What can we learn from Google €50 million GDPR fine?
French data protection authority imposed on Google a GDPR fine in amount of €50 million. What can we learn from it?
privacy
Happy Data Protection Day
data protection, opinion, privacy
Today is international Data Protection Day. Yes, that’s official day! Data Protection Day, or as it is called outside Europe – Privacy Day, is celebrated each January 28th already since 2007. In 2006 the Council of Europe launched a Data Protection Day to be celebrated each year on 28 January, the date on which the Council of […]
Facebook users drop in Europe. What is the takeaway?
data protection, EU, Facebook, privacy
Facebook’s users dropped in Europe and US Recently Facebook published latest (Q3) user and revenue update, having the overall users base drop (in Europe and US, mainly). While the drop of users, when compared to total numbers, is small, it is strong signal that users in Europe are not happy with some of Facebook’s practices. […]
ICO publishes guidance on privacy notices under GDPR
data protection, EU, privacy, publication
UK’s Information Commissioner’s Office (ICO) has published guidance on privacy notices under EU General Data Protection Regulation (GDPR). GDPR introduces new requirements for controllers on notifying data subjects about processing of their data. GDPR requires privacy notices to be understandable and accessible. ICO’s guidance provides best practice on communicating privacy information to individuals. Access guidance
IAPP-EY Annual Privacy Governance Report 2016
data protection, GDPR, privacy, publication, survey
IAPP together with EY has published their second annual Privacy Governance Report. 120-pages report is result of data provided by 600 privacy professionals across the globe. It focuses on GDPR and move of other countries towards more robust privacy regulation. Read full report
Dynamic IP address is personal data, rules CJEU
CJEU, court, data protection, internet, privacy
Yesterday (October 19, 2016) the Court of Justice of the European Union (CJEU) issued its judgment in case Patrick Breyer v. Bundesrepublik Deutschland, in which court recognizes that dynamic IP addresses registered by websites are personal data. CJEU followed the Opinion of the Advocate General delivered earlier this year. In its decision CJEU concluded that […]
CISPE publishes Code of Conduct for Cloud Infrastructures Services
cloud, data protection, GDPR, internet, privacy
Cloud Infrastructure Services Providers in Europe (“CISPE”) – a relatively new coalition of more than 20 cloud infrastructure providers operating in Europe – has recently published its first Code of Conduct for Cloud Infrastructures Services. The CISPE Code of Conduct: Gives a framework to comply with the General Data Protection Regulation Excludes the reuse of […]
The geographical scope of application of the right to be forgotten
CJEU, court, data protection, privacy, publication
Michel Reymond has published a paper “Hammering Square Pegs into Round Holes: The Geographical Scope of Application of the EU Right to Be Delisted” where he explores the extraterritorial effects of the decision of Court of Justice of European Union (CJEU) in so called Google Spain case. In that case CJEU recognized “right to be forgotten” or, according Michel […]