On November 26, 2020, the French Data Protection Authority announced that it imposed a fine of €2.25 million on Carrefour France and a fine of €800,000 on Carrefour Banque for various violations of the EU General Data Protection Regulation and Article 82 of the French Data Protection Act governing the use of cookies.
Continue Reading CNIL Fines Two Companies of the Carrefour Group €3.05 Million for GDPR and Cookie Violations
Data Controller
European Commission Releases Draft Standard Contractual Clauses for Article 28 Data Processing Agreements
Posted on
Posted in European Union, International
On November 12, 2020, somewhat in the shadow of the new standard contractual clauses for data transfers to recipients outside the European Economic Area, the European Commission also adopted draft standard contractual clauses to be used between controllers and processors in the EEA. …
Continue Reading European Commission Releases Draft Standard Contractual Clauses for Article 28 Data Processing Agreements
European Commission Publishes Draft of New Standard Contractual Clauses
Posted on
Posted in European Union, International
On November 12, 2020, the European Commission published a draft implementing decision on standard contractual clauses for the transfer of personal data to third countries pursuant to the GDPR, along with its draft set of new standard contractual clauses. This blog entry provides key takeaways on the draft decision.…
Continue Reading European Commission Publishes Draft of New Standard Contractual Clauses
EDPB Adopts Recommendations on Supplementary Measures for Data Transfers Following Schrems II Decision
Posted on
Posted in European Union, International
On November 11, 2020, the European Data Protection Board published its long-awaited recommendations following the Schrems II judgement regarding supplementary measures that may be implemented to ensure the adequate protection of personal data when transferring the data to third countries.…
Continue Reading EDPB Adopts Recommendations on Supplementary Measures for Data Transfers Following Schrems II Decision
EDPB Published Guidelines on the Targeting of Social Media Users
Posted on
The European Data Protection Board recently published Guidelines on the Targeting of Social Media Users, which aim to provide practical guidance on the role and responsibilities of social media providers and those using targeting services.…
Continue Reading EDPB Published Guidelines on the Targeting of Social Media Users
EDPB Publishes Guidelines on the Concepts of Controller and Processor in the GDPR
Posted on
Posted in European Union, International
On September 7, 2020, the European Data Protection Board released draft Guidelines 07/2020 on the concepts of controller and processor in the EU General Data Protection Regulation. We provide a summary of the key takeaways from the guidelines. …
Continue Reading EDPB Publishes Guidelines on the Concepts of Controller and Processor in the GDPR
German DPA Issues Guidance on Data Transfers Following Schrems II
Posted on
Posted in European Union, International
On August 24, 2020, the Data Protection Authority of the German federal state of Baden-Württemberg issued guidance on international data transfers following the judgment of the Court of Justice of the European Union in the Schrems II case.…
Continue Reading German DPA Issues Guidance on Data Transfers Following Schrems II
Belgian DPA Fines Belgian Telecommunications Provider for Several Data Protection Infringements
Posted on
Posted in European Union, International
On July 30, 2020, the Litigation Chamber of the Belgian Data Protection Authority (the “Belgian DPA”) imposed a €20,000 fine on Belgian telecommunications provider Proximus N.V. (“Proximus”) for several data protection infringements related to Proximus’ public directory. In particular, the claimant requested that Proximus remove his contact details from the public directory and inform other publishers of public directories not to publish his personal data. Despite informing the claimant that it was going to proceed accordingly, Proximus still published his personal data in its public directory and shared it with other publishers of public directories.
…
Continue Reading Belgian DPA Fines Belgian Telecommunications Provider for Several Data Protection Infringements
Dutch DPA Fines Dutch Credit Registration Bureau 830,000 Euros for Non-Compliance with Data Subject Rights
Posted on
Posted in Enforcement, International
On July 6, 2020, the Dutch Data Protection Authority imposed a 830,000 euro fine on the Dutch Credit Registration Bureau for non-compliance with Articles 12 (2) and 12 (5) of the EU General Data Protection Regulation between May 2018 and March 2019. …
Continue Reading Dutch DPA Fines Dutch Credit Registration Bureau 830,000 Euros for Non-Compliance with Data Subject Rights
CIPL Submits White Paper on Data Subject Rights
Posted on
On July 8, 2020, the Centre for Information Policy Leadership at Hunton Andrews Kurth submitted its White Paper as input for the European Data Protection Board’s future guidelines on data subject rights. …
Continue Reading CIPL Submits White Paper on Data Subject Rights