In this weeks blog we look at four articles covering a fine issued by the Polish DPA for €645,000 against an online retail company, an update on your position with using electronic signatures – watch out for your email signatures? Facebook settling a £500,000 penalty, without guilt for unfairly processing personal data of 87 million
In this weeks blog I have selected two main articles for your attention. The first confirms the acceptability of the EU-US Privacy Shield but warns that more enforcement must follow for breaches. The second is another Data Breach class action launched, this time against Equifax for a breach in 2017. The most notable fine this month
For this weeks blog, I have selected four articles that may be of interest to you, they are looking at a new structure for deciding how much of a fine will be imposed on organisations and how the Authority will calculate the amount. Talking about Cookie, again, the Planet49 decision and the implications of that
Week ending 18/10/19 We have seen lots of articles this week on a deal or no-deal situation and the possible issues with data transfers to and from the UK, once they leave and more about Cookies. This is the hot topic for this week, with the judgement of the Planet49 decision, clearly showing that consent
Here, we’ll cover the latest fines due to lack of data protection. Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) 2019-XX-XX €15,150 – Unknown Art. 33 GDPR Insufficient fulfilment of data breach obligations – The data controller did not fulfil its data breach obligations when a flash memory with personal data
Week ending – 11/10/19 In this week blog I have selected three articles of interest, firstly on the issue of using Consent as you main legal basis for processing. An interesting case recently investigated by the Belgian Data Protection Authority for requiring the use of electronic ID cards to receive a Loyalty Card. The second
In this weeks research note we have articles covering a broad range of topics including data sharing with the UK after Brexit, claiming compensation after a breach, new matrix for assessing fines in Germany, introduction of new DP Law in Cayman Islands, new guidance on cookies, lawful basis for processing and the rights of data
In this week’s research note we have articles covering a broad range of topics including insurance against fines, Brexit, Cookies and Right to Be forgotten: Of particular interest to our clients might be the article on insurability against GDPR fines. Cyber Security Insurance is relatively new and it is important that if you are considering
Review of private WhatsApp messages on work mobile phone deemed unlawful In June 2017 a Swiss-based company (the employer) dismissed an employee with immediate effect on the grounds that she had made wrongful use of her work mobile phone by installing WhatsApp and using it for private purposes, thereby infringing the employer’s terms of employment.
HR data: the GDPR and beyond The article focuses upon HR data and provides some suggestions as to what employers can/should be doing over the next twelve months. 1. Audit and analysis One of the key steps in preparing for the GDPR coming into force was carrying out an audit and analysing the data processed
"*" indicates required fields
