Court of Justice EU June 22, 2023, IT 4301, ECLI:EU:C:2023:501 (J.M.v. Pankki) In this case, for the benefit of J.M., who worked for a while at the bank Pankki S and was also a customer there himself, some questions are put to the

Amsterdam District Court May 25, 2023, IT 4295; ECLI:NL:RBAMS:2023:3210 (Applicant/ING) This case involved a large-scale collection fraud in which the applicant was involved. On an online platform of Universe.com, people could register events and buy tickets to these events. The payment transactions were arranged

General Data Protection Regulation. BKR must delete the credits it registers in the Central Credit Information System (hereafter CKI) at the request of the credit providers, or at least at the request of the credit providers, the particularity codes it registers (Machine translated) https://deeplink.rechtspraak.nl/uitspraak?id=ECLI:

Consumer sues cell phone provider for misappropriation of crypto after simswap fraud. Can phone provider successfully invoke limitation of liability in its terms and conditions? (Machine translated) https://deeplink.rechtspraak.nl/uitspraak?id=ECLI:NL:RBDHA:2023:5430

GDPR access request of personal data. Inadmissible petition filed late. (Machine translated) https://deeplink.rechtspraak.nl/uitspraak?id=ECLI:NL:RBAMS:2023:2523

Labor. The requirement imposed by ANSA on employees to use its biometric time clock is not unlawful in the sense of an impermissible invasion of their right to privacy. ANSA has not unilaterally changed the terms and conditions of employment of air traffic controllers in the sense of requiring air

GDPR requests from lawyer of a court to the board of the court and the Judicial Council in connection with an employment dispute (Machine translated) https://deeplink.rechtspraak.nl/uitspraak?id=ECLI:NL:GHDHA:2023:875

Headline March 20, 2018, elaboration March 28, 2018. Hoster ordered to provide NAW data in summary proceedings. Unmistakably wrongful conduct Anonymous Person.Data Protection Act does not prevent conviction. (Machine translated) https://deeplink.rechtspraak.nl/uitspraak?id=ECLI:NL:RBAMS:2018:1873

France’s Constitutional Court ruled the government could proceed with installing artificial intelligence-powered surveillance cameras ahead of the 2024 Olympics in Paris, Politico reports. In its decision, the court ruled the installation of the cameras did not erode privacy rights because human operators will "permanently control (of) 'the development, implementation

Dissolution because of a disturbed employment relationship, serious culpability of the employer because of insufficient reintegration in the first track and justified complaints of the employee about privacy violations. Regarding the amount of the fair compensation, it was considered that hardly any relevant income damage had been suffered because the

On 4 May 2023, European Court of Justice (“CJEU”) delivered its judgment regarding the interpretation of Article 82 of the General Data Protection Regulation (“GDPR”). The CJEU held that mere infringement of the GDPR does not give rise to a right to compensation. However, there is no requirement for the

On May 4, 2023, the California Privacy Protection Agency Board announced that it will hold a public meeting on May 15, 2023 to discuss California Privacy Rights Act of 2020 regulations proposals and priorities and other CPPA activities. Continue Reading https://www.huntonprivacyblog.com/2023/05/08/cjeu-determines-that-a-mere-infringement-of-the-gdpr-is-not-sufficient-to-require-compensation/

Resolution with external independent examination The issue concerns a resolution scheme declared applicable to a Spanish bank by the Joint Resolution Board. This is complicated financial law matter and I will leave those financial aspects for the moment (thankfully). In the context of resolution, one of the issues to be

The right to compensation laid down in the GDPR exists only if the following three conditions are cumulatively met: a processing of personal data in violation of the provisions of the AVG, damage suffered by the data subject and a causal link between that unlawful processing and that damage. Thus,

Ziggo is required to forward a warning letter from Brein to its customer through whose IP address a library of e-books is accessible to Internet users online and, if necessary, to provide the name and address details of this customer to Brein. Both Ziggo and Brein may process these (criminal)

The processing of teachers' personal data when live-streaming public education that they teach via videoconference falls within the material scope of the AVG. A national regulation that does not meet the conditions of the AVG cannot be considered a detailed regulation within the meaning of the AVG. The application of

Authors: Eleni Alexiou, Katharina Pauls Although key German provisions are in breach of EU law, there will only be little changes in practice – What still needs to be taken into account On 30 March 2023, the European Court of Justice (ECJ) ruled on the requirements for national legal bases regarding

After seven years of ambiguity regarding the German law on data retention, the German Federal Constitutional Court ruled it inapplicable and incompatible with EU law on Thursday (March 30). https://www.euractiv.com/section/data-protection/news/german-constitutional-court-confirms-generalised-data-retention-illegal/

Gelderland District Court March 22, 2023, IT 4243; ECLI:NL:RBGEL:2023:1575 (plaintiff v. De Volksbank) In this lawsuit, the plaintiff sued De Volksbank for processing personal data in various administrations and registers. The plaintiff claims that it is entitled to access this personal data and information about the

Gelderland District Court March 22, 2023, IT 4243; ECLI:NL:RBGEL:2023:1575 (plaintiff v. De Volksbank) In this lawsuit, the plaintiff sued De Volksbank for processing personal data in various administrations and registers. The plaintiff claims that it is entitled to access this personal data and information about the

The Higher Regional Court of Celle overturned the decision of a lower court, holding that the motivation of a data subject's Article 15 GDPR access request is irrelevant to the legitimacy of the request. https://gdprhub.eu/index.php?title=OLG_Celle_-_8_U_165/22

When the Dutch Tax Administration answers a data subject's access request, it should search beyond the general system it uses and provide specific information as to the purpose of the processing, the potential recipients and the source of the data. https://gdprhub.eu/index.php?title=Rb._Rotterdam_-_ROT_

Blogpost 14/2023 The recent case of Norra Stockholm Bygg represents another important data protection decision from the ECJ. The decision addresses the application of the General Data Protection Regulation (‘GDPR’) to Member State courts when they are handling personal data, and therefore has important practical significance for civil procedure

District Court of North Holland February 15, 2023, IT 4241; ECLI:NL:RBNHO:2023:2471 (Pit v. OfficeGrip Holding c.s.) This case deals with the question of whether a new ICT supplier is liable for damages resulting from the loss of data from its client's old ICT environment. The

Advocate General of the Court of Justice of the European Union Priit Pikamäe ruled automated processing to determine an individual's probability of obtaining a loan constitutes profiling under the EU General Data Protection Regulation. Pikamäe's decision states the "GDPR establishes a 'right' for the person concerned not to be subject