CNIL Publishes DPIA Guidelines and List of Processing Operations Subject To DPIA
On November 6, 2018, the French Data Protection Authority (the “CNIL”) published its own guidelines on data protection impact assessments […]