EDPB Issues Opinion on Processor and Sub-Processor Obligations Under GDPR
The EDPB’s recent opinion clarifies controllers’ obligations regarding processors and sub-processors under the EU GDPR, emphasizing the need for transparency and compliance.
opinion
Ann Cavoukian Shares Thoughts on Privacy and AI
Ann Cavoukian gives perspective on fostering privacy in AI through Privacy Design principles, ensuring data security and ethical innovation.
The GDPR highlights the problem in EU’s Cyber Posture
The EU’s stringent cyber posture, as reflected in the GDPR, while enhancing global norm building, inadvertently hampers small businesses and data-dependent public services due to its high compliance costs and limitations on data sharing.
CJEU’s Advocate General Issues Opinion on Concept of Controller, Joint Controller, Processor, and Administrative Fines
Advocate General released an opinion on the concepts of “controller”, “joint controller” and “processor”, and also liability system established by the GDPR.
CJEU’s Advocate General Issues Opinion on GDPR Fines Against Companies
The Advocate General delivered opinion concerning the conditions regarding fines under the GDPR.
AG provides opinion on presumed fault of the controller in case of data breach
Advocate General of CJEU examined the interpretation of the civil non-material right to damages and duty of care concerning technical and organisational measures under.
Finnish DPA: marketing consent as requiremnt for participation in lottery is acceptable
Requiring a consent for marketing emails is acceptable prerequisite for lottery participation, says Finnish DPA.
EDPB welcomes improvements under the EU-U.S. Data Privacy Framework, but concerns remain
EDPB has acknowledged the considerable improvements made in the proposed EU-U.S. Data Privacy Framework, but still much to be done.
Will Europe’s Privacy Bill of Rights Ever Truly Be Enforced?
GDPR did lead to more transparency about how companies were using data but many of the rights have been nearly impossible to exercise.
EDPB adopts statement on CJEU PNR judgment
EDPB adopted a statement on the recent judgment C-817/19 of the CJEU on the use of passenger name record data.