ICO issue fine of £4.4 to Interserve for security failings
The ICO issued a penalty notice to Interserve Group Limited, imposing a fine of £4.4m for violations of the GDPR security requirements.
GDPR
CNIL fines Clearview AI with 20 million euros
French data protection authority CNIL imposed a penalty of 20 million euros and ordered Clearview AI to stop collecting and using data on individuals in France.
MEPs tear up Biden’s Privacy Shield successor
The Executive Order of the US President is not enough, say members of the European Parliament.
Privacy activists warn against removing compensation for data protection breaches
The Advocate General of the CJEU issued an opinion, which privacy advocates fear could further limit possibilities to get compensation for GDPR breaches.
UK pauses data reform bill to rethink how to replace GDPR
The UK government has paused a data reform bill while ministers take a fresh look at how to replace the EU GDPR.
US expected to publish Privacy Shield executive order next week
The order is designed to address European concerns over surveillance practices in the US.
Danish DPA Declares Use of Google Analytics Unlawful Without Supplementary Measures
Denmark’s data protection authority announced in its guidance that Google Analytics, Google’s audience measurement tool, is not compliant with the GDPR.
EU privacy watchdog sues lawmakers over new Europol mandate
The new regulation retroactively legalizes activity previously ruled unlawful, which could ‘establish a worrying precedent,’ complaint says.
TikTok could face £27m fine for failing to protect children’s privacy
Investigation finds video-sharing app may have breached UK data protection law between 2018 and 2020.
CJEU Advocate General Finds That Data Subjects May in Parallel Lodge a Complaint with a Supervisory Authority and Start Proceedings Before a Court
The Advocate General of the CJEU opined that data subjects should be able to lodge a complaint with a DPA and, in parallel, lodge judicial redress proceedings.
CNIL fines Infogreffe 250,000 euros
The CNIL imposed a fine of 250,000 euros on INFOGREFFE for braching several GDPR obligations regarding the retention periods and security of personal data.
French hotel group ACCOR fined 600,000 euros
CNIL found French hotel group ACCOR to be in breach of French law and observed four breaches of the GDPR.