Public bodies should take into account the possible sensitive nature and large amounts of data processed by publicbodies. But how to guarantee the fundamental right to the protection of personal data? The EDPB therefore underlines the need for public bodies to act in full compliance with the GDPR when using cloud-based products or services. In … Read more
C-154/21.Österreichische PostEvery person has the right to know to whom his or her personal data have been disclosed. A citizen requested Österreichische Post, the principal operator of postal and logistical services in Austria, to disclose to him the identity of the recipients to whom it had disclosed his personal data. The post gave petitioner only … Read more
Meta was fined with €390M (210 million and €180 million fines for Facebook and Instagram) and accused the company of lacking proper legal grounds to process millions of Europeans’ with its data-fueled advertising model. Meta trongly disagree with the DPC’s final decision, and believes to fully comply with GDPR by relying on Contractual Necessity for … Read more
The US government demands direct access to databases of European police services containing biometric data of European citizens. The US makes this entry mandatory for countries participating in the so-called Visa Waiver Program, which allows citizens of certain countries to travel to the United States without a visa. At the beginning of this year, US … Read more
More than 10 million people rely on Ring video doorbells to monitor what’s happening directly outside the front doors of their homes. The popularity of the technology has raised a question that concerns privacy advocates: Should police have access to Ring video doorbell recordings without first gaining user consent?
Google’s artificial intelligence DeepMind received the data in 2015 from the Royal Free NHS Trust for the purpose of testing a smartphone app called Streams. The smartphone app was tested to detect acute kidney injuries. The claim alleges that Google and DeepMind “obtained and used a substantial number of confidential medical records without patients’ knowledge … Read more
The French DPA fined a French company for not having a retention period, keeping personal data since 2007. In fact they were using an out of date hashtag, not actually deleting data after data subject request. The CNIL fined the company 120.000 € for not taking all necessary measures to be compliant.
Four US states have sued Google for illegally collecting location data. According to the attorneys general of the District of Columbia, Texas, Washington and Indiana, the tech company misled and manipulated users into accessing their location data, including making it nearly impossible to stop location tracking. According to the indictment, since at least 2014, Google … Read more
The Irish Data Protection Commission (DPC) has sent a “draft decision” to the other European Data Protection Authorities on Facebook’s legal trick to bypass the GDPR. noyb has published the relevant documents today https://lnkd.in/eQBMMg7C. In the DPC’s view Facebook can simply choose to include the agreement on data processing in a “contract”, which would make the … Read more
WhatsApp with two billion users around the world. was set to enforce its new data-sharing policy with Facebook on May 15 . Now WhatsApp people will remind and eventually become persistent so that at some point users will “encounter limited functionality on WhatsApp until you accept the updates”, according to WhatsApp. “You won’t be able … Read more