In a note from the Presidency to the Permanent Representatives Committee (Part 2)/Council, published on 19 December 2019, "Council position and findings on the application of the General Data Protection Regulation (GDPR)", the Presidency underlined the usefulness of Codes of Conduct, writing that: "Drafting sector-specific codes of conduct in accordance with Article 40 of ...
Article 26 GDPR on Joint controllers determines that, "Where two or more controllers jointly determine the purposes and means of processing, they shall be joint controllers. They shall in a transparent manner determine their respective responsibilities for compliance with the obligations under this Regulation, in particular as regards the exercising of the rights of the ...
The Italian DPA (Garante) has stated that it is not allowed for a company to keep the email account of a former employee active following termination of the employment relationship and to access the emails contained in the inbox. The Decision of the Garante follows a complaint from an individual who complained that their privacy ...
The Dutch DPA carried out an audit of approximately 175 websites including those of web shops, municipalities, and the media, in order to ascertain whether they comply with the requirements for the placing of tracking cookies. Almost half of the websites that use tracking cookies do not meet the consent requirements. The DPA found that “Virtually ...
On 28 November 2019 the European Data Protection Supervisor announced that "it is carrying out an investigation into the European Parliament’s use of a US-based political campaigning company to process personal data as part of its activities relating to the 2019 EU parliamentary election." In its press release the EDPS stressed that "Election campaigns are ...
On 12 December 2019 in the UK general election, Boris Johnson secured his position as UK Prime Minister, with his Conservative party winning its first substantial majority in decades. The results of the election have set the way for the UK to exit the European Union by its scheduled exit date of 31 January 2020. The results ...
The five strategic focuses announced by the CNIL until 2021 include: Giving priority to digital issues in everyday lifeEnsuring balanced data protection regulations in the era of the GDPRPromoting data diplomacyProviding up-to-the-minute public expertise on digital technology and cybersecurityEmbodying an innovative public service that holds fast to its values You can read more about the CNIL's strategic ...
The Italian Data Protection Supervisory Authority recently published the measure whereby it decided on the audit plan for this six-month period, citing one of the processing activities that could be inspected: “1. For the period from July to December 2019, the auditing activity initiated and carried out by the Data Protection Supervisory Authority, including through the Guardia di ...
The DPA of the United Kingdom sent a letter to political parties in light of the 12 December 2019 General Election to remind them that “People expect their personal information to be used in line with law, and where that doesn’t happen in digital campaigning, there’s a danger that public trust and confidence in the ...
Join me on Tue, Jan 21, 2020 5:00 PM - 6:00 PM CET! Register here. The nearly unlimited opportunities of present-day technologies grouped under the umbrella of ‘adtech’ – including cookies and other tracking technologies, programmatic advertising, and real-time bidding – also pose legal compliance challenges for businesses looking to take advantage of the ...
Top-tier ICT, privacy & data protection lawyer and Founding Partner of ICT Legal Consulting. Professor of Privacy, Cybersecurity, and IT Contract Law at the European Centre on Privacy and Cybersecurity within the Maastricht University Faculty of Law. President of the European Privacy Association. Lead Auditor BS ISO/IEC 27001:2013 (IRCA Certified).
Read more
CONNECT