π¨ CJEU confirms TC String as personal data and IAB Europe as joint controller
DPO Hub writeup coming soon!
Mar 7, 2024
—
1 min read
You might also like
CJEU C-634/21 SCHUFA Holding (scoring)
members
–
4 min read
Credit scoring = Art. 22(1) 'automated individual decision-making' when a third party heavily relies on a probability value to form or end a contract with a data subject. π¨ A ruling of "ground-breaking importance for AI-based decisions" according to the Hamburg DPA!
CJEU C-507/23 Pateretaju tiesibu aizsardzibas centrs
members
–
1 min read
A GDPR violation doesnβt automatically count as damage under Article 82(1). An apology can be enough to compensate for non-material damage, if it fully covers the harm, especially when the original situation canβt be restored. And if you're sorry or not doesn't matter!
C-200/23 Agentsia po vpisvaniyata
members
–
3 min read
An authority of a commercial register = both recipient and controller. Handwritten signatures = personal data. Temporary loss of control (e.g. public disclosure) can lead to damage, but harm must be proven. And a few more points in today's CJEU ruling!