Following a two-year long investigation, the Dutch Data Protection Authority (AP) has issued a fine of 525.000€ on the Royal Dutch Lawn Tennis Association (KNLTB) for selling personal data of its members to third parties. Which data was sold? KNLTB sold personal data of a few hundred thousand of its members to two sponsors in […]
mb-firstprivacyenglisch
The California Consumer Privacy Act, or “Do Not Sell My Personal Information”
On January 1, 2020, the California Consumer Privacy Act (CCPA) has entered into effect, described by many as a landmark law and, according to the American Bar Association, the most comprehensive privacy legislation to be enacted in the United States of America. The CCPA was passed in 2018 and is aimed at providing consumers with […]
Data Protection Foundation Awards Journalist Prize
The year is coming to an end ever so rapidly – at least it feels like that for many of us. It is also the time of retrospection and of awards for this past year’s achievements. One such award is the Journalist Prize presented each year by Germany’s Data Protection Foundation, a private trust that […]
Swiss Hotel Booking Platform must comply with the GDPR
The Austrian Data Protection Authority has ordered a Swiss online hotel booking platform to comply with the requirements set forth in the EU General Data Protection Regulation (GDPR), in particular to provide the information according to Art. 13 GDPR to the data subject. The ordinance was based on the following facts: An Austrian citizen living […]
Digital marketing as a legitimate interest? Dutch DPA clarifies.
On the first of November the Dutch DPA (Autoriteit Persoonsgegevens) has tried to shed some more light on the subject of the legitimate interest as a lawful ground of processing. Besides reconfirming the common understanding and best practices, the Dutch DPA clarifies the legal basis for direct marketing if and to the extent, that the […]
New Rules for the Protection of Whistleblowers
You’ll find a german version here. The Council of Europe announced through a press release on the 7th of October 2019 that it had formally adopted new rules for the protection of whistle-blowers. With the adoption of the “Whistle-blower Directive” across the EU, European private and public organisations have an obligation to make available safe […]
La Agencia Española de Protección de Datos (AEPD) multa a VUELING con 30.000 euros
La AEPD ha multado a VUELING AIRLINES S.L. con 30.000 euros[1] por no haber obtenido el consentimiento adecuado para el uso de cookies en su página web. Con el fin de proporcionar a los interesados la información requerida a efectos de transparencia de conformidad con el artículo 13 del RGPD, la empresa proporciono la información […]
The Spanish DPA fines VUELING with 30.000 EURO
The Spanish data protection authority fined VUELING AIRLINES S.L. with 30.000 Euro[1] for failing to collect appropriate consent for the use of cookies on their website. In order to provide data subjects with the required information for transparency purposes under article 13 GDPR, the company implemented a 2-layer approach: In the first layer, the wording […]
B2B Marketing Days in Würzburg – Data Protection meets Marketing
The two-day conference “B2B Marketing Days” by marconomy took place in Würzburg from October 15-16 2019. The conference is a specialist’s conference for medium-sized companies discussing B2B specific marketing challenges, facilitate knowledge and Best Practice exchange via interactive formats and seeks to support cross-company networking activities. Around 350 participants and workshop lecturers have joined the […]
How Will the German Data Protection Authorities Determine Fines For Companies? – The DSK Publishes a New Concept.
On October 14, 2019, the German Conference of Data Protection Authorities (DSK) published a concept for determining fines in accordance with the GDPR. In some regards, this concept resembles the model of the Berlin Data Protection Authority which was presented in June of this year (we reported in German), but some aspects remain less concrete. […]
News on data protection law
Dear Readers, This is to update you on the latest news and developments in matters of data protection law. If you would like to be provided with more details, you may contact us via the commentary function. We will also link to our blog posts if we have already reported on this topic. What has […]
Hellenic DPA fines for violations of data protection by design and default
The Hellenic Data Protection Authority (“Authority”) issued two decisions on 7 October 2019 based on which it imposed two administrative fines amounting to 200,000 euros each to the Hellenic Telecommunications Provider, “OTE”. According to the decisions, the following violations were identified: breach of the principle of accuracy (Art. 5 (1) c GDPR) and data protection […]
The Effectiveness of Cookie Banners
On October 1st, the European Court of Justice handed down a ruling that could have a major impact on the design of the „cookie banners“ widely used on the Internet. Although the European Court of Justice was not actually considering the classic „cookie banner“, the ruling nevertheless makes statements which are significant to their practical […]
Hellenic DPA Fines PWC for Unlawful Processing of Employee Data
The Hellenic Data Protection Authority has fined PriceWaterhouseCoopers Business Solutions SA 150,000.00 € for unlawful processing of employee data, after the Authority had conducted an ex officio investigation in response to a complaint. The Authority also ordered a series of corrective measures and gave PWC three months’ time for their implementation. Reportedly, the company had […]
Forum shopping between data protection authorities?
The data protection authority (DPA) of the German federal state of Hamburg recently opened administrative proceedings against Google. It relates to Google’s “Google Assistant” System, the natural language assistant behind the “Google Home” speaker, and transcripts from it. The Belgian public broadcaster VRT NWS recently revealed that recordings from “Google Assistant” were systematically listened to […]