On November 25, 2022, Ireland’s Data Protection Commission released a decision fining Meta Platforms, Inc. €265 million for a 2019 data leak involving the personal information of approximately 533 million Facebook users worldwide.
Continue Reading Irish Data Protection Commission Fines Meta €265 Million for Privacy Violations
EU Member States
Public Access to Information on Company Beneficial Ownership is a Violation of Privacy According to the CJEU
On November 22, 2022, the Court of Justice of the European Union determined in a preliminary ruling that the general public’s access to information on beneficial ownership constitutes a serious interference with the fundamental rights to respect for private life and to the protection of personal data, enshrined in Articles 7 and 8 of the Charter of Fundamental Human Rights. …
Continue Reading Public Access to Information on Company Beneficial Ownership is a Violation of Privacy According to the CJEU
Italian Supreme Court Grants Global Delisting Order Under National Law
On November 15, 2022, the Italian Supreme Court held that an Italian court or competent data protection authority has jurisdiction to issue a global delisting order. …
Continue Reading Italian Supreme Court Grants Global Delisting Order Under National Law
EU Digital Markets Act Enters into Force
On November 1, 2022, the Digital Markets Act entered into force. This blog entry provides a summary of the compliance requirements of the Act.
Continue Reading EU Digital Markets Act Enters into Force
White House Office of Science and Technology Policy Releases “Blueprint for an AI Bill of Rights”
On October 4, 2022, the White House Office of Science and Technology Policy unveiled its Blueprint for an AI Bill of Rights, a non-binding set of guidelines for the design, development, and deployment of artificial intelligence systems. …
Continue Reading White House Office of Science and Technology Policy Releases “Blueprint for an AI Bill of Rights”
U.S. Department of Justice Announces U.S. – UK CLOUD Act Agreement
On October 3, 2022, the U.S. Department of Justice announced that the agreement between the U.S. Government and the UK Government on Access to Electronic Data for the Purpose of Countering Serious Crime entered force, effect the same day. …
Continue Reading U.S. Department of Justice Announces U.S. – UK CLOUD Act Agreement
European Commission Publishes Proposal for Cyber Resilience Act
On September 15, 2022, the European Commission presented its proposal for a Regulation on horizontal cybersecurity requirements for products with digital elements. …
Continue Reading European Commission Publishes Proposal for Cyber Resilience Act
Danish DPA Declares Use of Google Analytics Unlawful Without Supplementary Measures
On September 21, 2022, Denmark’s data protection authority Datatilsynet announced its guidance that Google Analytics, Google’s audience measurement tool, is not compliant with the EU General Data Protection Regulation. …
Continue Reading Danish DPA Declares Use of Google Analytics Unlawful Without Supplementary Measures
Irish Data Protection Commissioner Fines Instagram for Children’s Privacy Violations
On September 5, 2022, the Irish Data Protection Commissioner imposed a €405,000,000 fine on Instagram for violations of the EU General Data Protection Regulation’s rules on the processing of children’s personal data. …
Continue Reading Irish Data Protection Commissioner Fines Instagram for Children’s Privacy Violations
CNIL Proposes 60 Million Euros Fine Against French AdTech Company For Non-Compliance with GDPR
On August 5, 2022, French AdTech company Criteo announced that it had received a report from the French Data Protection Authority on August 3, 2022, claiming various infringements of the EU General Data Protection Regulation and proposing to impose 60 million euros fine against Criteo. …
Continue Reading CNIL Proposes 60 Million Euros Fine Against French AdTech Company For Non-Compliance with GDPR