Norway DPA with new cookie ePrivacy guidance
members
–
1 min read
If you're based in Norway, this is a must-read!
CJEU C-654/23 Inteligo Media 27 Mar 2025 AG Opinion
members
–
2 min read
AG Szpunar: If someone creates an online account that includes access to your email newsletters, sending them qualifies as 'direct marketing’ under the ePrivacy Directive Article 13 and is covered by the exception in point 2. Under Article 95 GDPR, a lawful basis under Article 6 isn’t needed.
Commission to withdraw proposed ePrivacy Regulation
members
–
1 min read
According to Euractiv and MLaw, the Commission’s updated draft work programme confirms the ePrivacy Regulation proposal is withdrawed. There are no offical confirmations yet, so stay tuned.
EDPB Guidelines 2/2023 Technical Scope of Art. 5(3) ePrivacy Directive
members
–
1 min read
Likely one of the EDPB’s most controversial documents to date, though the sub-processor Opinion will definitely give it strong competition for first place!
CJEU LED ePD C-548/21 Bezirkshauptmannschaft Landeck (Attempt to access personal data stored on a mobile phone) 4 Oct 2024
members
–
1 min read
A case relating to the ePrivacy and Law Enforcement Directives, concluding that police access to phones isn't limited to the fight against serious crime.
CJEU ePD C-229/23 HYA and Others II 13 Jun 2024
members
–
1 min read
Article 15(1) of the ePD allows Member State law to require that judges' decisions authorising wiretaps must include their own written reasons, even if the police's applications already provide detailed justifications.
noyb lodges two complaints against Microsoft with Austrian DPA
members
–
1 min read
Microsoft's 365 Education platform under scrutiny in 🇦🇹! noyb lodges complaints regarding 1) lack of transparency and insufficient information, and 2) invasive and illegal cookie tracking of kids in schools.
CJEU ePD LED GDPR C-470/21 La Quadrature du Net and Others (Personal data and action to combat counterfeiting) 20 Apr 2024
members
–
1 min read
Member States may require internet access providers to retain IP addresses in a general and indiscriminate manner to combat criminal offences, provided this retention doesn’t reveal precise details about the private life of the person concerned.
CJEU (EIO) C-670/22 EncroChat & CJEU (ePD) C-178/22 Bolzano 30 Apr 2024
members
–
1 min read
CJEU on access to phone records related to serious crime and clarifies conditions for transmitting and using evidence in criminal cases with a cross-border dimension.
CJEU C-129/21 Proximus (subscribers' consent) 27 Oct 2022
members
–
3 min read
Consent is required to list subscribers' details in publicly available directories. If obtained, including on behalf of other controllers, a data subject can withdraw it (= an erasure request) from any of them, and each controller may need to inform the others.
Denmark DPA says cookie walls are legal - and not
members
–
2 min read
Update 26 Mar 2024: the DPA rejects reopening the cases, upholding that analytics/statistics aren't a necessary part of the alternative to paid access.
Denmark Agency orders Google and Meta to change cookie management
members
–
3 min read
Meta must change their cookie banner in Denmark. Could this impact their 'pay or OK' model on Facebook?