EU

After clarification from Luxembourg, the Belgian Court of Appeal will now rule on the case. IAB Europe’s online advertising model uses personal data and is therefore subject to the General Data Protection Regulation (GDPR), the EU’s highest court in Luxembourg clarified today (7 March). The European Court of Justice (ECJ)…

In a Report issued two weeks ago,[1] the European Commission advised that its 2001 decision granting the federal privacy law, PIPEDA,[2] “adequacy” status under relevant EU privacy law is continued and confirmed.  The 2001 decision determined that PIPEDA provided an adequate level of protection for personal data transferred from the EU to Canada, as…

The European Court of Justice issued a landmark ruling on Tuesday (5 December) that is set to facilitate the imposition of fines for infringements of the General Data Protection Regulation (GDPR). The European Court of Justice (ECJ) put out a verdict that will make it easier for data protection authorities…

Third attempt of the European Commission to get a stable agreement on EU-US data transfers will be likely back at the Court of Justice (CJEU) in a matter of months. The allegedly “new” Trans-Atlantic Data Privacy Framework is largely a copy of the failed “Privacy Shield”. Despite the European Commission’s…

Link to the original Press Release from the European Commission Today, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework. The decision concludes that the United States ensures an adequate level of protection – comparable to that of the European Union – for personal data transferred from…

On 13 December 2022, the European Commission (“EC”) published its draft adequacy decision for the EU-U.S. Data Privacy Framework (“DPF”) that is intended to foster trans-Atlantic data flows and address the concerns raised by the Court of Justice of the European Union (“CJEU”) in its Schrems II judgment. The draft adequacy decision…

In November, Google reached a $392 million settlement agreement with 40 US states regarding location tracking. Later that same month, Ireland’s Data Protection Commission fined Meta $275 million for breaking the European Union’s General Data Protection Regulation (GDPR). These hefty fines are the latest in a series of regulatory actions against tech giants,…

Facebook parent company Meta has been fined €265 million by the Irish Data Protection Commission (DPC) following a data breach which saw the personal details of hundreds of millions of Facebook users published online. In April 2021, the DPC launched an investigation after data including names, phone numbers and email…

The central German state of Hesse’s local Data Protection Authority (DPA) has banned the use of Microsoft 365 in its schools, citing concerns over privacy violations. According to the authority, the program’s settings gather data from within the users’ programs. This clearly violates the EU’s General Data Protection Regulation (GDPR)…

You would have had to be living under a rock to have missed all the political turmoil in the U.K. over the past few weeks concerning the U.K. government’s “mini-budget.” In essence, even the staunchest government allies now accept it was a mistake to make changes to the U.K. tax…