News & Analysis as of October 20, 2024

Enforcement Actions

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

Will the U.S. Have a GDPR? With Rachael Ormiston of Osano

Osano on 7/9/2024

In this episode of The Privacy Insider Podcast, host Arlo Gilbert is joined by Rachael Ormiston, Head of Privacy at Osano, to dive into the complex world of U.S. privacy regulations. How does the U.S. view privacy differently...more

Solar Winds Under GDPR: Corporate Responsibility and Risks in Data Protection

Thomas Fox - Compliance Evangelist on 2/13/2024

The General Data Protection Regulation (GDPR) has brought about significant changes in the way organizations handle data protection and privacy. It emphasizes the importance of transparency and honesty in disclosing data...more

What to Expect in 2023: Trends in Cybersecurity & Data Privacy

Foley & Lardner LLP on 3/31/2023

The New Year is in full swing and it’s time to consider the top trends in cybersecurity & data privacy our team expects to see throughout 2023. It will be an exciting year due to the myriad of new laws coming into effect, and...more

U.S. messaging service fined €5.5 million for GDPR violations

Orrick, Herrington & Sutcliffe LLP on 1/25/2023

On January 19, the Irish Data Protection Commission (DPC) announced the conclusion of an inquiry into the data processing practices of a U.S.-based messaging service’s Ireland operations and fined the messaging service €5.5...more

Dechert Cyber Bits - Issue 21

Dechert LLP on 9/30/2022

US Federal Appellate Court Issues Opinion on Proof of Injury in Data Breach Cases - On September 2, 2022, the U.S. Court of Appeals for the Third Circuit reinstated a class action lawsuit that had previously been dismissed...more

French Data Protection Authority Fines Processor for Failing to Enter into Data Processing Agreement

Orrick, Herrington & Sutcliffe LLP on 4/27/2022

France’s data protection authority, the Commission Nationale de Informatique et des Libertés (“CNIL”), has issued one of its highest General Data Protection Regulation (“GDPR”) sanctions to-date against Dedalus Biologie SAS...more

Belgian DPA Fines IAB: Rough Waters Ahead for Ad Industry

Dechert LLP on 2/7/2022

On February 2, 2022, the Belgian Data Protection Authority (“DPA”) issued a decision finding that the Interactive Advertising Bureau ("IAB”) Europe’s Transparency and Consent Framework (“TCF”) violates key provisions of the...more

Privacy Update: FCC Seeks Public Comment on the Current and Future Regulation of the "Internet of Things"

ArentFox Schiff on 10/13/2021

FCC Seeks Public Comment on the Current and Future Regulation of the “Internet of Things” - The FCC is requesting public comment in a proceeding that will help determine the scope and nature of regulation of the “Internet of...more

Whether You Like it or Not, Cookies are Back on the Menu and UK and EU Data Protection Authorities are Taking Enforcement Action

Orrick, Herrington & Sutcliffe LLP on 7/27/2021

The French data protection authority, La Commission nationale de l’informatique et des libertés ("CNIL"), one of Europe's ("EU") most active data protection regulators, has continued to focus on the lawfulness of the use of...more

[Webinar] Mitigating Risk Exposure Under Evolving Global Cookies Regulations - May 19th, 12:00 pm - 1:00 pm EDT

McDermott Will & Emery on 5/10/2021

The regulation of cookies and similar tracking technologies is rapidly evolving, not only in the European Union and United Kingdom but also in the United States and globally. If you have visited a website recently, you might...more

International Data Protection Update – First Quarter 2021

BakerHostetler on 3/30/2021

This quarterly update highlights some of the international data protection issues that have caught our attention, and the attention of our clients, in the past three months....more

Spanish DPA shakes the privacy status quo in Spain – highest fines yet on personal data

Hogan Lovells on 3/11/2021

The Spanish Data Protection Agency (“Spanish DPA”) decided to start 2021 the same way it ended 2020: by imposing the highest fines to date (EUR 5,000,000 and 6,000,000) to two large Spanish financial entities. ...more

US Cybersecurity and Data Privacy review and update: Looking back on our 2020 articles and planning ahead for 2021

Eversheds Sutherland (US) LLP on 2/10/2021

It was a tumultuous year for privacy and cybersecurity, and further uncertainty is all but guaranteed. The key to navigating this volatility, as 2020 proved, is to develop and maintain a proactive, agile and holistic data...more

[Virtual Event] 2021 Alaska Regional Compliance & Ethics Conference - February 26th, 8:25 am - 4:30 pm AKST

Society of Corporate Compliance and Ethics... on 1/20/2021

Our Virtual Regional Compliance Conferences provide updates on the latest news in regulatory requirements, compliance enforcement, and strategies to develop effective compliance programs. Watch, listen, and ask questions from...more

Twitter fined $546,000 in December 2020 by European Data Protection Authority for 2019 Breach Notification Violations

Robinson+Cole Data Privacy + Security Insider on 1/5/2021

The Irish Data Protection Commission (DPC) fined Twitter 450,000 euros (about US$546,000) for failing to timely notify the Irish DPC within the required 72 hours of discovering a Q4 2018 breach involving a bug in its Android...more

German court drastically reduces GDPR fine

Hogan Lovells on 11/18/2020

Germany has seen a couple of record GDPR fines since the German Data Protection Authorities (DPA) issued their guidance paper on how to measure GDPR fines in October 2019. One of these DPA sanctions was recently subject to...more

ICO and CNIL Levy Landmark Fines Against British Airways and Marriott for 2018 Data Breaches

Kramer Levin Naftalis & Frankel LLP on 11/5/2020

On Oct. 30, 2020, the United Kingdom’s data protection authority, the Information Commissioner’s Office (ICO), in connection with France’s Commission nationale de l’informatique et des libertés (CNIL), announced the largest...more

Five conclusions from the UK ICO's British Airways fine

Hogan Lovells on 10/29/2020

On 16 October the UK Information Commissioner (ICO) confirmed that it had imposed a fine of £20m on British Airways (BA) for infringing the GDPR by failing to protect the personal data of approximately 400,000 of its...more

EU Data Protection Authority Levies Its First Fine for Violations of the GDPR

Carlton Fields on 9/9/2020

The French Data Protection Authority, CNIL, has levied its first fine for enforcement of the General Data Protection Regulation (GDPR). The enforcement target, Spartoo, is a French online shoe retailer that makes its website...more

Update on Global Data Privacy Regulations by John Jackson

Jackson Walker on 8/26/2020

Cybersecurity and data privacy regulations were complicated well before the global pandemic. Since COVID-19 swept the world, Brazil has delayed enacting its new general data protection law, California's CCPA has gone through...more

Twitter Tagged in Europe, But Regulators Don’t Agree On Ruling

Womble Bond Dickinson on 8/25/2020

Twitter is likely to suffer significant fines in the EU for its handling of a data incident, but regulators are conflicted about their response. In late 2018, Twitter experienced a data breach involving an exploitation of a...more

Privacy & Cybersecurity Update - July 2020

Skadden, Arps, Slate, Meagher & Flom LLP on 8/6/2020

In this month's edition, we examine the Court of Justice of the European Union's decision invalidating the EU-U.S. Privacy Shield framework, as well as the U.S. government's response to the decision. We also examine two...more

Cyber Security Trends: Tips from recent UK enforcement activity - Part 4

BCLP on 6/3/2020

When the regulator has decided to investigate your organisation following a data breach, the remit for the investigation will be wide-ranging and go beyond the narrow circumstances of the breach. Recent decisions shed useful...more

Cyber Security Trends: Tips from recent UK enforcement activity – Part 3

BCLP on 4/1/2020

Key to recent ICO decisions has been the ICO’s assessment of the extent and quality of communications with affected individuals and the regulator itself. It is clear the ICO sees certain behaviours (such as the setting up of...more

Cyber Security Trends: Tips from recent UK enforcement activity – Part 2

BCLP on 3/20/2020

In this part of our briefing series, we cover how prior regulatory enforcement action affects the assessment of sanctions and some pitfalls associated with undertaking internal security audits. Who is this relevant for?...more

61 Results

View per page

Page: of 3

General Data Protection Regulation (GDPR) › Cybersecurity › Enforcement Actions

"My best business intelligence, in one easy email…"