On November 26, 2020, the French Data Protection Authority announced that it imposed a fine of €2.25 million on Carrefour France and a fine of €800,000 on Carrefour Banque for various violations of the EU General Data Protection Regulation and Article 82 of the French Data Protection Act governing the use of cookies.
Continue Reading CNIL Fines Two Companies of the Carrefour Group €3.05 Million for GDPR and Cookie Violations
European Union
Dutch Court Overturns DPA Fine on Legitimate Interest Legal Basis
Posted on
On November 23, 2020, the Dutch District Court of Midden-Nederland determined that the concept of a legitimate interest for processing is broader than simply being an interest derived from law, overturning a fine by the Dutch data protection authority.…
Continue Reading Dutch Court Overturns DPA Fine on Legitimate Interest Legal Basis
EU Parliament Approves Collective Redress Directive
Posted on
On November 24, 2020, the European Parliament endorsed the new directive on representative actions for the protection of the collective interests of consumers. This blog entry provides highlights on the directive.…
Continue Reading EU Parliament Approves Collective Redress Directive
European Commission Releases Draft Standard Contractual Clauses for Article 28 Data Processing Agreements
Posted on
Posted in European Union, International
On November 12, 2020, somewhat in the shadow of the new standard contractual clauses for data transfers to recipients outside the European Economic Area, the European Commission also adopted draft standard contractual clauses to be used between controllers and processors in the EEA. …
Continue Reading European Commission Releases Draft Standard Contractual Clauses for Article 28 Data Processing Agreements
European Commission Publishes Draft of New Standard Contractual Clauses
Posted on
Posted in European Union, International
On November 12, 2020, the European Commission published a draft implementing decision on standard contractual clauses for the transfer of personal data to third countries pursuant to the GDPR, along with its draft set of new standard contractual clauses. This blog entry provides key takeaways on the draft decision.…
Continue Reading European Commission Publishes Draft of New Standard Contractual Clauses
EDPB Adopts Recommendations on Supplementary Measures for Data Transfers Following Schrems II Decision
Posted on
Posted in European Union, International
On November 11, 2020, the European Data Protection Board published its long-awaited recommendations following the Schrems II judgement regarding supplementary measures that may be implemented to ensure the adequate protection of personal data when transferring the data to third countries.…
Continue Reading EDPB Adopts Recommendations on Supplementary Measures for Data Transfers Following Schrems II Decision
NOYB Approved to File Class Actions and Claim Damages in Front of Belgian Courts
Posted on
Posted in European Union, International
On October 29, 2020, the non-governmental organization co-founded by privacy activist Max Schrems, None of Your Business, announced it can now file representative actions and claim damages on behalf of consumers for violations of various laws regarding consumer protection (including data protection law) in Belgium.…
Continue Reading NOYB Approved to File Class Actions and Claim Damages in Front of Belgian Courts
ICO Issues Enforcement Notice Against Experian
Posted on
On October 27, 2020, the UK Information Commissioner’s Office published its enforcement notice against credit reference agency Experian Limited under Section 149 of the Data Protection Act 2018.…
Continue Reading ICO Issues Enforcement Notice Against Experian
ICO Releases Updated Right of Access Guidance
Posted on
Posted in European Union, International
On October 21, 2020, the UK Information Commissioner’s Office released its updated guidance on the data subject right of access under Article 15 of the EU General Data Protection Regulation.…
Continue Reading ICO Releases Updated Right of Access Guidance
Webinar on the Latest Developments on Cookie Guidance Featuring the UK ICO and CNIL
Posted on
On November 5, 2020, Hunton Andrews Kurth will host a panel discussion with representatives from the UK Information Commissioner’s Office (“ICO”) and the French Data Protection Authority (“CNIL”) to explore the latest developments on cookie guidance and compare their respective approaches. In our webinar titled “From a Regulator’s Perspective: Latest Developments on Cookie Guidance from the ICO and CNIL,” our speakers will discuss practical cookie law issues, including: …
Continue Reading Webinar on the Latest Developments on Cookie Guidance Featuring the UK ICO and CNIL