Can't find what you're looking for? Try the search bar!
So, while we wait to see the EDPB’s Opinion on “Pay or OK”, a few things to look out for: (i) is the EDPB really going to push for a “third” option for large platforms? On what authority? (ii) I have been observing for a while that data protection regulators are adopting increasingly anti-business practices, […]
Pay or OK” is one of the big topics of right now – and ahead of the EDPB’s expected Opinion aimed at Meta’s approach and further Guidelines with a broader scope, IAB Europe has published a useful reminder that “even on digital content or services that may be well-suited for contextual, the selling of non-personalised […]
Great to see so many big and small(er) names of the adtech, publishing and metrics world have already registered for our 2h complimentary webinar taking place on 16 May at 3pm CET / 9am EDT, entitled “Adtech & Metrics: EU Law Evolutions and Tomorrow�s Legal Strategies”. GDPR, ePrivacy, DMA (Digital Markets Act) and DSA (Digital […]
Personal data is a relative concept, EU General Court stresses in a new judgment – “it is necessary to put oneself in [the relevant organisation’s] position in order to determine whether the information transmitted to it relates to �identifiable persons�. The judgment reaffirms the conditional findings of the CJEU in its Breyer judgment (which found […]
My reading right now – the ICO recognising (unlike the EDPB) the relative nature of personal data and the moving scale of identifiability. This guidance on Pseudonymisation & Anonymisation looks more promising than what the EDPB had published! Link: https://lnkd.in/eN7DacRV GDPR privacy data protection
Are Guidelines of the European Data Protection Board “challengeable acts”, and could you attack them before the General Court of the EU? What about Art. 64 GDPR Opinions of the EDPB? The Advocate General’s Opinion in the WhatsApp v EDPB case (re EDPB Binding Decisions) suggests that the answer could be “yes” regarding those Art. […]
Not convinced by the reasoning of CJEU Advocate General Szpunar in the Inteligo Media case on the notion of “direct marketing”. Why? (i) The reasoning on Art. 13(2) of the ePrivacy Directive (ePD) seems flawed. The AG suggests that “Article 13(2) [ePD] deals comprehensively with the question of consent” (para. 50) and that its lex specialis […]
A step towards EDPB accountability? Advocate General sides with WhatsApp in CJEU case on whether EDPB binding decisions can be challenged directly. Sure, it’s “just” an AG Opinion, but it’s well researched and argued. What it says: 1. What is a challengeable act? The AG says that some circumstances are *irrelevant* to assessing whether an […]
NOYB-instigated Belgian DPA decision overturned on appeal for abuse of data subject rights. Key excerpt below, but paragraphs 29-38 of the judgment of the Market Court will be of interest to anyone facing data protection / GDPR complaints that are coordinated by litigating organisations – though the same reasoning may not be accepted in all […]
7 points after giving another in-depth presentation to global businesses on the path to NIS2 compliance (with a flavour of DORA and GDPR): (i) Having a broad enough team (“multidisciplinary” / “multi-stakeholder” / however you wish to call it) is not easy for many organisations, irrespective of their size (this is nothing new, but it […]