Top EU official warns privacy rules may need to change
The European Data Protection Supervisor wants to talk about alternative enforcement models.
GDPR
Advocate General Greenlights GDPR Collective Claims Without a Mandate
Advocate General of the CJEU held that consumer protection associations may bring collective claims without a mandate for violations of the GDPR.
Advocate General Releases Opinion in CJEU Referrals on Data Retention
On November 18, 2021, the Advocate General of the Court of Justice of the European Union (CJEU) issued an opinion on several data retention cases before by the Court, following a long line of CJEU jurisprudence on this topic.
Italy’s antitrust regulator fines Google, Apple over data use
Italy’s antitrust regulator has fined Alphabet’s Google and iPhone maker Apple 10 million euros ($11.2 million) each for “aggressive practices” linked to the commercial use of user data.
“Black box” Amazon: algorithm discriminates customers
Another complaint against Amazon Europe: a customer made an access request to find out why he was denied certain payment options; he did not receive a reply.
UK data guardian critical of proposals to change UK data law
Plans to change UK regulations could mean a ‘significant departure’ from EU law, watchdog says.
EDPB issues draft guidelines on the interplay between the GDPR’s provisions on territorial scope and international data transfers
EDPB released draft guidelines on the interplay betweenGDPR Article 3 (territorial scope) and the Chapter V (restrictions on international data transfers).
Belgian Supreme Court rules that GDPR fine may imposed even where a data subject’s personal data were not processed
The Belgian Supreme Court ruled that a data subject has the right to lodge a complaint with the Data Protection Authority against a processing practice that violates the GDPR, even where the data subject’s personal data were not processed.
Dutch watchdog slams tax office fraud list as privacy breach
A Dutch data protection watchdog issued a damning report Friday about the country’s tax office, saying it breached privacy law for years by keeping a list of potential fraudsters.
Court: the right of erasure does not enable data to be erased from Baptismal Register
Slovenian Administrative Court upholds the decision of the Slovenian SA: the right of erasure does not enable an individual to have his personal data erased from Baptismal Register.
Amazon asks Ring owners to respect privacy after court rules usage broke law
Court upholds harassment claim after neighbour complained about use of security cameras and doorbells.
Austrian Post fined €9.5 million for GDPR breaches
he Austrian data protection authority imposed a fine of EUR 9.5 million on Austrian Post.