noyb files 11 (!) complaints against Meta for AI training
paid
–
1 min read
noyb has filed 11 DPA complaints to try to stop Meta from using our data for AI training, meant to take effect 26 June ⏰
Featured posts
Digital Omnibus
20-21 Oct: 🔥 Timeline update from noyb and Council agreed their position on GDPR and ePrivacy changes:
Events 2026
Next up: 21-23 Oct 🇩🇰 Copenhagen: ITechLaw 2026 European Conference I 22-23 Oct 🇳🇴 Sandefjord: Det årlige personvernkurset
Right of access (DSARs)
All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide.
Data protection impact assessments – DPIAs
Key resources for data protection impact assessment – DPIAs. Latest: EDPB shares new DPIA template (it's excessive)...
DPO role key resources
Key DPO role resources: CJEU rulings, EDPB/WP29 Guidelines, DPA guidance and more.
Lawfulness: Consent
When can you rely on consent as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
Lawfulness: Legitimate interest
When can you rely on legitimate interest as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
The DPO role: Article 37(1)(b)
Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?
EDPB meeting minutes 16-17 April 2024
paid
–
1 min read
Noteworthy points on future AI and Consent or Pay guidelines, Support Pool of Experts updates and underspending.
EDPB: ChatGPT taskforce report
paid
–
4 min read
Your one key takeaway from the EDPB's ChatGPT report: Read Annex 4 (the questionnaire) as a thought exercise for a DPA audit where you work!
Spain: Massive €160k fine for ignoring the DPA
paid
–
1 min read
🇪🇸 Watium ignored the DPA (several times), was fined €160,000, but got a 40% discount for acknowledging responsibility and agreeing to pay voluntary. 💡 Make it a habit to respond promptly both to DPAs and data subjects! (And please reach out if you have answers to my questions.)
EDPB: Opinion on facial recognition use, ChatGPT report and announces AI Guidelines
paid
–
1 min read
EDPB shares the output of their latest meeting: Opinion on facial recognition use in airports, ChatGPT Task Force report, and announces Generative AI Guidelines to come! Press release and files here. PS: 📧 Remember you can subscribe to all new CJEU/EDPB posts. Go to Account > Manage emails.
Object to Meta using your data to "develop and improve AI"
paid
–
3 min read
🚨 Take action immediately to prevent Meta from misusing your data for AI purposes: login to Facebook, check notifications, read the popup and submit the objection form ✅
Founding Members meetup & Community launch
paid
–
1 min read
Registration for the meeting is now closed. If you've already registered, please check the email you provided for the meeting link and essential prep details!
Sweden DPA finally takes a key step forward against privacy-invasive sites
paid
–
1 min read
🇸🇪 DPA IMY concludes in a new legal opinion that they can indeed investigate highly privacy-invasive sites like Mrkoll and Lexbase! A key step forward! 🥳 (Let's just hope it'll become a privacy win!)
🔥 Dutch DPA: Web scraping almost always illegal AND:
paid
–
2 min read
The 🇳🇱 DPA issued new guidelines for the private sector (public sector one coming) on web scraping, stating it's "almost always illegal", and reiterates their highly controversial claim that ❌ You can't rely on legitimate interest for purely commercial reasons... 🤨
EU and Japan conclude "landmark deal on cross-border data flows"
paid
–
1 min read
🇪🇺 & 🇯🇵 agree cross-border data flows agreement which complement their existing adequacy arrangement.
Chief of Updates
