Lawfulness: Consent
members
–
6 min read
Start here for all things consent: when to rely on and not, practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
CJEU C-456/22 Gemeinde Ummendorf 14 Dec 2023
members
–
1 min read
No national de minimis threshold and data subjects must prove damage. NB: This is another CJEU ruling from today, also related to Article 82.
CJEU: Data breach ≠ poor measures (but you must prove it) and fear only can constitute non-material damage
members
–
1 min read
How not to get sued by data subjects (se full write-up of case in C-340/21 post)
AI Act reaches political agreement (post update)
members
–
1 min read
[post update] The AI Act enters into force 20 days after publication in the Official Journal and becomes (mostly) applicable 2 years after this.
EDPB publishes Urgent Binding Decision regarding Meta
members
–
1 min read
NB! This post was updated later with two key items: the actual EDPB decision and the DPC's Enforcement notice.
EDPB Plenary meeting 19-20 Sep 2023
members
–
2 min read
EDPB September meeting minutes with interesting tidsbits!
CJEU (SCHUFA): On credit scoring, automated decision-making and courts' review of DPA decisions
members
–
2 min read
Two CJEU rulings on SCHUFA Holding: Credit scoring = ADM when decisive for granting credit + national courts can fully review legally binding DPA decisions.
CJEU: Fines can only be imposed where there was intent or negligence
members
–
1 min read
...and fines MUST be calculated on the *group's* total worldwide annual turnover!
Great resource: Legislative Train Schedule 🚝
members
–
1 min read
Stop searching for "ePrivacy Regulation latest update", simply bookmark this great resource 🚝
France, Germany and Italy jeopardising AI Act?
members
–
1 min read
News article from Euractiv on the status of the AI Act (we're hoping won't follow the same slow journey as ePrivacy!)
Sweden DPA fines municipality for lack of Google Workspace DPIA
members
–
2 min read
Sweden's DPA IMY fines a municipality SEK 300,000 for using Google Workspace for Education without a DPIA.