Rie Aleksandra - DPO Hub (Page 18)

Denmark DPA says cookie walls are legal - and not

paid – 2 min read

Update 26 Mar 2024: the DPA rejects reopening the cases, upholding that analytics/statistics aren't a necessary part of the alternative to paid access.

Mar 26, 2024

France DPA fines Amazon €32m for invasive employee monitoring

paid – 3 min read

[22 March update: Amazon has appealed] The 🇫🇷 CNIL fined Amazon for excessively intrusive monitoring, using several illegal indicators and unsecure video surveillance software, without sufficiently informing employees and visitors.

Mar 22, 2024

🔥 Swedish Tax Agency greenlights (?) US cloud services

paid – 2 min read

Following the EU-US DPF, the 🇸🇪 Tax Agency approves using Microsoft Office 365 and Teams. Despite emphasising that everyone must do their own assessments, I'd say this could strengthen your own cloud services assessments.

Mar 22, 2024

France: unemployment breach impacts 43m dating back 20 years

paid – 1 min read

🇫🇷 Massive breach and what we can learn immediately from it: data minimisation, deletion, breach response plans - and communication that people actually understand!

Mar 20, 2024

Leaked AI Act (and why I'm not reading it) - update

paid – 2 min read

12 March: Updated with final text before the final vote scheduled for the 13 March plenary - with all 808 amendments. 🔥

Mar 12, 2024

4 new CJEU rulings

paid – 1 min read

Two rulings on the concept of personal data, one stating that oral data = processing, and last one pertains to the Europol regulation. DPO Hub writeups coming!

Mar 11, 2024

EDPB CEF DPO report - a deep dive

public – 8 min read

🚨 My final writeup of the EDPB's CEF DPO report, which you shouldn't spend time on unless you have time to spare or are simply burning with curiosity! PS: We just released our Grumpy GDPR episode on this.

Feb 29, 2024

EDPB launches 2024 CEF action: right of access

paid – 2 min read

31 DPAs (7 are 🇩🇪 state level) participate with the intention to assess how organisations deal with access requests *in practice*. Final report published!

Feb 28, 2024

Sweden MedHelp 1177 case

paid – 8 min read

This case is not only a goldmine for DPOs in the Swedish healthcare sector (although particularly so), but DPOs in general, for assessing roles, legal bases and processor liability.

Feb 22, 2024

Sweden court upholds ~$1m fine: major health data leak and forwarding calls to 🇹🇭

paid – 2 min read

🇸🇪 MedHelp must pay SEK 11,3 million (~$1m) for leaking 2,7 million health-related conversations (of 170 000 hours) online for several years and no legal basis for forwarding call to Thailand.

Feb 18, 2024

UK ICO Gameforge audit report

paid – 3 min read

The ICO conducted a 'consentual audit' of Gameforge’s processing of 🇬🇧 children’s personal data under the AADC and data protection legislation.

Feb 15, 2024

CJEU C-582/14 Breyer (dynamic IP addresses) 19 Oct 2016

paid – 3 min read

…

Feb 11, 2024