An economic study commissioned by Computer and Communications Industry (CCIA Europe) finds that the envisaged international transfer requirements could lead to as many as 40% of the polled EU companies to stop moving non-personal, commercially sensitive data to jurisdictions beyond its borders, implying a GDP loss of 79 billion euros per year. This finding contrasts, however, […]
Hellenic DPA fines Company for failure to comply with a data subject’s access request for a video recording, resulting in a € 30’000 GDPR Fine. Based on the complaint of a data subject, the Greek Data Protection Authority imposed the fine because the company had not properly complied with the complainant’s request for information. The […]
On May 24, 2021, a telephone conversation with an employee of the claimed entity was recorded without any informed consent and not following the principle of data minimization. . Through an email sent by the representative, he learned that his conversation was recorded, a fact he was not informed about. On November 15, 2021, the […]
Belgian DPA decision emphasizes on a lack of an appropriate legal basis for processing and transfer to ad tech partners, insufficient information to users, general non-compliance with regard to data protection by design and accountability. Concretely this means:– Ban on use of legitimate interest– Obligation to assess parties that connect to the ad network for […]
Italian energy company Enel Energia has been fined 26.5 million euros by the Italian privacy regulator for violating the GDPR. According to the Garante per la protezione dei dati personali (GPDP), the energy company has unlawfully processed the personal data of millions of people for marketing purposes. The GPDP launched an investigation into Enel Energia […]
A Spanish company has received a GDPR fine of 9,000 Euros for posting an employee’s photo on its own company website, Facebook and Instagram without his permission. The employee asked his employer to remove the image, but he refused. The company claimed it had been granted permission, even though it could not prove it. The […]
The Austrian Data Protection Authority has decided on a model case by noyb that the continuous use of Google Analytics violates the GDPR. This is the first decision on the 101 model complaints filed by noyb in the wake of the so-called “Schrems II” decision. In 2020, the Court of Justice (CJEU) decided that the […]
The UK’s Information Commissioner’s Office (ICO) told The Guardian in a statement that it was planning “further discussions” with Meta about the Quest 2 VR headset’s compliance with a recently established children’s code that priorities the “best interests” of young users. The watchdog wants to determine whether Meta’s headset and VR services do enough to […]
UK privacy regulator ICO plans to fine facial recognition company Clearview AI €20 million for violating UK privacy law. Clearview collected photos from Facebook, LinkedIn and other websites for training a facial recognition system. This system contains a database of ten billion collected images, according to the ICO. This allows police services to identify unknown […]
Irish DPC demanded noyb to sign a “non-disclosure agreement” or remove noyb from Facebook procedure. Schrems: “The DPC engaged in procedural blackmail. Only if we shut up, the DPC would ‘grant’ us our legal right to be heard. This is a regulator clearly asking for a ‘quid pro quo’ to do its job, which likely constitutes bribery in Austria.” […]