Hellenic DPA fines Company for failure to comply with a data subject’s access request for a video recording, resulting in a € 30’000 GDPR Fine. Based on the complaint of a data subject, the Greek Data Protection Authority imposed the fine because the company had not properly complied with the complainant’s request for information. The … Read more
On May 24, 2021, a telephone conversation with an employee of the claimed entity was recorded without any informed consent and not following the principle of data minimization. . Through an email sent by the representative, he learned that his conversation was recorded, a fact he was not informed about. On November 15, 2021, the … Read more
Belgian DPA decision emphasizes on a lack of an appropriate legal basis for processing and transfer to ad tech partners, insufficient information to users, general non-compliance with regard to data protection by design and accountability. Concretely this means:– Ban on use of legitimate interest– Obligation to assess parties that connect to the ad network for … Read more
Italian energy company Enel Energia has been fined 26.5 million euros by the Italian privacy regulator for violating the GDPR. According to the Garante per la protezione dei dati personali (GPDP), the energy company has unlawfully processed the personal data of millions of people for marketing purposes. The GPDP launched an investigation into Enel Energia … Read more
A Spanish company has received a GDPR fine of 9,000 Euros for posting an employee’s photo on its own company website, Facebook and Instagram without his permission. The employee asked his employer to remove the image, but he refused. The company claimed it had been granted permission, even though it could not prove it. The … Read more
The Austrian Data Protection Authority has decided on a model case by noyb that the continuous use of Google Analytics violates the GDPR. This is the first decision on the 101 model complaints filed by noyb in the wake of the so-called “Schrems II” decision. In 2020, the Court of Justice (CJEU) decided that the … Read more
The UK’s Information Commissioner’s Office (ICO) told The Guardian in a statement that it was planning “further discussions” with Meta about the Quest 2 VR headset’s compliance with a recently established children’s code that priorities the “best interests” of young users. The watchdog wants to determine whether Meta’s headset and VR services do enough to … Read more
UK privacy regulator ICO plans to fine facial recognition company Clearview AI €20 million for violating UK privacy law. Clearview collected photos from Facebook, LinkedIn and other websites for training a facial recognition system. This system contains a database of ten billion collected images, according to the ICO. This allows police services to identify unknown … Read more
Irish DPC demanded noyb to sign a “non-disclosure agreement” or remove noyb from Facebook procedure. Schrems: “The DPC engaged in procedural blackmail. Only if we shut up, the DPC would ‘grant’ us our legal right to be heard. This is a regulator clearly asking for a ‘quid pro quo’ to do its job, which likely constitutes bribery in Austria.” … Read more
Apps for Wifi-strength measurement and another to scan barcodes were selling location data without proper consent. It was unclear to users that apps they had downloaded for one purpose were sharing information for a completely different one.