GDPR

Latest

GDPR

Blizzard of EU Regulation Triggers Changes at Meta, Company Will Now Obtain User Consent Before Serving Targeted Ads

August 16, 2023

Since the GDPR went into effect in 2018, Meta has done nearly everything possible to claim legitimate interest to avoid user consent for collecting personal information for targeted ads. The company appears to have finally reached the end of its rope in this area, though a recently announced changeover to a consent basis.

Hammer and gavel on laptop showing antitrust law ruling on Meta

Data Protection News

Meta Runs Out of Rope on EU Antitrust Law Challenge, Regulatory Purview Expanded to Include Data Privacy Issues

July 14, 2023

Meta has now lost that case in the EU's highest court, opening the door for other antitrust law investigations in the bloc to incorporate data privacy violations and frame them as part of a systemic abuse of market position.

EU flags outside European Parliament showing opposition to EU-US data transfer framework

Data Protection News

European Parliament Committee Rejects Proposed EU-US Data Transfer Framework

February 27, 2023

The central objection raised is a predictable one, and one that some analysts believe will inevitably cause the EU-US data transfer proposal to fail yet another court challenge if it makes it to implementation: the lack of a federal-level data privacy law in the US.

Digital cyberspace and digital data network connections showing risk-based approach to international data transfers under GDPR

Data Protection News

Risk-Based Approach to International Data Transfers Necessary to the Future of Cross-Border Data Flows Under GDPR

December 1, 2022

A new paper from global law multinational DLA Piper lays out the case for a risk-based approach to GDPR international data transfers, arguing that the status quo is too onerous and that data exporters are suffering.

Twitter app displayed on smartphone showing Irish DPC issue with GDPR one stop shop rule

Data Protection News

Could “The New Twitter” Run Into Issues With GDPR One Stop Shop Rule? Irish DPC Source Indicates Staffing Situation May Be a Problem

November 28, 2022

Losing Ireland "main establishment" status means that any national DPA in the EU could bring direct GDPR action against Twitter on behalf of its citizens without the standard collaborative process that ultimately funnels everything through the Irish DPC.

Judge gavel over US and EU flags showing executive order for EU-US data transfers under GDPR

Data Protection News

Executive Order for EU-US Data Transfers Looks To Smooth Over GDPR Restrictions, but Privacy Advocates Are Unsatisfied

October 11, 2022

The crux of the privacy objections is that the executive order does not guarantee that indiscriminate collection will be stopped; it merely attempts to narrow the scope of intelligence activity in EU-US data transfers.

Hand working with VR screen with padlock icon showing GDPR and privacy regulations

Data Protection Insights

How GDPR Changed the Game for Enterprises

September 28, 2022

Organizations must elevate their data management and privacy regulations to adhere to governance policies, which will align with privacy laws. This will enable the proper management and storage of personal data and avoid some of the ongoing privacy issues faced today.

European Parliament building on a winter day at dusk showing GDPR

Data Protection Insights

Looking Back 4 Years Later, Is the GDPR All It Was Cracked Up To Be?

September 23, 2022

GDPR was introduced in 2018 and has significantly impacted privacy, transparency, and business accountability. What could have been done better, and what’s next?

Google Analytics app on smartphone screen showing EU-US data transfers considered GDPR violation

Data Protection News

Italy Bans Google Analytics Over Improper EU-US Data Transfers

July 5, 2022

Italy’s data protection authority has ruled that Google's data transfers to servers in the United States fall afoul of the rules of the GDPR, with the company not anonymizing IP addresses sufficiently.

Waving flags in front of European Parliament building showing Digital Markets Act

Data Protection Insights

EU Digital Markets Act: Key Aspects and Lingering Questions

June 7, 2022

The EU Digital Markets Act (DMA) appears headed for adoption in May. Companies providing “core platform services”, as well as those potentially receiving data from such companies, should understand not only what the DMA requires, but also its impact on existing obligations under the GDPR.

GDPR

Why Europe Needs to Prioritize the Switch to Quantum-Safe Encryption

Greater Manchester Police Investigating a Third-Party Data Breach From a Ransomware Attack

Iranian Hackers Use Password Spray Attacks to Compromise Defense Organizations, Pharmaceutical Firms

Airbus Data Breach from a Partner Airline’s Compromised Account Leaks Confidential Information