Rie Aleksandra - DPO Hub (Page 16)

CJEU C‑683/21 Nacionalinis visuomenės sveikatos centras 5 Dec 2023

members – 4 min read

The definition of 'controller' is broad and you're liable for all processing, done directly or by others on your behalf, including processors. Joint controllership is determined by facts, not contracts. Know your role(s)!

Jan 6, 2024

CJEU C-807/21 Deutsche Wohnen 5 Dec 2023

members – 3 min read

The definition of 'controller' is broad and includes legal persons, who are liable for any violations committed by any person in their business who act on their behalf. DPAs must demonstrate that you acted with intent or neglect to fine you and must base the max amount on the group's total revenue.

Jan 5, 2024

Norway DPA warns site tracking investigations 🧐

members – 2 min read

⏰ Datatilsynet will soon start investigating non-compliant tracking technologies. If you use Meta Pixel or similar, it's time for website due diligence!

Dec 21, 2023

EDPB Guidelines 5/2020 on consent

members – 6 min read

A 1-page summary of the EDPB's Guidelines: structure of valid consent, when is it invalid, what to do when it's withdrawn, key highlights and resources.

Dec 20, 2023

Lawfulness: Consent - examples

members – 33 min read

In need of consent inspiration or determine if your setup is (likely) compliant? Review this page for numerous examples!

Dec 19, 2023

CJEU C-456/22 Gemeinde Ummendorf 14 Dec 2023

members – 1 min read

No national de minimis threshold and data subjects must prove damage. NB: This is another CJEU ruling from today, also related to Article 82.

Dec 14, 2023

CJEU: Data breach ≠ poor measures (but you must prove it) and fear only can constitute non-material damage

members – 1 min read

How not to get sued by data subjects (se full write-up of case in C-340/21 post)

Dec 14, 2023

AI Act reaches political agreement (post update)

members – 1 min read

[post update] The AI Act enters into force 20 days after publication in the Official Journal and becomes (mostly) applicable 2 years after this.

Dec 14, 2023

Are you a boring DPO?

members – 3 min read

…

Dec 10, 2023

EDPB publishes Urgent Binding Decision regarding Meta

members – 1 min read

NB! This post was updated later with two key items: the actual EDPB decision and the DPC's Enforcement notice.

Dec 7, 2023

EDPB Plenary meeting 19-20 Sep 2023

members – 2 min read

EDPB September meeting minutes with interesting tidsbits!

Dec 7, 2023

CJEU (SCHUFA): On credit scoring, automated decision-making and courts' review of DPA decisions

members – 2 min read

Two CJEU rulings on SCHUFA Holding: Credit scoring = ADM when decisive for granting credit + national courts can fully review legally binding DPA decisions.

Dec 7, 2023