On September 2, 2021, Ireland’s Data Protection Commission announced a fine of €225 million ($266 million) against WhatsApp Ireland Ltd for failure to meet the transparency requirements of Articles 12-14 of the EU General Data Protection Regulation.
Continue Reading Irish Commissioner Fines WhatsApp €225 Million For GDPR Violations
European Union
UK DCMS Identifies Priority Jurisdictions for UK Adequacy Recognition and Proposes New UK Information Commissioner
Posted on
On August 26, 2021, the UK Department of Culture, Media and Sport made news by publishing a document indicating its intent to begin making adequacy decisions for UK data transfers to foreign jurisdictions and by announcing its preferred candidate for the position of new UK Information Commissioner.…
Continue Reading UK DCMS Identifies Priority Jurisdictions for UK Adequacy Recognition and Proposes New UK Information Commissioner
UK First-Tier Tribunal Cuts ICO’s Doorstep Dispensaree Fine by Two Thirds
Posted on
On August 9, 2021, the UK First-Tier Tribunal (General Regulatory Chamber) (“FTT”) reduced a fine imposed by the UK Information Commissioner’s Office (“ICO”) against Doorstep Dispensaree Ltd (“DDL”) from £275,000 to £92,000, a reduction of approximately two thirds. DDL, which supplies medicines to customers and care homes, was fined in December 2019 for failure to comply with the EU General Data Protection Regulation (“GDPR”). The ICO also issued an Enforcement Notice, requiring DDL to take certain actions to bring its processing into compliance.
…
Continue Reading UK First-Tier Tribunal Cuts ICO’s Doorstep Dispensaree Fine by Two Thirds
Italian Garante Publishes Updated Guidelines on Cookies and Other Tracking Technologies
Posted on
Laura Liguori of Portolano Cavallo provides highlights on the Italian Data Protection Authority’s new version of its guidelines for cookies and other tracking mechanisms.…
Continue Reading Italian Garante Publishes Updated Guidelines on Cookies and Other Tracking Technologies
ICO Consultation on International Data Transfer Agreement to Replace SCCs
Posted on
On August 11, 2021, the UK Information Commissioner’s Office launched a consultation on its draft international data transfer agreement and guidance for organizations on international transfers. Once finalized, the agreement will replace the existing EU Standard Contractual Clauses in the UK.…
Continue Reading ICO Consultation on International Data Transfer Agreement to Replace SCCs
UK High Court Dismisses Claims Following DSG Data Breach
Posted on
On July 30, 2021, the UK High Court handed down its judgment in the case of Warren v DSG Retail Ltd [2021] EWHC 2168 (QB), determining that the claimant could not seek damages on the basis of misuse of personal information, breach of confidence or common law negligence following a data breach.…
Continue Reading UK High Court Dismisses Claims Following DSG Data Breach
Italian Garante Fines Deliveroo 2.5M Euros for Unlawful Processing of Personal Data
Posted on
On August 2, 2021, the Italian Data Protection Authority announced that it had levied a €2,500,000 fine on Deliveroo Italy s.r.l. for the unlawful processing of personal data of approximately 8,000 Deliveroo riders and various infringements of the GDPR.…
Continue Reading Italian Garante Fines Deliveroo 2.5M Euros for Unlawful Processing of Personal Data
CIPL Responds to the EU Commission’s Consultation on the Draft AI Act
Posted on
On July 29, 2021, the Centre for Information Policy Leadership at Hunton Andrews Kurth submitted its response to the European Commission’s Consultation on the Draft Artificial Intelligence Act.…
Continue Reading CIPL Responds to the EU Commission’s Consultation on the Draft AI Act
Luxembourg DPA Fines Amazon 746 Million Euros for GDPR Violations
Posted on
On July 16, 2021, the Luxembourg data protection authority (Commission nationale pour la protection des donées, “CNPD”) imposed a record-breaking €746 million fine on Amazon Europe Core S.à.r.l. for alleged violations of the EU General Data Protection Regulation (“GDPR”). The CNPD also ordered Amazon to revise certain of its practices.…
Continue Reading Luxembourg DPA Fines Amazon 746 Million Euros for GDPR Violations
Spanish DPA Fines Supermarket Chain 2,520,000 EUR for Unlawful Use of Facial Recognition System
Posted on
Posted in Enforcement, European Union
On July 27, 2021, the Spanish Data Protection Authority (the “AEPD”) imposed a €2,520,000 fine on Spanish supermarket chain Mercadona, S.A. for unlawful use of a facial recognition system.
…
Continue Reading Spanish DPA Fines Supermarket Chain 2,520,000 EUR for Unlawful Use of Facial Recognition System