EDPB Plenary meeting 19-20 Sep 2023
members
–
2 min read
EDPB September meeting minutes with interesting tidsbits!
CJEU (SCHUFA): On credit scoring, automated decision-making and courts' review of DPA decisions
members
–
2 min read
Two CJEU rulings on SCHUFA Holding: Credit scoring = ADM when decisive for granting credit + national courts can fully review legally binding DPA decisions.
CJEU: Fines can only be imposed where there was intent or negligence
members
–
1 min read
...and fines MUST be calculated on the *group's* total worldwide annual turnover!
Great resource: Legislative Train Schedule 🚝
members
–
1 min read
Stop searching for "ePrivacy Regulation latest update", simply bookmark this great resource 🚝
France, Germany and Italy jeopardising AI Act?
members
–
1 min read
News article from Euractiv on the status of the AI Act (we're hoping won't follow the same slow journey as ePrivacy!)
Sweden DPA fines municipality for lack of Google Workspace DPIA
members
–
2 min read
Sweden's DPA IMY fines a municipality SEK 300,000 for using Google Workspace for Education without a DPIA.
Denmark DPA shares useful security measures catalogue
members
–
1 min read
Only in Danish but useful with in-browser translate!
EU fact sheet on Personal data protection
members
–
1 min read
Quick overview of the legal basis, objectives and background/history of personal data protection, as well as the role of the European Parliament.
Denmark Agency orders Google and Meta to change cookie management
members
–
3 min read
Meta must change their cookie banner in Denmark. Could this impact their 'pay or OK' model on Facebook?
Sweden Supreme Adm. Court: IMY's decision not to investigate or act on complaints can be appealed
members
–
3 min read
IMY's decisions 1) not to investigate a complaint further and 2) to close a supervisory case without action are appealable.
Denmark DPA strongly criticises and bans public agency processing
members
–
3 min read
The Danish Agency for Digital Government processes personal data of 2.26 million citizens in violation of the data minimisation principle.
CJEU C-319/22 Gesamtverband Autoteile-Handel (Access to vehicle information) (VIN, Scania) 9 Nov 2023
members
–
3 min read
A vehicle identification number (VIN) is not personal data in nature, but may be(come) so depending on the context, even if you cannot identify someone directly yourself from it.