Data Protection News, Insights and Resources

The €50 million fine against Google is a sign that GDPR grade transparency is here to stay. Legalistic privacy policies will always be with us of course, but the privacy world is currently primed to embrace a new “layered notice” paradigm for delivering privacy information to users on their terms.

Germany set a new precedent with an antitrust ruling against Facebook, forcing the company to make major changes to their data collection practices – German users are to be given a greater degree of notice and choice in how their data is used.

The Google GDR fine has demonstrated that most historical data, analytics & AI, and decentralized processing is illegal under the GDPR. Companies must focus on more than consent to legally process analytics and AI when those processes cannot be described with the required specificity and voluntariness at the time of data collection.

Google received €50 million in GDPR fines from French regulator CNIL for failing to adequately inform users about their data collection practices, and not giving users enough control over how their information is used. What are the lessons learnt?

Citing a potential violation of the GDPR, privacy activist Max Schrems and his digital rights nonprofit organization noyb have filed GDPR complaints against eight major streaming companies, including YouTube, Netflix, Spotify, Apple and Amazon.

The GDPR has been in effect for a few months now, and it’s safe to say most businesses are familiar with it by now. It’s also likely a safe bet that at least a few view it as an inconvenience. Truth is, it’s anything but. From a business perspective, privacy regulations are one of the best things that could possibly exist - here’s why.

Second annual review of the EU-U.S. Privacy Shield went better than the first, but the European Commission is still waiting on the U.S. government to nominate a permanent Ombudsperson to handle potential complaints and requests from EU citizens.

While the proposed Data Care Act isn't quite a full-on EU GDPR equivalent, the bill still aims to bring the tech industry's practices more in line with current approaches for handling sensitive personal information.

So what does a GDPR data protection officer need to know to step into this role and be effective? The job will need some significant experience in both IT and risk management at minimum and also other ancillary skills that are important to success in the role.

Both the GDPR and ePrivacy Regulation alter regulations of how organisations use cookies which falls under the GDPR's definition of personal data. Why should companies care and how do they ensure compliance.