fbpx

EDPB seeks comments on its Guidelines on the processing of personal data for online services 

The European Data Protection Board welcomes comments on the Guidelines 2/2019 on on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects. Such comments should be sent to EDPB by 24/05/2019 at the latest.

More infoemation: Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects | European Data Protection Board

Content Groups Warn FTC Over ‘Troubling’ Application of EU Privacy Law

The FTC is reviewing privacy regulations and has been holding a series of hearings, including one scheduled for Tuesday and Wednesday.

Groups representing producers, filmmakers and other content creators are warning the Federal Trade Commission over the unintended consequences of adopting sweeping online privacy laws akin to those in the European Union.

They contend that the sweeping measure restricts the availability of domain name data from a database overseen by the Internet Corporation for Assigned Names and Numbers. They say that such information is critical to enforcement of online infringement.

Source: Content Groups Warn FTC Over ‘Troubling’ Application of EU Privacy Law – Variety

Deeper Dive: GDPR a Game-Changer for Data Breach Notification

When the EU General Data Protection Regulation (GDPR) took effect on May 25, 2018, it dramatically changed the way multinationals manage the reporting of personal data breaches.

It also substantially raised the stakes: Entities found to have violated the GDPR’s data security and breach reporting obligations could face much steeper regulatory fines than those available under U.S. laws.

Full article: Deeper Dive: GDPR a Game-Changer for Data Breach Notification

European Commission Issues Updated Q&A on Interplay between the GDPR and the Clinical Trials Regulation

On April 10, 2019, European Commission Directorate-General for Health and Food Safety issued a revised Q&A analyzing the interplay between the EU Clinical Trials Regulation (“CTR”) and the EU General Data Protection Regulation (“GDPR”).

The revised Q&A takes into account the opinion of the European Data Protection Board (“EDPB”) issued on January 23, 2019, on the same topic.

Full article: European Commission Issues Updated Q&A on Interplay between the GDPR and the Clinical Trials Regulation

Privacy UX: Better Cookie Consent Experiences

With the advent of the EU General Data Protection Regulation (GDPR) in May 2018, the web has turned into a vast exhibition of consent pop-ups, notifications, toolbars, and modals.

While the intent of most cookie-related prompts is the same — to get a user’s consent to keep collecting and evaluating their behavior the same ol’ way they’ve been doing for years — implementations differ significantly, often making it ridiculously difficult or simply impossible for customers to opt out from tracking.

Full article: Privacy UX: Better Cookie Consent Experiences

How Privacy Laws Are Changing To Protect Personal Information

There is growing movement to establish and even harmonize privacy laws to reduce the data governance deficit and promote the right to privacy and economic competitiveness.

Changes to privacy laws are being fuelled in part by growing public concerns with the idea of unfettered data accumulation and use. Regulation, often slow to adapt to the pace of innovation, is starting to catch up with the extent of personal information being transmitted every minute.

Full article: How Privacy Laws Are Changing To Protect Personal Information

French court issues decision on legality of Privacy Rules and Terms of Use under data protection and consumer law

Five years after the commencement of legal proceedings against Google by leading French consumer association UFC Que Choisir, the Paris “Tribunal de Grande Instance” (TGI), in a decision dated 12 February 2019, issued its ruling on the legality of the Google+ Terms of Use and Privacy Rules, both with respect to consumer law and personal data protection regulations.

Full article: French court issues decision on legality of Privacy Rules and Terms of Use under data protection and consumer law

Parenting club Bounty fined £400,000 for selling users’ data

The parenting club Bounty has been fined £400,000 – one of the largest penalties possible – for sharing its data with marketing agencies without users’ permission.

Company illegally shared 34.4 million records with 39 companies – data brokers including Acxiom, Equifax and Sky – without securing consent from their users.

Source: Parenting club Bounty fined £400,000 for selling users’ data

Hackers publish personal data on thousands of US police officers and federal agents

A hacker group has breached several FBI-affiliated websites and uploaded their contents to the web, including dozens of files containing the personal information of thousands of federal agents and law enforcement officers.

The hackers breached three sites associated with the FBI National Academy Association, a coalition of different chapters across the U.S. promoting federal and law enforcement leadership and training located at the FBI training academy in Quantico, VA.

The hackers then put up for download on their own website the data containing about 4,000 unique records, including member names, a mix of personal and government email addresses, job titles, phone numbers and their postal addresses.

Source: Hackers publish personal data on thousands of US police officers and federal agents | TechCrunch

>