Rie Aleksandra - DPO Hub (Page 8)

CJEU C-101/01 Bodil Lindqvist

members – 4 min read

A key (Directive 95/46/EC) ruling broadly interpreting key definitions (personal and health data, processing) and narrowly applied exceptions, but found that simply putting a website online doesn't necessarily result in transfers.

Apr 9, 2024

CJEU C-46/23 Ujpesti Polgarmesteri Hivatal

members – 1 min read

DPAs can order controllers to delete unlawfully processed data without a prior request from a data subject, and regardless of where the data came from (the data subject or elsewhere).

Mar 26, 2024

CJEU C-740/22 Endemol Shine Finland

members – 3 min read

The CJEU held that orally disclosing personal data is 'processing' and potentially subject to the GDPR + sharing criminal data orally (or in writing) is not allowed to fulfill a public access request.

Mar 26, 2024

Denmark DPA says cookie walls are legal - and not

members – 2 min read

Update 26 Mar 2024: the DPA rejects reopening the cases, upholding that analytics/statistics aren't a necessary part of the alternative to paid access.

Mar 26, 2024

My Meta Pay or Okay experience - now they're halving their fees

members – 5 min read

Latest updates: EC opens DMA investigation, Schibsted implements Pay and Okay and immediately gets into the 🇳🇴 DPA spotlight + Meta offers to lower their subscription fees from €9.99 to €5.99 "to address concerns from privacy and antitrust regulators".

Mar 25, 2024

France DPA fines Amazon €32m for invasive employee monitoring

members – 3 min read

[22 March update: Amazon has appealed] The 🇫🇷 CNIL fined Amazon for excessively intrusive monitoring, using several illegal indicators and unsecure video surveillance software, without sufficiently informing employees and visitors.

Mar 22, 2024

🔥 Swedish Tax Agency greenlights (?) US cloud services

members – 2 min read

Following the EU-US DPF, the 🇸🇪 Tax Agency approves using Microsoft Office 365 and Teams. Despite emphasising that everyone must do their own assessments, I'd say this could strengthen your own cloud services assessments.

Mar 22, 2024

CJEU C-479/22 P OC v Commission

members – 3 min read

The CJEU returned a case to the General Court as they disagreed on the latter's interpretation of the concept of personal data—which is to be interpreted broadly—such as a press release with several data points that could identify someone.

Mar 21, 2024

France: unemployment breach impacts 43m dating back 20 years

members – 1 min read

🇫🇷 Massive breach and what we can learn immediately from it: data minimisation, deletion, breach response plans - and communication that people actually understand!

Mar 20, 2024

CJEU C-604/22 IAB Europe TC String

members – 6 min read

IAB Europe is a joint controller and because their 'TC String' contains data about an identifiable user, it's personal data.

Mar 18, 2024

Leaked AI Act (and why I'm not reading it) - update

members – 2 min read

12 March: Updated with final text before the final vote scheduled for the 13 March plenary - with all 808 amendments. 🔥

Mar 12, 2024

4 new CJEU rulings

members – 1 min read

Two rulings on the concept of personal data, one stating that oral data = processing, and last one pertains to the Europol regulation. DPO Hub writeups coming!

Mar 11, 2024