transparency - DPO Hub

CJEU C-169/23 Masdi

members – 3 min read

UPDATED: First interpretation of the Art. 14(5)(c) derogation! It applies to *all* data not collected from the data subject, including self-generated data. And a DPA can verify national law under Art. 14(5)(c) - but not include Art. 32 obligations under that. And beware of language differences!

Nov 28, 2024

🇮🇪 DPC fines LinkedIn €310m for illegal behavioural analysis and targeted advertising

members – 2 min read

UPDATE 21 Nov: Key statement from DPC! 👇 6 years after a complaint, the DPC finds that LinkedIn breached the lawfulness (lacking both consent, legitimate interest AND contractual necessity), fairness and transparency principles. Result: reprimand, order to rectify violations + €310 million fine.

Nov 21, 2024

France DPA fines Amazon €32m for invasive employee monitoring

members – 3 min read

[22 March update: Amazon has appealed] The 🇫🇷 CNIL fined Amazon for excessively intrusive monitoring, using several illegal indicators and unsecure video surveillance software, without sufficiently informing employees and visitors.

Mar 22, 2024

Sweden MedHelp 1177 case

members – 8 min read

This case is not only a goldmine for DPOs in the Swedish healthcare sector (although particularly so), but DPOs in general, for assessing roles, legal bases and processor liability.

Feb 22, 2024

Sweden court upholds ~$1m fine: major health data leak and forwarding calls to 🇹🇭

members – 2 min read

🇸🇪 MedHelp must pay SEK 11,3 million (~$1m) for leaking 2,7 million health-related conversations (of 170 000 hours) online for several years and no legal basis for forwarding call to Thailand.

Feb 18, 2024

What to call "privacy policy"

members – 1 min read

…

Oct 4, 2023

Belgium DPA's audit exceeds initial complaint

members – 3 min read

How not to respond to concerns about formatting issues in your official letters...

Sep 28, 2023