Can't find what you're looking for? Try the search bar or refine your parameters using the Frameworks & Concepts button above.
Sending an e-mail to the wrong recipient by mistake is “potentially” an infringement of Articles 5 and 6 of the GDPR, says Belgian DPA, in a “prima facie” decision that may cause a stir. In proceedings before it, the Belgian DPA can decide whether to take a preliminary decision *before* any decision on the merits. […]
Adtech & metrics: EU law evolutions and tomorrow�s legal strategies” – tentative title for our next webinar mid-May, in the form of a 2h virtual & complimentary workshop. Measurement, attribution, monetisation; legal grounds and technologies. A number of key topics would be examined from a legal perspective (taking into account the broader data protection framework […]
No, consent is *not* required for real-time bidding or targeted ads pursuant to the CJEU’s IAB Europe / TCF judgment. Why not? Because the paragraph where the CJEU suggests this is not part of the scope of the responses, so it’s an “obiter dictum” – that’s what it’s called when a court says something that […]
Did I get this right? Thierry Breton at the European Commission is suggesting that a specific form of advertising (“contextual” – i.e. ads based on limited data) is required by the DMA, as an alternative to another (profile-based advertising), and that a “consent or pay” approach might not be permitted (the Commission apparently has “serious […]
Laws with cybersecurity requirements: time for the lawyer to wear a hoodie and for the CISO to put on a lawyer’s gown. [because we all know that’s how the other profession dresses 100% of the time] For years I have been stressing the need for cybersecurity and legal teams to work as one – and […]
Stunned to notice, while re-reading an important Opinion by an Advocate General to advise a client, that when he says “According to the case-law of the Court of Justice [of the European Union]”, he is actually quoting non-binding regulatory opinions (not from the CJEU) and only one CJEU judgment that doesn’t even come close to […]
With the IAB Europe judgment and some others, you may have missed the CJEU’s appellate judgment in the OLAF case on the EUI GDPR – which (also) deals with the concept of “personal data”. Here is my take: First, the EUI GDPR – Regulation 2018/1725 – is extremely similar to the GDPR itself, also as […]
Want to know what is the impact of today’s IAB Europe / TCF judgment for your business? (A couple of adtech / martech players have already reached out for advice, so I figure it may be a question many have) If you can’t find the answer to your specific situation in the IAB Europe FAQ […]
Summary + thoughts on the CJEU’s answer to the 2nd question (“is IAB Europe (joint) controller?”) in the�IAB Europe�& TCF case (C-604/22). [Again, I may be biased] – 55: Broad definition of “controller” in order to ensure an effective and complete protection of data subjects (C-210/16) 57: A natural or legal person who influence “for […]
Summary + thoughts on the CJEU’s answer to the 1st question (“is the TC String personal data?”) in the IAB Europe & TCF case (C-604/22). [I may be biased] – 33: CJEU data protection Directive case law is “in principle” also relevant for the GDPR, “given that this directive was withdrawn by and replaced by […]