Source: https://www.privacylaws.com/Publications/enews/International-E-news/Dates/
Timestamp: 2018-09-26 09:23:53
Document Index: 379634357

Matched Legal Cases: ['Art. 29', 'Art. 29', 'Art 29', 'Art 29', 'Art. 29', 'Art. 29', 'Art. 29', 'CJEU ']

Home / Publications / Free News Service / International e-news / Dates
PL&B International E-news, Issue 93
24/11/2009 by:
EU and US to sign secret SWIFT agreement before 1 December 1. EU and US to sign secret SWIFT agreement before 1 December The EU and the US are racing to sign an agreement for the US to see EU banking details before the Lisbon Treaty gives the...
PL&B International E-news, Issue 92
06/11/2009 by:
eBay’s BCR application approved 1. eBay’s BCR application approved 14 EU Data Protection Authorities have approved eBay’s Binding Corporate Rules application. The BCR’s, which apply both to customer and employee data, were formally approved by the...
PL&B International E-news, Issue 91
30/10/2009 by:
Deutsche Bahn fined 1.1 million Euros for employee monitorin 1. Deutsche Bahn fined 1.1 million Euros for employee monitoring On 19 October the Berlin data protection commissioner, Otto Dix, imposed a fine of 1.1 million Euros on Deutsche Bahn, th...
22/10/2009 by:
Financial police help Italy’s DPA to use its strong enforcement powers EU lobbyists must be named South African data protection bill introduced Hong Kong consults on a review of the Personal Data (Privacy) Ordinance New Zealand publishes guidance ...
24/09/2009 by:
UK ICO approves Hyatt Hotels’ Binding Corporate Rules application EU Data Protection Supervisor’s annual report addresses privacy issues relevant to all sectors 1. UK ICO approves Hyatt Hotels’ Binding Corporate Rules application The UK Informatio...
15/09/2009 by:
FTC takes enforcement action on Safe Harbor breach Germany publishes draft Employee Data Protection Act France proposes data breach notification Netherlands, Spain now have tighter TPS rules Denmark issues guidance on whistleblowing lines Swiss...
PL&B International E-news, Issue 87
Germany amends data protection law French “three strikes” law unconstitutional Swedish privacy party elects Member of European Parliament 1. Germany amends data protection law On 10th July, the second chamber of Germany’s legislature passed...
29/05/2009 by:
India: new law on liability for personal data breaches Three more EU Member States Join BCR Mutual Recognition Club EU acts against Sweden on data retention 1. India: new law on liability for personal data breaches In February India adopted a new...
PL&B International E-news, Issue 84
11/05/2009 by:
European Parliament adopts legislative resolution on data breach amendments to the European Union’s E-Privacy Directive for all sectors and all types of data 1. European Parliament adopts legislative resolution on data breach amendments to the...
UK’s Information Commissioner approves Atmel’s and Accenture’s Binding Corporate Rules in successive weeks EU starts legal action against UK over Phorm EU close to data breach notification law France: close to adopting law to cut off Internet for...
29/01/2009 by:
European Data Protection Supervisor adopts Opinion on ePrivacy Directive review, and security breach notification US Heartland Payment Systems admits illegal access to its customers’ credit card information Sony BMG Fined $1 million for Violating ...
05/10/2007 by:
SWIFT announces new operating centre in Switzerland to avoid DP problems 1. SWIFT announces new operating centre in Switzerland to avoid DP problems SWIFT, the international financial communications body with headquarters in Belgium, has announced...
PL&B International E-news, Issue 60
20/09/2007 by:
Luxembourg lightens data protection law 1. Luxembourg lightens data protection law On 1 September, Luxembourg modified its data protection law, removing some obligations to notify data processing to the CNPD (the national data protection authority...
PL&B International E-news, Issue 59
12/09/2007 by:
New Zealand Privacy Commissioner Launches Draft Security Breach Guidelines 1. New Zealand Privacy Commissioner Launches Draft Security Breach Guidelines New Zealand Privacy Commissioner Marie Shroff has published a draft guide to help the public a...
PL&B International E-news, Issue 58
20/07/2007 by:
SWIFT joins US Safe Harbor today 1. SWIFT joins US Safe Harbor today SWIFT announced today that to respond to EU criticisms on its privacy policies, it has joined the US Safe Harbor and plans to move its mirror operating site from the US to Europe...
PL&B International E-news, Issue 54
10/05/2007 by:
France’s CNIL Fines Tyco Healthcare for giving false information and non-cooperation European Court of Human Rights gives judgment on an employer’s monitoring of an employee’s personal communications Italy’s DPA issues legally binding rules on...
PL&B International E-news, Issue 53
12/02/2007 by:
Dubai Announces New Data Protection Law 1. Dubai Announces New Data Protection Law The Dubai International Financial Centre, in the United Arab Emirates, has a new data protection law, which entered into force on 8 January 2007. The law, designed...
09/02/2007 by:
EU Data Protection Supervisor Rules on SWIFT Secret Data Protection Breaches 1. EU Data Protection Supervisor Rules on SWIFT Secret Data Protection Breaches Peter Hustinx, the European Data Protection Supervisor, adopted an opinion on 1 February...
PL&B International E-news, Issue 51
21/12/2006 by:
Luxembourg users of SWIFT assure DPA of compliance with EU DP law 1. Luxembourg users of SWIFT assure DPA of compliance with EU DP law As a follow up to the previous international e-news (November 27th) and report in the December edition of Privac...
PL&B International E-news, Issue 50
27/11/2006 by:
EU stops banks sending data to USA 1. EU stops banks sending data to USA The EU's Art. 29 Data Protection Working Party (consisting of the 25 member states's Data Protection commissioners) has told European Banks and SWIFT, which handles...
PL&B International E-news, Issue 49
17/11/2006 by:
Belgian Data Protection Authority finds SWIFT in Breach of DP Law World Data Protection Commissioners urge action Inter-American Court Rules on Right to Know in Convention 1. Belgian Data Protection Authority Finds SWIFT in Breach of DP Law The...
13/10/2006 by:
Italy’s Data Protection Authority stops TV show on politicians' drug use $1million fine for US child privacy violation France’s CNIL uses its new fining power for the first time (update) US and EU reach interim PNR pact 1. Italy’s Data Protection...
PL&B International Enews Issue 47
05/10/2006 by:
1. France’s CNIL uses its new fining power for the first time 2. Canadian Supreme Court Calls for Stronger Privacy Commissioner Powers 3. Russia’s new DP law to enter into force in February 2006 1. France’s CNIL uses its new fining power for the...
PL&B International E-news, Issue 46
08/08/2006 by:
Russia adopts European-style data protection law 1. Russia adopts European-style data protection law Russia has joined the European data protection club and adopted a ‘need to know’ freedom of information act. On the last two days of its session, ...
PL&B International E-news, Issue 45
24/07/2006 by:
SWIFT Interbank financial network responds to US regulator’s secret demand for data EU Art. 29 DP Working Party provides clarification to USA’s SEC on whistleblowing UK Information Commissioner issues new guidance on transferring personal data out...
01/06/2006 by:
European Court of Justice declares the EU/US air passenger data agreement illegal 1. European Court of Justice declares the EU/US air passenger data agreement illegal The European Court of Justice ruled yesterday that the EU/US agreement approving...
PL&B International E-news, Issue 43
03/05/2006 by:
Ireland’s Minister for Justice, Equality and Law Reform drafts new Privacy Bill First Spam decision in Latin America Agencies are not protecting citizens’ security rights, says the US Government Accountability Office European Data Protection...
01/03/2006 by:
Art 29 DP Working Party adopts Opinion on whistleblowing schemes PL&B's Washington Director, Jane Horvath, appointed Chief Privacy Officer at US Department of Justice AOL sues gangs in Virginia, USA, over identity thefts, using new law 1. Art 29 D...
PL&B International E-news, Issue 41
20/02/2006 by:
Honeywell investigates major security breach Hackers attack Greek government mobile phones ChoicePoint receives largest civil penalty in FTC history Nicole Kidman’s paparazzo avoids giving DNA sample Review of Australian Privacy Act 1998 US Bill...
PL&B International E-news, Issue 39
28/11/2005 by:
The European Court of Justice’s Advocate General calls for annulment of European Council and Commission decisions regarding airline passenger data Medical records must not be used as film props France’s CNIL publishes new regulations on...
PL&B International E-news, Issue 38
Australian Privacy Commissioner calls for review of Privacy Act Argentine court permits webcam Germany: Instant dismissal for private use of the internet during working hours 1. Australian Privacy Commissioner calls for review of Privacy Act...
PL&B International E-news, Issue 37
France’s CNIL refuses to authorize whistle-blowing to US HQs Sweden responds to the changing interface of DP and IT Dutch libraries weigh RFID benefits against privacy threats 40 million credit cards vulnerable to fraud 1. France's CNIL refuses to...
PL&B International E-news, Issue 36
Japan’s data protection comes into force EU approves guidelines for anti-fraud databases Europe urged to promote data protection officers Spain teams up with US in fight against spam US agencies publish security response guidelines 1. Japan’s data...
17/02/2005 by:
European regulators launch privacy consultations European Commission mulls internal privacy restructuring Hungary’s privacy chief speaks out against data protection law Europe launches anti-spam initiative Former Sonera executive face illegal...
PL&B International E-news, Issue 34
14/01/2005 by:
EU to toughen up privacy controls Industry data transfer contracts get official approval Dutch regulator levies record spam fines 1. EU to toughen up privacy controls Data Protection Authorities across Europe have promised to get tough on...
PL&B International E-news, Issue 30
03/09/2004 by:
Indian outsourcing firms to undergo security checks California legislature approves outsourcing bill More US consumers asserting privacy rights Australian Privacy Commissioner investigates inaccurate credit records 1. Indian outsourcing firms to...
US FTC fines Path $800,000 and launches mobile app guidance
05/02/2013 by:
The US Federal Trade Commission (FTC) has imposed an $800,000 fine on Path, a social networking service. Path was allegedly collecting children's personal information without their parents’ consent, which is a breach of the Children’s Online Priva...
EU cyber security Directive would create a stronger breach notification regime
10/02/2013 by:
The EU Commission issued on 7 February a draft Directive for cyber security. The draft, entitled Directive on Network and Information Security, would oblige market operators and public administrations to report incidents that have a significant...
Netherlands' DPA issues new data security guidelines
22/02/2013 by:
The Dutch Data Protection Authority (DPA) published, on 19 February, new guidelines on the security of data processing. The new guidelines contain instructions on how to implement the security principles in practice, reports law firm Bird & Bird....
Ireland to audit major social networking firms
27/02/2013 by:
Ireland's Data Protection Commissioner, Billy Hawkes, has announced that he will audit major social media companies. Ireland has a significant responsibility for the rest of Europe, as many of these companies have located their European headquarte...
EU DP Regulations likely to take a more risk-based approach
01/03/2013 by:
The EU draft DP Regulations should take a more risk-based approach, the EU Data Protection Authorities (DPAs) say. The EU Art. 29 DP Working Party considers that some of the provisions in the proposed Regulation may pose a burden on some...
Evernote, a web-based app to organise and store business and personal data, revealed on 5 February that hackers had gained access to the personal information of more than 50 million of its users. The information lost included encrypted password...
EU Commissioner Reding: The new EU DP framework is not just about consent
14/03/2013 by:
The EU Commissioner for Justice, Fundamental Rights and Citizenship, Viviane Reding, says that while explicit consent is one of the cornerstones of the proposal for a new EU DP framework, it is nothing new. “The current Directive states since 1995...
19/03/2013 by:
The EU Data Protection Authorities (DPAs) say that in most cases, data controllers’ will have to rely on individuals’ consent as a legal basis for the processing of their personal data, and that consent needs to be obtained before the app starts t...
05/04/2013 by:
The EU Art. 29 Data Protection Working Party announced at the end of March that there had been discussions in Jakarta, Indonesia, at the end of January and the beginning of March to find a common approach between the EU’s Binding Corporate Rules a...
EU DPAs stress consent requirement for Big Data initiatives
12/04/2013 by:
The EU Member States' Data Protection Commissioners say that individuals’ consent is almost always needed for using personal data for Big Data operations, for example, detecting trends or individuals’ behaviour and attitudes. Consent should be fre...
Uruguay's accession to CoE DP Convention paves way for it to become a wider international treaty
17/04/2013 by:
On 12 April 2013 the Council of Europe announced that Uruguay's accession to Convention 108 (and to its Additional Protocol) was complete. It will enter into force regarding Uruguay on 1 August 2013, making it the 45th state to become a party, and...
25/04/2013 by:
In the hearing organised by US Senate Commerce Committee yesterday, its Chairman, Senator John D. Rockefeller, said that Do-Not-Track needs to become a reality, either voluntarily or through legislation. “It is now April 2013, and consumers are...
W3C rejects industry's Do-Not-Track proposal
22/07/2013 by:
The Digital Advertising Alliance (DAA) Do-Not-Track proposal has been rejected by the World Wide Web Consortium (W3C) that is seeking to design a solution that would let users block online "tracking" at browser level. DAA, an US industry...
Brazil considers DP bill again
The Brazilian government is again discussing the possibility of creating a data protection agency and a data protection regulation. According to Pablo Palazzi, a solicitor at Allende & Brea, Buenos Aires, Argentina, the Data Protection Bill, draft...
China’s new DP Regulations to take effect on 1st September
31/07/2013 by:
China’s Ministry of Industry and Information Technology (MIIT) passed the Telecommunications and Internet Personal User Data Protection Regulations on 28 June 2013, to take effect on 1 September 2013. The MIIT has previously issued Regulations in...
08/08/2013 by:
In a dramatic move to highlight the excessive surveillance by foreign intelligence services, Germany’s Data Protection Authorities have declared that until their Federal Government provides a plausible explanation on how to limit this access, new...
South Africa passes Data Protection Bill
28/08/2013 by:
South Africa’s Parliament approved the Protection of Personal Information Bill on 22 August. The Parliament issued the following statement: ‘The Bill gives expression to the right to privacy provided for in the Constitution. The right to privacy...
29/08/2013 by:
The 35th International Conference of Data Protection and Privacy Commissioners, hosted by Poland, 23-26 September, will discuss, among other things, assessment of risk related to data processing. Dr. Wojciech R. Wiewiórowski, Poland’s Data...
07/10/2013 by:
The Number Use Act 2013 establishes a new and independent Data Protection Authority to be set up in the first half of 2014. The Specific Personal Information Protection Commission will consist of a Chairman and six commission members, and will be...
Future of W3C Do-Not-Track in doubt
14/10/2013 by:
W3C’s (World Wide Web Consortium) working group on a US self-regulatory Do-Not-Track standard may stop its work as it has not been able to make much progress. At a vote, organised between 18 September and 9 October, a small majority of the 43...
17/10/2013 by:
The Netherlands government’s proposal for mandatory data breach notification would require all organisations to inform the Dutch DPA of security breaches. According to law firm De Brauw Blackstone Westbroek in Amsterdam, a failure to notify would ...
UN to consider Internet privacy resolution
15/11/2013 by:
Germany and Brazil have called on the United Nations to adopt a resolution about online privacy, reports the Associated Press. According to Associated Press, the draft resolution states that countries must protect the right to privacy as guarante...
EU gives US Safe Harbor another chance
The EU Commission has now reviewed the working of the US Safe Harbor programme on transfers of personal data from the European Economic Area to the US, and says that it will wait until summer 2014 to see whether it will suspend, modify or even...
China’s consumer law amendments widen data protection
10/12/2013 by:
China’s National People’s Congress (NPC) Standing Committee (its second-highest legislative body) has amended the PRC’s Law on the Protection of Consumer Rights and Interests to include provisions on protection of personal information, along with...
18/12/2013 by:
An opinion by a judge at the US District Court for the District of Columbia, given on 16 December, says that the mass collection of metadata by the US National Security Agency (NSA) is likely to violate the fourth amendment of the US constitution,...
19/12/2013 by:
Andrea Vosshoff is the new Federal Data Protection Commissioner after being elected a few minutes ago by the Bundestag with a majority of 403 votes. She is a CDU (Christian Democratic Union) politician, who sat in the Bundestag, the lower house of...
10/02/2014 by:
The Big Data Protection Research Project, sponsored by the Open University Business School, investigates how organisations can leverage big data while respecting individuals' privacy rights. Responses are sought by 28 February 2014. The project...
17/02/2014 by:
A draft Bill, scheduled for April, will allow consumer organisations to take businesses to court for non-compliance with Germany’s Data Protection Act, Justice Minister, Heiko Maas, announced on 11 February. Consumer rights organizations in German...
10/03/2014 by:
The EU Data Protection Authorities and the Asia-Pacific Economic Cooperation (APEC) economies have issued a checklist on the requirements that companies need to consider when applying for authorization of Binding corporate Rules (BCR) and/or...
EU-US ‘data protection umbrella agreement’ for judicial matters under preparation
27/03/2014 by:
Following the EU-US summit, President of the European Council, Herman Van Rompuy, said in a statement on 26 March: ‘On the governmental track, we'll have an umbrella agreement on data protection by this summer, based on equal treatment of EU and ...
23/05/2014 by:
eBay has asked users to change their passwords because of a cyber-attack that compromised a database containing passwords and other personal data such as names, email addresses, physical addresses, phone numbers and dates of birth. Cyber-attackers...
Brazil’s Internet law enters into force 23 June
11/06/2014 by:
To mark the start of the World Cup, we would like to offer you some news on Brazil. Brazil’s ground-breaking Internet law establishes the principles, guarantees, rights and obligations for the use of the Internet in Brazil. From now on,...
16/06/2014 by:
Following suggestions made by the EU Commission last summer, the EU and the US are about to agree on how the Safe Harbor framework will be revised. Viviane Reding, EU Vice President and Commissioner for Justice, said on 6 June: “I think that 95% o...
German DPAs publish guidelines for mobile apps
23/06/2014 by:
The German Data Protection Authorities have published guidance for mobile apps due to app developers’ and application providers’ perceived lack of privacy knowledge, as demonstrated by their product and services. The guidelines comment on the lega...
02/07/2014 by:
Different stakeholders, speaking at the Privacy Laws & Business 27th Annual International Conference yesterday, indicated that the draft data protection Regulation is now on an irreversible road. Peter Hustinx, European Data Protection Supervisor,...
16/07/2014 by:
Russia's State Duma (Lower House of Parliament) on 4th July and Federation Council (Upper House of Russia’s Parliament) on 9th July adopted amendments to Russia’s personal data protection act which require that personal data of all Russians is...
Brazil issues fine of 1.2 million euros under new Internet privacy law
12/08/2014 by:
Brazilian telecoms provider Oi has been fined 3.5 million reals (€1.2 million) for recording and selling its subscriber browser data, law firm Reed Smith reports. The fine, issued by the Brazilian Department of Consumer Protection and Defence...
Brazil: CORRECTION
PL&B's previous enews today about Brazil issuing a 1.2 million euros fine quoted the wrong legislation. According to Professor of Law, Danilo Doneda, the case was not based on Brazil's new Brazilian's internet law (Marco Civil da Internet), but...
Nominee for EU Commissioner on data protection questioned by European Parliament
02/10/2014 by:
Vĕra Jourová, candidate for the post of EU Commissioner for Justice, Consumers and Gender Equality, said in a European Parliament hearing yesterday that she would ‘strive for the adoption of the [data protection] reform package within the first si...
DPAs meet in Mauritius: Big Data, surveillance burning issues
The 36th International Conference of Data Protection and Privacy Commissioners, taking place in Mauritius this week, discussed yesterday the role of Big Data in society and the threat of surveillance systems. Jacob Kohnstamm, Chairman of the...
17/10/2014 by:
Ethics, Fundamental Rights and Big Data was discussed yesterday at the 36th International Conference of Data Protection and Privacy Commissioners. Some highlights: What is the motivation behind the risk? There is an analogy between chemistry and b...
European Parliament’s LIBE committee: Buttarelli for EDPS post
22/10/2014 by:
The European Parliament’s Civil Liberties Committee voted yesterday to nominate Giovanni Buttarelli as top candidate for the post of European Data Protection Supervisor (EDPS). Buttarelli is currently Assistant Supervisor. The Committee would lik...
EU Parliament and Council appoint Giovanni Buttarelli as EDPS
01/12/2014 by:
Giovanni Buttarelli has been appointed as European Data Protection Supervisor for the period of 1 December 2014 to 30 November 2019. The Assistant Supervisor will be Wojciech Wiewiórowski. "The [European Parliament’s] Civil Liberties Committee has...
DPAs write to app developers and demand transparency
10/12/2014 by:
23 privacy authorities from around the world have written to operators of app marketplaces, including Google Play and the Apple App Store, to make it mandatory for mobile app developers to post links to privacy policies prior to download if they a...
Snapchat settles with FTC and agrees to biannual audits
05/01/2015 by:
Snapchat has agreed to biannual, independent third party audits for the next 20 years as part of its settlement with the US Federal Trade Commission (FTC). The company had allegedly violated the FTC Act by deceiving customers with promises about t...
Obama announces plans for US federal privacy law
15/01/2015 by:
Speaking at the US Federal Trade Commission on 12 January, President Barack Obama announced his plans for a Consumer Privacy Bill of Rights. The Obama administration issued a white paper on consumer privacy in February 2012 and the Commerce...
Chile is preparing a new data protection law
21/01/2015 by:
Chile is in the progress of drafting a new privacy law which would be more in line with EU style provisions. "The Bill is not yet before the Congress but there was a public consultation last July," Paulina Silva of Carey y Cia said at the CPDP...
DPAs support UN resolution on privacy
10/04/2015 by:
The International Conference of Data Protection and Privacy Commissioners (ICDPPC) announced on 9th April their support for a UN Human Rights Council Resolution titled: “The right to privacy in the digital age” which was adopted on 28th March. The...
The Global Privacy Enforcement Network, GPEN, is working towards the launch of a secure Internet-based platform that will allow GPEN members to alert other members about investigations and find out whether other members are investigating the same...
Argentina adopts new regulations on CCTV and Do Not Call registry
16/04/2015 by:
Argentina has enacted two new regulations: the first one is related to sanctions and the recently adopted national Do Not Call registry, and the second one is about CCTV. The new Sanctions Regulation (Disp. 9/2015) provides a new scale of fines (u...
17/04/2015 by:
According to Vera Jourova, EU Commissioner for Justice, Consumers and Gender Equality, the EU is seeking to resolve key issues on the US Safe Harbor agreement with the US by 28 May, the date of the EU-US Justice and Home Affairs Ministerial Meetin...
Japan's legislature discusses new privacy law and EU adequacy
24/04/2015 by:
Japan's Diet (Parliament) is expected to have intensive discussions in May about privacy law reform, including the proposal for an independent data protection authority. In a plenary session in the House of Representatives on 23 April, the...
Germany’s DPA criticises data retention bill
11/06/2015 by:
Andrea Vosshoff, Germany’s Federal Data Protection Commissioner, says that the government bill, due to be debated in parliament tomorrow, 12 June, is a disproportionate interference in German, but also in European fundamental rights. Vosshoff...
19/06/2015 by:
The EU Art. 29 DP Working Party says that the new regulatory framework should not undermine the core principles and rights established in the DP Directive. The DPAs consider that the proposal to enable controllers to process data for a purpose tha...
14/07/2015 by:
Julie Brill, Commissioner, Federal Trade Commission, has now published her presentation (see link below) on the FTC’s Privacy Leadership Role in the US which she gave at on 7th July in Cambridge at PL&B’s 28th Annual International Conference,...
UN appoints Special Rapporteur on Privacy
22/07/2015 by:
The United Nations appointed on 1 July Joseph Cannataci as a Special Rapporteur on the Right of Privacy for the next three years. The rapporteur’s mandate includes to: identify possible obstacles to the protection of the right of privacy, identif...
28/07/2015 by:
Following her appointment on 24 July, Mar España Martí, the new Director of Spain’s national Data Protection Authority (Agencia Española de Protección de Datos - AEPD), was introduced to the media on 27 July at the AEPD’s office in Madrid by Justi...
CJEU: EU-US Safe Harbor framework is invalid
06/10/2015 by:
The Court of Justice of the European Union (CJEU) has in its decision today declared that transfers of personal data from the EU to the US cannot rely on the Safe Harbor framework agreement. The Court said that it is for the national Data Protecti...
DPAs ready to take enforcement action if no solution found to US transfers by end of January 2016
19/10/2015 by:
On 6 October, the Court of Justice of the European Union (CJEU) declared the Safe Harbor Decision of the European Commission invalid. www.privacylaws.com/Publications/enews/International-E-news/Dates/2015/10/CJEU-EU-US-Safe-Harbour-framework-is-in...
21/10/2015 by:
The US House of Representatives agreed yesterday to move forward the Judicial Redress Bill, which would ensure some foreigners the right to pursue their privacy rights in US courts. There was overwhelming bipartisan support for the Bill which will...
28/10/2015 by:
The EU DPAs, and the EU Commission are frantically searching for solutions to the problem of the European Court of Justice declaring the US-EU Safe Harbor to be invalid. While the EU and the US are still negotiating a new framework, there are...
DPA conference debates transatlantic privacy solutions but fails to find any so far
29/10/2015 by:
The Data Protection Authorities' 37th International Privacy Conference, hosted by the Netherlands DPA, has held discussions on practical solutions to privacy challenges between the EU and the US. Opening the conference, Chairman of the Netherlands...
30/10/2015 by:
EU Commissioner, Vĕra Jourová, yesterday told the 37th International Privacy Conference in Amsterdam that the ECJ’s decision in the Schrems case “reaffirms once more that personal data protection is a fundamental right and that it applies also whe...
Safe Harbor solution by January 2016, Jourová says
17/11/2015 by:
Speaking in Washington yesterday, EU Commissioner responsible for data protection, Věra Jourová, said that she is confident a solution for EU-US data transfers will be found by January 2016 because: 1. “we have clear guidelines from Europe's highe...
No deal yet for EU-US data transfers
02/02/2016 by:
Věra Jourová, European Commissioner for Justice, addressed the European Parliament’s LIBE Committee yesterday evening, 1 February, to inform the MEPs of the state of play in the negotiations. “Negotiations are still ongoing, including at the...
03/02/2016 by:
The EU Commission announced yesterday that it has finalised negotiations with the United States on a renewed framework for transatlantic data flows of personal data. While the European Commission claims that this will create legal certainty for...
Catalan Data Protection Authority launches Data Protection by Design competition
Barbarà Fondevila, Maria Àngels, Director, Catalan Data Protection Authority, based in Barcelona, has launched a competition to find an app or technological solution developed anywhere that best showcases “applications or systems that improve the...
Poland’s DPA says enforcement against ex-Safe Harborites is a possibility
22/02/2016 by:
Poland’s Data Protection Commissioner, Dr Edyta Bielak-Jomaa, has issued a statement which says that in the absence of a new framework for EU-US data transfers, the authority is prepared to consider any complaints in this regard, even if they were...
German consumer law creating new DP rights enters into force today
24/02/2016 by:
Germany’s “Act to Improve the Civil Enforcement of Consumer Protection Provisions of Data Protection Law”, published on 17 February and entering into force today, 24 February 2016, enables consumer protection associations to file privacy cases in...
01/03/2016 by:
President Obama signed, on 24 February, the Judicial Redress Bill which gives Europeans the right to sue the United States for unlawful disclosure of personal information. The new right is the same as that afforded to American citizens under the...
04/04/2016 by:
The Privacy Shield framework provides an 'essentially equivalent' level of protection for personal data transferred from the EU to the US, Hogan Lovells LLP privacy lawyers conclude in their 63-page legal analysis commissioned by the Information...
Turkey adopts data protection law
Turkey’s Data Protection Law was published yesterday, 7 April in the Official Gazette. Assistant Professor Elif Küzeci from Bahcesehir University, Istanbul, told PL&B that this is the most significant step for data protection in Turkey so far. The...
EU Commission starts revision of e-privacy Directive
18/04/2016 by:
The European Commission launched, on 12 April, a public consultation on the revision of the e-Privacy Directive. It is expected that the Commission will issue a legislative proposal on e-privacy by the end of this year. The Consultation consists o...
UN Special Rapporteur on the Right to Privacy is finding resources to do his job
19/04/2016 by:
At yesterday’s ASSO DPO conference in Milan, Dr Joseph Cannataci, United Nations Special Rapporteur on the Right to Privacy, told PL&B that, although he receives a low official budget (PL&B International Report April 2016 pp.10-12), in fact, he is...
Dynamic IP addresses can be personal data, CJEU says
13/05/2016 by:
The Advocate General of the Court of Justice of the European Union ( CJEU) issued an opinion yesterday in the case Patrick Breyer v. Federal Republic of Germany which suggests that dynamic Internet Protocol (IP) addresses fall within the EU Data...
EU Cyber Security Directive expected to enter into force in August
18/05/2016 by:
The European Union is preparing to have the Network and Information Security (NIS) Directive (Cyber Security Directive) in force from August 2016. The EU Presidency has announced that the Council adopted its position in its first reading on 17 May...
EDPS: Privacy Shield is not good enough
08/06/2016 by:
The European Data Protection Supervisor (EDPS) has issued an Opinion in which he says that the proposed EU-US Privacy Shield is not robust enough. Giovanni Buttarelli, EDPS, said: "I appreciate the efforts made to develop a solution to replace Saf...
EU-US Privacy Shield talks continue: Update at PL&B’s Conference
17/06/2016 by:
The Article 31 Committee, consisting of EU Member States’ representatives, will meet again on 20 and 29 June in an attempt to agree the draft adequacy decision for EU to US international data transfers under the proposed EU-US Privacy Shield. The ...
05/07/2016 by:
Speaking at Privacy Laws & Business 29th Annual International Conference in Cambridge, Bruno Gencarelli, Head of EU Data Protection Unit said that the Article 31 Committee will be voting on the Privacy Shield pact this week, and following a positi...
EU-US Privacy Shield now agreed
11/07/2016 by:
The EU-US Privacy Shield, the data transfer agreement between the EU and the US was agreed last Friday 8 July by the EU Member States’ Article 31 Committee representing the 28 Member States. This package, replacing the Safe Harbor agreement, will ...
Privacy Shield adopted: Certifications can be filed from 1 August
13/07/2016 by:
The EU Commission adopted the Privacy Shield yesterday for transfers of personal data from the EU to the US. The adequacy decision has been notified to the 28 EU Member States and thereby enters into force immediately. The Privacy Shield framework...
22/07/2016 by:
On 20 July, France’s Data Protection Authority, the CNIL, served Microsoft with a formal notice that it must comply with France’s data protection law within three months. The CNIL states that the Windows 10 operating system collects excessive...
EU DPAs: Further improvements required for EU-US Privacy Shield
26/07/2016 by:
The EU Data Protection Authorities say that they welcome the changes made to the EU-US Privacy Shield’s final version. But several concerns remain regarding both the commercial aspects and the access by US public authorities to data transferred fr...
17/08/2016 by:
Only 35 companies have so far been certified to the EU-US Privacy Shield, which became operational on 1 August. The programme has stricter requirements than its predecessor, Safe Harbor, which in the end had some 5,500 participants. However, large...
The European Data Protection Supervisor (EDPS), Giovanni Buttarelli, says that we need to see more accountability in Big Data mergers. “Regulators should have a healthy scepticism on these, and be more conversant with new technology.” Buttarelli...
US pleased with 500 Privacy Shield certifications so far
21/10/2016 by:
“We are very pleased that participation in the EU-US Privacy Shield has exceeded expectations,” Shannon Coe from the US Department of Commerce said. Speaking at the international DPAs’ conference in Marrakesh yesterday, Coe confirmed that the...
German DPAs launch enquiry on international transfers to non-EU countries
07/11/2016 by:
Ten German state and city level DPAs, coordinated by Bavaria’s DPA, have started a survey of 500 companies’ practices regarding international data transfers. The state and city level DPAs that are involved are: Bavaria, Berlin, Bremen, Hamburg,...
18/11/2016 by:
In an unprecedented move, the Russian DPA, Roskomnadzor yesterday, 17 November, blocked access to the LinkedIn website in order to comply with a Moscow City Court ruling on 10 November. The court found that the company was in breach of the data...
Argentina amends its DP Act to facilitate international transfers
05/01/2017 by:
Argentina has adopted a new regulation on international transfers of personal data which allows companies to use model contract clauses. Pablo Palazzi, partner at the law firm Allende & Brea in Buenos Aires, Argentina, says that under the new...
EU-US Privacy Shield threatened by Trump executive order
27/01/2017 by:
President Trump's Executive Order from yesterday would take away privacy protection from non-US citizens in the US, and thus put the EU-US Privacy Shield in danger. Jan Philip Albrecht, MEP, tweeted yesterday at the CPDP conference on hearing the...
EU DPAs ask US further questions on the Privacy Shield
22/02/2017 by:
The dust has somewhat settled on President Donald Trump’s Executive Order threatening the privacy rights of non-US citizens, but the EU DPAs remain vigilant regarding the implementation of the EU-US Privacy Shield. The DPAs decided, in their 7...
05/04/2017 by:
During her visit to the US last week to discuss the EU-US Privacy Shield with the new US administration, EU Commissioner for Justice, Věra Jourová, said that a review of the progress with the programme will take place in September this year. She...
10/04/2017 by:
The EU Data Protection Authorities welcome the expansion of the scope of the current e-Privacy Directive to include Over-The-Top (OTT) providers such as WhatsApp. The regulators also say that the EU Commission’s plan to introduce the new rules as ...
07/06/2017 by:
To help it conduct the first annual review of the EU-US Privacy Shield, the EU Commission has issued a questionnaire to trade bodies and some other organisations in order to seek feedback on compliance issues. The annual review, to take place in...
Microsoft makes changes to its DP compliance as a result of regulatory action in France
29/06/2017 by:
Microsoft has made changes to how it processes personal data as a direct response to a formal notice in July 2016 by France’s Data Protection Authority, the CNIL. At the time, the regulator said that the company had excessive data collection...
01/08/2017 by:
The Data Protection Authorities’ Global Privacy Enforcement Network, GPEN, has increased its information exchange by way of conference calls. The network, which at the end of 2016 consisted of 64 privacy enforcement authorities in 47 jurisdictions...
06/09/2017 by:
A decision by the European Court of Human Rights of 5 September states that monitoring of an employee’s electronic communications amounted to a breach of his right to private life and correspondence (Article 8 of the European Convention on Human...
First enforcement actions against non-compliant Privacy Shield participants
11/09/2017 by:
The US Federal Trade Commission (FTC) announced on 8 September that three US companies have agreed to settle FTC charges on misleading consumers about participation in the EU-US Privacy Shield. The companies in question, human resources software...
06/12/2017 by:
The EU Data Protection Authorities say that they have, despite improvements to the Privacy Shield framework, identified a number of significant concerns that need to be addressed both by the EU Commission and the US authorities. The DPAs, together...
25/05/2018 by:
The Chair of the European Data Protection Board, (EDPB), Ms Andrea Jelinek, Head of Austria’s Data Protection Authority, said that the Board is fully functioning, despite the fact that not all EU Member States have managed to adopt GDPR adaptation...
03/07/2018 by:
The GDPR’s cooperation and consistency mechanism will now be put to a test at the European Data Protection Board (EDPB) which is already dealing with more than 20 cross-border cases. Willem Debeuckelaere, Vice-Chair, EDPB, said at PL&B’s conferenc...
17/07/2018 by:
Japan and the EU have agreed to recognise each other's data protection systems as 'equivalent', which will allow data to flow safely and legally between them. The EU and Japan today agreed to create the world's largest area of safe data flows, the...
More EU Member States moving toward GDPR implementation
21/08/2018 by:
France’s data protection law was adopted on 20 June and published on 21 June. In Spain , due to a change of government, the new DP Law is still on hold. In the first week of August, the Government approved an urgent regulation appointing Spain’s...
22/08/2018 by:
Inspired by the EU GDPR, Brazil’s General Data Protection Law requires controllers to notify data breaches, appoint a Data Protection Officer (DPO), and follow new, stronger consent requirements. The law, which applies both to the private and publ...
24/09/2018 by:
Argentina is on its way to modernise its data protection law. The President sent the data protection bill to Argentina’s Congress on 19 September. Argentina was declared as ‘adequate’ by the EU Commission under the EU DP Directive 1995, but...