Belgian DPA decision emphasizes on a lack of an appropriate legal basis for processing and transfer to ad tech partners, insufficient information to users, general non-compliance with regard to data protection by design and accountability. Concretely this means:– Ban on use of legitimate interest– Obligation to assess parties that connect to the ad network for … Read more
Four US states have sued Google for illegally collecting location data. According to the attorneys general of the District of Columbia, Texas, Washington and Indiana, the tech company misled and manipulated users into accessing their location data, including making it nearly impossible to stop location tracking. According to the indictment, since at least 2014, Google … Read more
Italian energy company Enel Energia has been fined 26.5 million euros by the Italian privacy regulator for violating the GDPR. According to the Garante per la protezione dei dati personali (GPDP), the energy company has unlawfully processed the personal data of millions of people for marketing purposes. The GPDP launched an investigation into Enel Energia … Read more
This week, an attack on an International Committee of the Red Cross (ICRC) server stole the personal and confidential data of more than 515,000 “highly vulnerable” individuals, the organization said in a statement. These include people separated from their families and families due to migration, disasters and conflicts, missing persons and their families and people … Read more
Aldi has opened its first checkout-free store, which allows customers to complete their shopping without scanning a single product, or having to go through a checkout. To enter the ALDI supermarket in London, customers must first install the Aldi Shop&Go app and create a corresponding account. Access to the supermarket can be obtained via the … Read more
A Spanish company has received a GDPR fine of 9,000 Euros for posting an employee’s photo on its own company website, Facebook and Instagram without his permission. The employee asked his employer to remove the image, but he refused. The company claimed it had been granted permission, even though it could not prove it. The … Read more
Apple unleashing its ‘nutrition label’-style Privacy Labels, Surfshark has combed through the privacy policies of over 200 apps to find out which collect the most data and which collect the least.Key Findings are:– On average, social media apps and food delivery apps collect the most data.– Browsers and image editing apps collect the least.– The … Read more
The UK’s Information Commissioner’s Office (ICO) told The Guardian in a statement that it was planning “further discussions” with Meta about the Quest 2 VR headset’s compliance with a recently established children’s code that priorities the “best interests” of young users. The watchdog wants to determine whether Meta’s headset and VR services do enough to … Read more
The personal and salary data of 637,000 Albanians, about a quarter of the population, has been stolen and leaked on the internet. It concerns names, identity card and passport numbers, telephone numbers, salary, position and employer that are contained in two Excel documents that are shared via WhatsApp, according to the Albanian Exit News. The … Read more
Twitter has updated its privacy policy so that it can remove images of people that have been posted without their consent. It would require a first-person report or a report from an authorized representative to establish whether or not the individual had consented to it being shared.