ePrivacy - DPO Hub

Commission to withdraw proposed ePrivacy Regulation

members – 1 min read

According to Euractiv and MLaw, the Commission’s updated draft work programme confirms the ePrivacy Regulation proposal is withdrawed. There are no offical confirmations yet, so stay tuned.

Feb 10, 2025

EDPB Guidelines 2/2023 Technical Scope of Art. 5(3) ePrivacy Directive

members – 1 min read

Likely one of the EDPB’s most controversial documents to date, though the sub-processor Opinion will definitely give it strong competition for first place!

Oct 16, 2024

CJEU LED ePD C-548/21 Bezirkshauptmannschaft Landeck (Attempt to access personal data stored on a mobile phone) 4 Oct 2024

members – 1 min read

A case relating to the ePrivacy and Law Enforcement Directives, concluding that police access to phones isn't limited to the fight against serious crime.

Oct 4, 2024

CJEU ePD C-229/23 HYA and Others II 13 Jun 2024

members – 1 min read

Article 15(1) of the ePD allows Member State law to require that judges' decisions authorising wiretaps must include their own written reasons, even if the police's applications already provide detailed justifications.

Jun 18, 2024

noyb lodges two complaints against Microsoft with Austrian DPA

members – 1 min read

Microsoft's 365 Education platform under scrutiny in 🇦🇹! noyb lodges complaints regarding 1) lack of transparency and insufficient information, and 2) invasive and illegal cookie tracking of kids in schools.

Jun 5, 2024

CJEU ePD LED GDPR C-470/21 La Quadrature du Net and Others (Personal data and action to combat counterfeiting) 20 Apr 2024

members – 1 min read

Member States may require internet access providers to retain IP addresses in a general and indiscriminate manner to combat criminal offences, provided this retention doesn’t reveal precise details about the private life of the person concerned.

Apr 30, 2024

CJEU (EIO) C-670/22 EncroChat & CJEU (ePD) C-178/22 Bolzano 30 Apr 2024

members – 1 min read

CJEU on access to phone records related to serious crime and clarifies conditions for transmitting and using evidence in criminal cases with a cross-border dimension.

Apr 30, 2024

CJEU C-129/21 Proximus (subscribers' consent) 27 Oct 2022

members – 3 min read

Consent is required to list subscribers' details in publicly available directories. If obtained, including on behalf of other controllers, a data subject can withdraw it (= an erasure request) from any of them, and each controller may need to inform the others.

Apr 28, 2024

Denmark DPA says cookie walls are legal - and not

members – 2 min read

Update 26 Mar 2024: the DPA rejects reopening the cases, upholding that analytics/statistics aren't a necessary part of the alternative to paid access.

Mar 26, 2024

Denmark Agency orders Google and Meta to change cookie management

members – 3 min read

Meta must change their cookie banner in Denmark. Could this impact their 'pay or OK' model on Facebook?

Nov 23, 2023

EDPB provides clarity (?) on tracking techniques covered by the ePrivacy Directive

members – 1 min read

📣 EDPB to clarify key concepts in Article 5(3) of the ePrivacy Directive!

Nov 16, 2023

Denmark DPA fine for using Google and Meta cookies illegally

members – 1 min read

…

Oct 6, 2023