On June 4, 2021, the European Commission published the final version of the implementing decision on standard contractual clauses for transfers of personal data to third countries under the EU General Data Protection Regulation, as well as the final version of the new standard contractual clauses.
Continue Reading European Commission Publishes Final Version of Updated Standard Contractual Clauses
Personal Data
Google to Prevent App Developers from Using Advertising ID for Any Purpose Following User Opt-Out
Posted on
Posted in Behavioral Advertising, Online Privacy
On June 3, 2021, Google informed app developers that beginning in late 2021, when Android 12 OS users opt out of personalized ads, the advertising ID provided by Google Play services will not be made available to app developers for any purpose.…
Continue Reading Google to Prevent App Developers from Using Advertising ID for Any Purpose Following User Opt-Out
EDPS Opens Investigations Following Schrems II Judgment
Posted on
Posted in European Union, Information Security
On May 27, 2021, the European Data Protection Supervisor announced that it has opened two investigations regarding (1) the use of cloud services by European Union institutions, bodies and agencies; and (2) the use of Microsoft Office 365 by the European Commission.…
Continue Reading EDPS Opens Investigations Following Schrems II Judgment
UK Court of Appeal Signals It Will Closely Scrutinize UK DPA Exemptions
Posted on
Posted in European Union, Information Security
On May 26, 2021, the Court of Appeal handed down its judgment in the case of R (Open Rights Group and the3million) v Secretary of State for the Home Department and Others [2021] EWCA Civ 800, finding that the UK 2018 Data Protection Act’s “immigration exemption” is unlawful.…
Continue Reading UK Court of Appeal Signals It Will Closely Scrutinize UK DPA Exemptions
Dutch DPA Fines Company 525,000 EUR for Failure to Designate EU Representative
Posted on
Posted in Enforcement, European Union
The Dutch Data Protection Authority has imposed a 525,000 EUR fine on Locatefamily.com for failure to comply with the obligation imposed under Article 27 of the EU General Data Protection Regulation to appoint a representative in the EU.…
Continue Reading Dutch DPA Fines Company 525,000 EUR for Failure to Designate EU Representative
Ecuador Approves Data Protection Law
Posted on
The Ecuadorian National Assembly has unanimously approved the Organic Law on Data Protection, which President Moreno is expected to sign.…
Continue Reading Ecuador Approves Data Protection Law
MEPs Urge European Commission to Amend Draft UK Adequacy Decision
Posted on
Posted in European Union, Information Security
On May 11, 2021, the European Parliament issued a press release requesting that the European Commission amend its draft decisions on UK adequacy to more closely align with EU court rulings and the opinion of the European Data Protection Board. The request came after the Parliament’s Civil Liberties Committee passed a resolution evaluating the Commission’s approach regarding the adequacy of the UK’s data protection regime.…
Continue Reading MEPs Urge European Commission to Amend Draft UK Adequacy Decision
New York City Council Passes Tenant Data Privacy Act
Posted on
Posted in Information Security, U.S. State Law
On April 29, 2021, the New York City Council passed the Tenant Data Privacy Act, which would regulate the collection, use, safeguarding and retention of tenant data by owners of “smart access” buildings. The TDPA has now been sent to the New York City Mayor’s desk for signature.…
Continue Reading New York City Council Passes Tenant Data Privacy Act
Norwegian DPA Issues 2.5M EUR Preliminary Fine for U.S. Company Utilizing Web-Tracking IDs
Posted on
On May 2, 2021, the Norwegian data protection authority, Datatilsynet, notified a U.S. company of its intention to issue a fine of 25 million Norwegian Krone (approximately 2.5 million Euros). The preliminary fine was issued for failure to comply with the General Data Protection Regulation’s accountability, lawfulness and transparency requirements, primarily due to the company’s tracking of website visitors.…
Continue Reading Norwegian DPA Issues 2.5M EUR Preliminary Fine for U.S. Company Utilizing Web-Tracking IDs
Google Play to Require Android App Data Privacy and Security Disclosures
Posted on
Posted in Information Security
Google has announced that beginning in the second quarter of 2022, developers submitting new apps and app updates to the Google Play store will be required to disclose certain information regarding their apps’ data collection, use, sharing and security practices, as well as provide a privacy policy for their apps.…
Continue Reading Google Play to Require Android App Data Privacy and Security Disclosures