Enforcement

Google, Facebook and other digital platforms could be forced to pay hundreds of millions of dollars in fines if they fail to comply with a news media bargaining code released by Australia’s competition regulator on Friday. The Australian Competition and Consumer Commission was asked to develop the mandatory code in…

The reporting requirements for listed companies may have given a strong hint as to how much the ICO will fine British Airways (BA) for its data breach.  Spoiler alert:  it’s likely to be far less than the £184 million announced a year ago, and could be as little as 10%…

The Tim Hortons breakfast empire is feeling the heat in its native Canada over the data collection practices of its mobile app. The Office of the Privacy Commissioner of Canada (OPC), along with the privacy commissioners of the provinces of Quebec, Alberta and British Columbia is launching an investigation to…

The European Union’s top court struck down a key method used by Facebook Inc. and other companies to transfer data across the Atlantic amid fears over potential U.S. surveillance. Thursday’s decision by the EU Court of Justice on the so-called Privacy Shield means thousands of businesses that ship commercial data…

Inthe past when you first studied a company, you tried to figure out how it might perform in the months, quarters, and years ahead. But right now in the crony capitalism era, where we continue to witness one-man operations exposing big names as frauds, we need to acknowledge whether companies…

A courier arrived at my apartment door, handed me a heavy cardboard envelope and asked me to sign for it. This was serious business, and Toronto-Dominion Bank was not messing around. Weeks earlier, I’d sent a formal request to see all my personal information held by my bank. It’s the…

The Court of Justice of the European Union (“CJEU“) issued its judgment today in the Schrems II case1  and it is fair to say that it has caused some shock amongst the privacy community and our clients. First things first: don’t panic! Data flows will continue, and can continue, for…

A highly anticipated ruling by Europe’s top court has just landed — striking down a flagship EU-US data flows arrangement called Privacy Shield. “The Court of Justice invalidates Decision 2016/1250 on the adequacy of the protection provided by the EU-US Data Protection Shield,” it wrote in a press release. The…

The Dutch Data Protection Authority (DPA) issued a EUR 830,000 (approximately USD 937,000) fine against the Dutch Credit Registration Bureau (BKR) for violating data subject rights. The fine stems from BKR’s practice of charging fees and discouraging individuals who wanted to access their personal data. BKR is responsible for maintaining the Dutch…

The Schrems II judgment is due on 16th July. What will it say? Will Standard Contractual Clauses survive? What (if anything!) will you need to do anything to ensure that international transfers of data comply with GDPR? Join our experts on Friday 17th July at 16.00 BST, the day after…