The Court of Justice of the European Union (“CJEU“) has ruled on the conditions under which national data protection supervisory authorities may impose administrative fines on one or more data controllers for a violation of EU Regulation 679/2016 (“GDPR“). Let’s cover the specifics of the case: The case

On December 7, 2023, the Court of Justice of the European Union ruled that credit scoring constitutes automated decision-making, which is prohibited under Article 22 of the EU General Data Protection Regulation unless certain conditions are met.  Continue Reading https://www.huntonprivacyblog.com/2023/12/14/cjeu-rules-that-gdpr-prohibition-on-automated-decision-making-applies-to-credit-scoring/

Explore the intersection of privacy, cybersecurity and artificial intelligence related risks and board liabilities with Andy Serwin on our podcast. Andy Serwin, Co-Chair of the Global Data Protection, Privacy, and Security Practice at DLA Piper, is recognized as one of the world’s foremost privacy attorneys. In this edition of

France's data protection authority, the Commission nationale de l'informatique et des libertés, published recommendations for application programming interface data sharing. The guidance states data holders must ensure the security of any data shared using API, while eliminating risks associated with sharing sensitive data.Full story https://iapp.org/news/a/

Spain's data protection authority, the Agencia Española de Protección de Datos, published guidance on the use of biometric data for work and personal purposes, noting employers must follow the EU General Data Protection Regulation regardless of employee consent. The AEPD said consent is not a legal basis due to an

Inês Neves (Lecturer at the Faculty of Law, University of Porto | Researcher at CIJ - Centre for Legal Research | Member of the Jean Monnet Module team DigEUCit - A Digital Europe for Citizens. Constitutional and policymaking challenges) and Luísa Amaro de Matos (LL.M. in European Legal Studies – College of

On November 16, 2023, the European Data Protection Board published its Guidelines 2/2023 on the Technical Scope of Art. 5(3) of the ePrivacy Directive. Continue Reading https://www.huntonprivacyblog.com/2023/11/20/edpb-publishes-guidelines-to-clarify-scope-of-eu-cookie-notice-and-consent-requirements/

The response from Meta to privacy concerns was to introduce a paywall model with an ad-free subscription option for Facebook and Instagram, following significant legal scrutiny over personal data usage. After an announcement last August 2023, Meta has finally changed the legal basis used for processing its users’ data to