Sector-specific codes of conduct contribute to application of GDPR

In a note from the Presidency to the Permanent Representatives Committee (Part 2)/Council, published on 19 December 2019, "Council position and findings on the application of the General Data Protection Regulation (GDPR)", the Presidency underlined the usefulness of Codes of Conduct, writing that: "Drafting sector-specific codes of conduct in accordance with Article 40 of ...

Joint Controllership: A collection of recent guidance

Article 26 GDPR on Joint controllers determines that, "Where two or more controllers jointly determine the purposes and means of processing, they shall be joint controllers. They shall in a transparent manner determine their respective responsibilities for compliance with the obligations under this Regulation, in particular as regards the exercising of the rights of the ...

Italian Garante: Not permissible to keep a former employee’s mail account active after the termination of the employment relationship

The Italian DPA (Garante) has stated that it is not allowed for a company to keep the email account of a former employee active following termination of the employment relationship and to access the emails contained in the inbox. The Decision  of the Garante follows a complaint from an individual who complained that their privacy ...

Dutch DPA investigates use of tracking cookies

The Dutch DPA carried out an audit of approximately 175 websites including those of web shops, municipalities, and  the media, in order to ascertain whether they comply with the requirements for the placing of tracking cookies. Almost half of the websites that use tracking cookies do not meet the consent requirements. The DPA found that “Virtually ...

EDPS announces investigation into European Parliament’s 2019 election activities and is taking enforcement actions

On 28 November 2019 the European Data Protection Supervisor announced that "it is carrying out an investigation into the European Parliament’s use of a US-based political campaigning company to process personal data as part of its activities relating to the 2019 EU parliamentary election." In its press release the EDPS stressed that "Election campaigns are ...

Italian DPA: Second semester inspection plan focuses on whistleblowing

The Italian Data Protection Supervisory Authority recently published the measure whereby it decided on the audit plan for this six-month period, citing one of the processing activities that could be inspected: “1. For the period from July to December 2019, the auditing activity initiated and carried out by the Data Protection Supervisory Authority, including through the Guardia di ...

SAVE THE DATE: Advertising technology: legal compliance requirements to fully exploit adtech in your marketing strategies Webinar

Join me on Tue, Jan 21, 2020 5:00 PM - 6:00 PM CET! Register here. The nearly unlimited opportunities of present-day technologies grouped under the umbrella of ‘adtech’ – including cookies and other tracking technologies, programmatic advertising, and real-time bidding – also pose legal compliance challenges for businesses looking to take advantage of the ...

CSA CODE OF CONDUCT for GDPR COMPLIANCE: CSA EMEA Congress 2019

This week I attended the CSA EMEA Congress 2019 where I presented on the CSA Code of Conduct for GDPR Compliance, also in my quality of Co-Chair of the CSA PLA WG. My presentation covered the fundamentals of the GDPR and the CSA Code of Conduct and discussed the game-changers and pillars of the Code ...

Facebook and the ICO reach agreement

Read the official statement from the ICO here. In 2017 ICO launched a formal investigation of the growing misuse of personal data in the context of political campaigns, after which in 2018, ICO fined Facebook for sum of GBP 500,000 for "suspected failings related to compliance with the UK data protection principles covering lawful ...

Mia intervista su Open sulla proposta di Marattin della registrazione con documento d’identità per accedere ai social network

Oggi sono stato intervistato da Open, la testata online di Enrico Mentana, sul tema della registrazione tramite carta d’identità per accedere ai social network. Il mio parere segue quello di Luigi Marattin, economista e deputato di Italia Viva, l’autore della proposta che sta sollevando un grande dibattito in questi giorni in Italia.  Marattin ha puntato l’attenzione ...