Enforcement

Brussels, BE — Today, Access Now releases a report which finds critical flaws in the enforcement of the EU flagship data protection law. Two years after the General Data Protection Regulation (GDPR) went into effect, official data show that Data Protection Authorities (DPAs), crippled by a lack of resources, tight…

22nd May 2020 The Irish Data Protection Commission (DPC) has today submitted a draft decision to other concerned Supervisory Authorities, in accordance with Article 60 of the GDPR, in relation to an inquiry it has completed into Twitter International Company, a data controller based in Ireland. This own-volition inquiry was…

The European Data Protection Board, the EU’s umbrella organisation overseeing the application of EU data protection rules across the bloc, has voiced its concern over the suspension of EU data protection rights in Hungary. In early May, the Hungarian government put forward plans to suspend obligations to a number of…

As Ireland’s data protection authority was closing in late last year on its first major penalty against Facebook over alleged privacy abuses, the agency — a key global enforcer of data protection rules — reshuffled its top team, replacing a senior official in charge of its most high-profile cases. Dale…

Facebook has been ordered to pay a $9-million penalty after making “false or misleading claims about the privacy of Canadians’ personal information,” according to a news release from the Competition Bureau. The decision follows an investigation into the social media company’s privacy practices between 2012 and 2018. The Competition Bureau…

14th May 2020 Data controllers in both the private and public sector issue and receive large volumes of email correspondence on a daily basis. While email is a valued and effective communication tool, it can be the source of a number of common data protection breaches. Typically, most data breaches…

Enforcement Highlights CRTC issues $115,000 in penalties to stop the spread of malicious software Recently, CRTC staff took enforcement action against Orcus Technologies and its partners John Paul Revezs and Vincent Leo Griebel, who developed, marketed and sold the Orcus RAT. Following this investigation, the Chief Compliance & Enforcement Officer…

On April 28, 2020, the Litigation Chamber of the Belgian Data Protection Authority (the “Belgian DPA”) imposed a €50,000 fine on a company for non-compliance with the requirements under the General Data Protection Regulation (“GDPR”) related to the appointment of a data protection officer (“DPO”). Following the notification of a…

The Brazilian government has fined Facebook following an investigation around the misuse of personal data belonging to nearly half a million users in political campaigns. The 6,6 million reais ($1.6 million) fine was issued by the country’s Ministry of Justice and Public Security and relates to the data misuse scandal…

For those who may have missed the public letter to Minister Bains from our Federal Privacy Commissioner, regarding Canada’s lack of action in the area of privacy laws. Daniel Therrien is not mincing words.   November 23, 2018 The Hon. Navdeep Singh Bains, P.C. Minister of Innovation, Science and Economic…