On September 4, 2019, the High Court of England and Wales dismissed a challenge against South Wales Police’s use of Automated Facial Recognition technology, determining that the police’s use of AFR had been necessary and proportionate to achieve their statutory obligations.
Continue Reading
Data Protection Act
New French Data Protection Act and Implementing Decree Take Force
Posted on
Posted in European Union, International
On June 1, 2019, New Decree No. 2019-536 took force, enabling the French Data Protection Act, as amended by an Ordinance of December 12, 2018, likewise to enter into force. This blog entry provides an overview of the developments. …
Continue Reading
Age Appropriate Design: ICO Issues Draft Code of Practice for Online Services Used by Children
Posted on
On April 15, 2019, the UK Information Commissioner’s Office issued for public consultation a draft code of practice that, once in effect, will regulate the provision of online services likely to be accessed by children in the UK. This blog entry provides an overview of the draft code. …
Continue Reading
Dutch DPA Issues Guidelines on Privacy Policies Following Investigation
Posted on
On April 17, 2019, the Dutch Data Protection Authority issued six recommendations for companies, to be taken into account when drafting privacy policies. This blog entry provides an overview of the recommendations as well as the investigation which preceded their issuance. …
Continue Reading
UK Supreme Court Gives Morrisons Permission to Appeal Data Breach Class Action
Posted on
The UK Supreme Court has granted VM Morrison Supermarkets PLC permission to appeal an October 2018 UK Court of Appeal ruling that Morrisons was vicariously liable for a data breach caused by a former employee. This blog entry provides an overview of the case.…
Continue Reading
ICO Issues GBP 400,000 Fine for Illegal Collection and Sharing of Personal Data
Posted on
On April 9, 2019, the UK Information Commissioner’s Office levied one of its most significant fines under the Data Protection Act 1998 against Bounty (UK) Limited. …
Continue Reading
The CNIL Serves Formal Notice to WhatsApp Regarding Sharing Data with Facebook
Posted on
On December 18, 2017, the French data protection authority publicly announced that it served a formal notice to WhatsApp regarding the sharing of WhatsApp users’ data with Facebook Inc. This decision, dated November 27, 2017, follows the investigations led by the CNIL regarding Facebook’s 2014 acquisition of WhatsApp.…
Continue Reading
UK Government Introduces Draft Data Protection Bill to Parliament
Posted on
Posted in European Union, International
On September 14, 2017, the UK Government introduced a new Data Protection Bill to Parliament, which is intended to replace the UK’s existing Data Protection Act 1998 and enshrine the GDPR into UK law once the UK has left the European Union.…
Continue Reading
UK ICO Revises Subject Access Guidance Following Court Rulings
Posted on
On June 20, 2017, the UK Information Commissioner’s Office published an updated version of its Code of Practice on Subject Access Requests. The updates are primarily in response to three Court of Appeal decisions from earlier this year regarding data controllers’ obligations to respond to subject access requests. The revisions more closely align the ICO’s position with the court’s judgments.…
Continue Reading
DPA of Argentina Issues Draft Data Protection Bill
Posted on
Pablo Palazzi, from Buenos Aires law firm Allende & Brea, reports that earlier this month, the Argentine Data Protection Agency posted the first draft of a new data protection bill on its website. The Draft Bill is heavily based on the EU GDPR and maintains the structure of Argentina’s current data protection bill.…
Continue Reading