menu

Must read archive

complaints EDPB fines implementation

Access Now publishes GDPR progress report

No. 4, 11 June 2019 – GDPR anniversary edition
A little over a year after entry into application, and after 95.000 complaints filed, 59.000 breaches reported, and nearly 60 million euros imposed in fines, we’re taking a closer look at the way the EU General Data Protection Regulation is being implemented.
advertising data breach ePrivacy tracking

Ad Tech GDPR complaint is extended to four more European regulators

No. 4, 11 June 2019 – GDPR anniversary edition
Complainants consider Real-Time Bidding a “vast scale personal data leakage by Google and other major companies” in the behavioural advertising industry.
EDPB EDPS GDPR interpreted

EDPB publishes statement on the use of personal data in political campaigns

No. 4, 11 June 2019 – GDPR anniversary edition
The EDPB states that the amount of data processing brings serious risks “not only to the rights and to data protection, but also to trust in the integrity of the democratic process”.
DPA EDPB implementation

EDPB-LIBE Report on the implementation of the GDPR

No. 4, 11 June 2019 – GDPR anniversary edition
The EDPB affirms in its Report that the majority of DPAs would need an increase of 30-50% in their budget in order to deal efficiently with the tasks they are required to perform.
complaints data breach DPA EDPB

EDPB publishes statistics about complaints one year after enter into force of the GDPR

No. 4, 11 June 2019 – GDPR anniversary edition
Data Protection Authorities have received more than 144,000 complaints and over 89,000 data breaches. Out of these, 63% of these have been closed and 37% are still ongoing.
DPA fines Poland

Polish DPA issues two GDPR fines

No. 4, 11 June 2019 – GDPR anniversary edition
Two GDPR fines (220000 Euro and 13 000 Euro) were issued by the Polish Data Protection Authority (DPA).
DPA Sweden

Sweden publishes first annual privacy report

No. 4, 11 June 2019 – GDPR anniversary edition
Awareness raising about GDPR and concerns on data protection issues in Sweden.
Cambridge Analytica GDPR interpreted implementation Spain

Spanish Constitutional Court strikes down political profiling

No. 4, 11 June 2019 – GDPR anniversary edition
Spanish Tribunal Court impedes that the GDPR implementation law legalises in Spain the practices criticised in the Cambridge Analytica case
complaints EDPB fines GDPR interpreted implementation tools

Will the GDPR serve its purpose? Three difficult lessons after its first year

No. 4, 11 June 2019 – GDPR anniversary edition
Legal regulations take shape by practice. The GDPR - as a legal document - was born in 2016. After two years of incubation it was thrown...

Editorial

No. 2, 28 Jan 2019
Welcome to GDPR Today – your online hub for staying tuned to the (real) life of EU data protection law. As you know, every two months we...
DPA GDPR interpreted Romania

European Commission urged to investigate Romanian GDPR implementation

No. 3, 25 March 2019
Issue The Romanian law implementing the General Data Protection Regulation (GDPR) allows national political parties to process personal...
Internet of Things

Privacy policies for Internet of Things devices must comply with GDPR

No. 3, 25 March 2019
Many Internet of Things (IoT) devices, such as smart speakers, lightbulbs, hubs and fridges, collect personal data. These devices are...
Democracy DPA Elections Spain

Spain: DPA limits the use of data in political campaigning

No. 3, 25 March 2019
The Spanish Data Protection Authority (DPA), the Agencia Española de Protección de Datos (AEPD), has issued a notification (circular) on...
Cookies DPA Netherlands

Netherlands: DPA rules websites must allow people to refuse tracking cookies

No. 3, 25 March 2019
Websites that allow visitors access only if they accept tracking cookies or comparable ways to track and record visitor behaviour do not...
DPA Elections GDPR interpreted Romania Spain UK

GDPR loopholes facilitate data exploitation by political parties

No. 3, 25 March 2019
Elections, referendums and political campaigns around the world are becoming ever more sophisticated data operations. This raises questions...
GDPR interpreted

New evidence in AdTech complaint

No. 3, 25 March 2019
Additional evidence has been supplied to data protection regulators in relation to a complaint about real-time bidding in the AdTech...
GDPR on Trial

Uber drivers demand their data

No. 3, 25 March 2019
Four Uber drivers in the United Kingdom have initiated legal action under the General Data Protection Regulation (GDPR) to require that the...
ePrivacy GDPR interpreted

EDPB: ePrivacy and GDPR work together to protect people’s data

No. 3, 25 March 2019
The General Data Protection Regulation (GDPR) is very closely linked to other EU legislation protecting privacy of electronic communications...
Competition Consumer Protection Facebook Germany

German competition regulator demands changes to Facebook’s use of personal data

No. 3, 25 March 2019
Authorities in Europe have for years discussed in theory the need to integrate data protection with consumer rights and competition law....
Adequacy Brexit

After Brexit, the EU must decide if UK data protection is adequate

No. 3, 25 March 2019
Data protection is a core part of the European Union’s Digital Single Market strategy. In many ways, the General Data Protection...
DPA EDPB EDPS ePrivacy

EDPS 2018 Annual Report highlights the power and limitation of data protection

No. 3, 25 March 2019
In February 2019, the European Data Protection Supervisor (EDPS), Giovanni Buttarelli, published his first Annual Report. For those working...
GDPR on Trial

Panoptykon files complaints against Google and IAB Europe

No. 2, 28 Jan 2019
On International Data Protection Day, 28 January 2019, Panoptykon Foundation filed complaints against Google and IAB Europe under the...
Adequacy Privacy Shield

EU-US Privacy Shield second review: “it’s mostly fine” says the Commission, “not really” replies the EU Data Protection Board

No. 2, 28 Jan 2019
On December 19, the EU Commission released its report on the second review of the EU-US Privacy Shield arrangement, the mechanism that...
GDPR on Trial

NOYB files ten strategic complaints on the right to access

No. 2, 28 Jan 2019
On January 18th, the Austrian NGO noyb filed ten strategic complaints with the Austrian data protection authority against 8 companies for...
DPA

French President nominates new head of the data protection authority

No. 2, 28 Jan 2019
On January 18th, French President Emmanuel Macron nominated Marie-Laure Denis to take the head of the French data protection authority: the...
report

Privacy International releases report on how apps on Android disclose data with Facebook

No. 2, 28 Jan 2019
On December 29, NGO Privacy International released a report revealing how mobile applications on Android are disclosing data to Facebook. ...
survey

GDPR’s impact on the non-profit sector: seeking your input

No. 2, 28 Jan 2019
As non-profits are becoming increasingly data-heavy operations, basic fluency in data protection is essential. Vera Franz (Open Society...
fines

French data protection authority fines Google €50 million for GDPR violations

No. 2, 28 Jan 2019
On January 21, 2019, the French data protection authority - CNIL - imposed a financial penalty of 50 Million euros against Google for...
Adequacy Japan

European Commission adopts adequacy decision on Japan, creating the world’s largest area for data flows

No. 2, 28 Jan 2019
On January 23, the EU Commission has adopted its adequacy decision on Japan, allowing personal data to flow freely from the EU to Japan on...
editorial

Editorial – Holiday Special

Holiday Special, 17 December 2018
Welcome to GDPR Today – your online hub for staying tuned to the (real) life of EU data protection law. As you know, every two months we...
editorial

Editorial – October 2018

No. 1, 25 Oct 2018
Welcome to GDPR Today – your online hub for staying tuned to the (real) life of EU data protection law. Every two months we will be...
complaints

Consumer groups across Europe file complaints against Google for breach of GDPR

Holiday Special, 17 December 2018
On November 27, seven consumer groups members of BEUC are filing complaints against Google with their national data protection authorities....
tracking

Increased use of third-party cookies on Polish news sites

Holiday Special, 17 December 2018
Poland was the only country (out of seven examined by the Reuters Institute) where the number of third-party cookies on news websites...
implementation

MEP Sophie In’t Veld sent letter to EDPB and Commission on questionable Spanish implementation of the GDPR

Holiday Special, 17 December 2018
Sophie In’t Veld, a member of the European Parliament and a fierce defender of civil liberties, has sent a letter to the European Data...
consultation

Call for submission: Send your comments on EDPB guidelines on the territorial scope of the GDPR by January 18

Holiday Special, 17 December 2018
The European Data Protection Board has opened a comment period for the draft guidelines 3/2018 on the territorial scope of the GDPR (Article...
fines

Portuguese DPA imposes 400,000 € fine on hospital for two violations of the GDPR

Holiday Special, 17 December 2018
The Portuguese data protection authority - Comissão Nacional de Protecção de Dados or CNPD - imposed two separate penalties amounting to...
data breach

In Spain, data breach notifications increase since the entry into application of the GDPR

Holiday Special, 17 December 2018
The Spanish data protection authority - Agencia Española de Protección de Datos or AEPD - has received 418 notifications of data breaches...
implementation

Help Wanted: Take a quiz to help track implementation of the GDPR at the national level

Holiday Special, 17 December 2018
With 19 Member States having adopted their national implementation laws, it is high time to check how consistently the Regulation is being...
investigation

Italian DPA calls for end of Whatsapp/Facebook “data sharing practices” as investigation finalises

Holiday Special, 17 December 2018
Earlier this year, the Italian DPA closed its investigation into WhatsApp sharing data with Facebook. The investigation started in August...
profiling

Stop companies from exploiting our data!

Holiday Special, 17 December 2018
In November, Privacy International filed complaints against seven data brokers (Acxiom, Oracle), ad-tech companies (Criteo, Quantcast,...
Press Freedom

GDPR misuse in Romania: “independence of DPA” and “transparency” – keywords or buzzwords?

Holiday Special, 17 December 2018
At the beginning of November 2018, the first GDPR-related privacy and freedom of expression case arose in Romania in connection to the...
ePrivacy

Dangerous loophole to the GDPR in the ePrivacy proposal

No. 1, 25 Oct 2018
Is tracking an essential element of every internet service financed by ads? By allowing service providers to install advertising cookies...
GDPR on Trial

Historical account statements to be provided free of charge

No. 1, 25 Oct 2018
In June, the Austrian data protection authority ruled that the right to access personal data under the GDPR applies to historical bank...
GDPR on Trial

German court rules in the first GDPR case

No. 1, 25 Oct 2018
We didn’t have to wait too long for first of the court decisions under the GDPR. Only five days into the new law the Regional Court in...
business developments

Will GDPR help tech giants maintain monopolistic position?

No. 1, 25 Oct 2018
Does it mean that it is winning at the compliance game at the expense of smaller advertising entities? Analysis by Whotracks.me. Provided...
GDPR interpreted

Who will check whether Google is GDPR-compliant?

No. 1, 25 Oct 2018
If your first thought goes to Ireland (as the country where Google's European HQ is registered), think again. The Irish Data Protection...
data breach

FAQ on Facebook’s biggest data breach

No. 1, 25 Oct 2018
How is the latest Facebook breach different from the Cambridge Analytica scandal? What was the company’s reaction and what do we (still)...
investigation

Deceived by design

No. 1, 25 Oct 2018
Tech companies use ‘dark patterns’ to discourage users from exercising their rights to privacy. A report by the Norwegian Consumer...
investigation

Political marketing under investigation

No. 1, 25 Oct 2018
After the Cambridge Analytica scandal, the UK’s Information Commissioner’s Office is investigating data brokers specialising in...
GDPR on Trial

CJEU rules on Facebook’s page administrators

No. 1, 25 Oct 2018
On the 5th of June 2018, the Court of Justice of the European Union delivered a decision that was a wake-up call for millions of Facebook...
investigation

Political hack in Italy under investigation

No. 1, 25 Oct 2018
An online platform operated by the Italian party, M5S, which is used to communicate with citizens and develop political decisions, was...

Search GDPR Today

Please enter your search term
×