Hamburg DPA prohibits the processing of Whatsapp data by Facebook

In Hamburg they go for it! The authority there relies on art 66 GDPR, which in case of urgency ensures that an authority may take action itself without European coordination. The reason is of course the changes in Whatsapp’s privacy policy that would result in data being passed on to Facebook and used there for … Read more

WhatsApp delays enforcing new privacy terms, but…

WhatsApp with two billion users around the world. was set to enforce its new data-sharing policy with Facebook on May 15 . Now WhatsApp people will remind and eventually become persistent so that at some point users will “encounter limited functionality on WhatsApp until you accept the updates”, according to WhatsApp. “You won’t be able … Read more

EU IT is losing from US Clouds while politicians are sleeping

Worldwide Cloud Marketshares in Q3 2020 are 32% by Amazon, 19% Azure and 7% Google Cloud (source: Canalys). Still there is no sound of a real replacement of the Privacy Shield, or a privacy regulation for the transatlantic data exchange, which is is a clear failure of the politicians and can only be remedied by … Read more

Medical appointments on Vaccines in Amazon Web Services

Doctors’ organisations and a human rights group recently challenged the storage of vaccine appointment data on a platform hosted in France and Germany by Amazon Web Services. They sought an urgent order to suspend the transfer of data from Doctolib (a French company contracted by the French government to provide a platform for vaccine appointments) … Read more

14.5 Million Euro GDPR fine blown away by German Court

A €14.5 million (U.S. $17.2 million) fine against Deutsche Wohnen issued more than two years ago has been dropped after a German court found under German law the property company could not be held responsible for violating the European Union’s strict privacy laws unless blame could be attached to a specific individual or executive.

6 Million EUR GDPR fine for CAIXABANK in Spain

The Spanish Data Protection Authority (AEPD) imposed a total fine of 6.000.000 EUR on CAIXABANK for unlawfully processing clients’ personal data (4.000.000 EUR) and not providing sufficient information regarding the processing of personal data (2.000.000 EUR). The AEPD considered that the document designed to comply with the information did not include enough information regarding the … Read more

Spy pixels in email becoming the new normal

The use of “invisible” tracking tech in emails is now “endemic”, according to a messaging service that analysed its traffic at the BBC’s request. 66% of emails sent to its users’ personal accounts contained a “spy pixel”, even after excluding for spam.Emails pixels can be used to log:– if and when an email is opened– … Read more

DPA: Grindr 9.6 Million Euro for lack of consent for sharing data to 3rd parties

Norwegian Data Protection Authority issues intention to fine gay/trans dating app Grindr 9.6 million Euro for lack of consent when sharing data with third parties for marketing purposes. User data included gps location and use of the app, the latter considered to be a special category of personal data (sexual orientation). Fine appears to be … Read more

Digital corona passport a good idea?

The idea of global vaccination and health data being stored in centralized systems has many privacy experts freaking out. As the first vaccines against COVID-19 roll out, governments and institutions across the world are scrambling to figure out how to provide proof that someone has been vaccinated. Paper certificates, PDFs, wristbands and mobile apps have … Read more