Rie Aleksandra - DPO Hub (Page 10)

Sweden DPA finally takes a key step forward against privacy-invasive sites

members – 1 min read

🇸🇪 DPA IMY concludes in a new legal opinion that they can indeed investigate highly privacy-invasive sites like Mrkoll and Lexbase! A key step forward! 🥳 (Let's just hope it'll become a privacy win!)

May 14, 2024

CJEU C-115/22 NADA and Others 7 May 2024

members – 3 min read

Controversial AG Opinion concluding that sports are outside GDPR's scope, with odd logic on Art. 9, stays unclear as the CJEU finds the referring body lacks the needed independence to be a 'court or tribunal', making their preliminary ruling request inadmissible.

May 10, 2024

🔥 Dutch DPA: Web scraping almost always illegal AND:

members – 2 min read

The 🇳🇱 DPA issued new guidelines for the private sector (public sector one coming) on web scraping, stating it's "almost always illegal", and reiterates their highly controversial claim that ❌ You can't rely on legitimate interest for purely commercial reasons... 🤨

May 10, 2024

EDPB granted right to intervene in SRB-EDPS appeal

members – 1 min read

A strange occurance in my RSS feed today as this order from November 2023 suddenly appeared, giving the EDPB the right to intervene in the infamous SRB v EDPS case. So, not sure this is news. 🤷🏻‍♀️

May 3, 2024

EU and Japan conclude "landmark deal on cross-border data flows"

members – 1 min read

🇪🇺 & 🇯🇵 agree cross-border data flows agreement which complement their existing adequacy arrangement.

May 2, 2024

CJEU ePD LED GDPR C-470/21 La Quadrature du Net and Others (Personal data and action to combat counterfeiting) 20 Apr 2024

members – 1 min read

Member States may require internet access providers to retain IP addresses in a general and indiscriminate manner to combat criminal offences, provided this retention doesn’t reveal precise details about the private life of the person concerned.

Apr 30, 2024

CJEU (EIO) C-670/22 EncroChat & CJEU (ePD) C-178/22 Bolzano 30 Apr 2024

members – 1 min read

CJEU on access to phone records related to serious crime and clarifies conditions for transmitting and using evidence in criminal cases with a cross-border dimension.

Apr 30, 2024

CJEU C-129/21 Proximus (subscribers' consent) 27 Oct 2022

members – 3 min read

Consent is required to list subscribers' details in publicly available directories. If obtained, including on behalf of other controllers, a data subject can withdraw it (= an erasure request) from any of them, and each controller may need to inform the others.

Apr 28, 2024

European Parliament adopts European Health Data Space (EHDS)

members – 1 min read

📝 The Commission welcomes the European Parliament's adoption of the European Health Data Space (EHDS).

Apr 27, 2024

CJEU C‑741/21 juris 11 Apr 2024

members – 5 min read

Breaching GDPR rights doesn't automatically result in non-material damage, and controllers can't (ever?) escape liability simply because someone under their authority didn't follow instructions.

Apr 26, 2024

EDPB clarifies implementation DPF redress mechanisms

members – 1 min read

📝 The EDPB clarifies implementation of the Data Protection.. errrr, I mean *Privacy* Framework redress mechanisms!

Apr 24, 2024

EDPB's controversial ‘Consent or Pay’ Opinion is here

members – 2 min read

[Updated 24 April with highlighted file + 🎙️] Is the EDPB trying to "rewrite the entire economic model of Big Tech and the adtech industry in the EU"? 🤔 Controversial Opinion just published!

Apr 24, 2024