Recent Posts by Paolo Balboni

European Data Protection Board adopts Guidelines on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects

The European Data Protection Board has published its updated Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects following public consultation. The Guidelines were adopted by the Board on 8 October 2019 and concern the "applicability of Article 6(1)(b) to ...

Sri Lankan Ministry of Digital Infrastructure and Information Technology finalizes Data Protection Legislation

The Sri Lanakan Personal Data Protection Legislation Bill has been finalized and will be implemented over three years from the date of certification by the Speaker, providing adequate time for both the public and private sectors to implement the legislation. A Sri Lankan Data Protection Authority will also be establihsed within 18 months. ...

Irish Data Protection Commission publishes guidance on common online risks

The Irish Data Protection Commission has published Guidance for data subjects entitled "What should you be aware of online? Some common online risks". The document, directed towards consumers, provides a simple but thorough overview of data protection principles such as Transparency/purpose limitation and practical advice for how data subjects can understand the risks towards ...

Glawischnig-Piesczek vs. Facebook Ireland Limited: CJEU determines that hosting provider may ordered to remove identical and equivalent comments to those which have already been declared illegal

The decision of the CJEU in this case in which a hosting provider can be required to remove content on a global level in the context of a EU Member State Court injunction within the framework of international law, exemplifies the global reach of European regulators with the Internet.   Here's a little background on the case ...

CJEU rules that the prohibition on processing certain categories of sensitive personal data applies also to operators of search engines

In Case C-136/17 GC and Others v Commission nationale de l'informatique et des libertés (CNIL), the CJEU determined that the prohibition on processing certain categories of sensitive personal data applies also to operators of search engines and that in the context of a request for de-referencing, a balance must be struck between the fundamental rights ...

CJEU rules storing cookies requires internet users’ active consent and therefore a pre-ticked checkbox is insufficient

The Court of Justice of the European Union in its Judgment in Case C-673/17 Bundesverband der Verbraucherzentralen und Verbraucherverbände ̶ Verbraucherzentrale Bundesverband eV v Planet49 GmbH, confirmed "that the consent which a website user must give to the storage of and access to cookies on his or her equipment is not validly constituted by way ...

CJEU: prohibition on processing certain categories of sensitive data also applies to search engines

By No tags Permalink 0

The Judgment in Case C-136/17 GC and Others v Commission nationale de l'informatique et des libertés (CNIL, the French Data Protection Authority) has determined that operators of search engines can also be subject to the prohibition of processing of certain categories of sensitive personal data. The judgement handed down today, attempts to strike a balance ...

Recent Comments by Paolo Balboni

    No comments by Paolo Balboni yet.