News & Analysis as of October 19, 2024

Data Protection Authority

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

GDPR Enforcement: Lessons from Recent Data Privacy Penalties

Pillsbury - Consumer Protection Dispatch on 10/15/2024

Recent decisions by the French data protection authority (CNIL) have highlighted the importance of GDPR compliance, particularly in the areas of data retention, consent for processing sensitive personal data, and marketing...more

Massive fine for Uber of EUR 290 million

Ius Laboris on 8/28/2024

On 26 August the Dutch Data Protection Authority (DPA) fined Uber EUR 290 million for a breach of the General Data Protection Regulation (GDPR). Following a number of complaints from French Uber drivers, the DPA found that...more

Dutch Data Protection Authority Warns that Using AI Chatbots Can Lead to Personal Data Breaches

Alston & Bird on 8/12/2024

On August 6th, the Dutch Data Protection Authority (DPA) issued guidance cautioning companies about the potential data protection risks associated with the use of Artificial Intelligence (AI)-powered chatbots....more

UK - When is a data protection claim not a data protection claim?

A&O Shearman on 7/17/2024

In a recent case, Pacini & Anor v Dow Jones & Company Inc., the publisher of the Wall Street Journal unsuccessfully applied to strike out a data protection claim concerning two historic articles....more

EDPB Provides Guidance On Determining A 'Main Establishment' And The 'One-Stop-Shop' Mechanism

Mayer Brown on 2/29/2024

The opinion was issued in response to a request by the French Data Protection Authority and provides guidance on the conditions for determining a controller's main establishment where that controller has establishments in...more

Italian Data Protection Authority Alleges Breaches of GDPR by ChatGPT Platform

Robinson+Cole Data Privacy + Security Insider on 2/2/2024

On January 29, 2024, the Italian Data Protection Authority (Garante) notified OpenAI of breaches of data protection laws involving its ChatGPT platform....more

France CNIL calls for comments on its draft recommendation on security of critical data processing operations

A&O Shearman on 9/15/2023

The French supervisory authority (CNIL) asked for public comments on its draft recommendation on data security in relation to processing that presents particularly high risks to individuals or to the public interest (the...more

Making the Case for Information Governance and Why You Should Address it Now

Lighthouse on 8/17/2021

You know that cleaning out the garage is a good idea. You would have more storage space and would even be able to put the car into the garage, which is better for security, for keeping it clean, and for ensuring an easy start...more

Data Breach Enforcement Is a Global Risk

BakerHostetler on 6/24/2021

The 2021 edition of BakerHostetler’s annual Data Security Incident Response Report highlights some regulatory enforcement trends we saw from the European Union (EU) data protection authorities (DPAs) during the past year. EU...more

Late Breach Notice In Europe Leads To Nearly €500K Fine

Goodwin on 4/12/2021

On 31 March 2021 the Dutch Data Protection Authority (DPA) announced that it fined the online reservation platform Booking.com €475,000 for failing to notify the DPA of a data breach within the timeline established in the...more

International Data Protection Update – First Quarter 2021

BakerHostetler on 3/30/2021

This quarterly update highlights some of the international data protection issues that have caught our attention, and the attention of our clients, in the past three months....more

Jones Day Global Privacy & Cybersecurity Update | Vol. 27

Jones Day on 1/8/2021

United States - Regulatory—Policy, Best Practices, and Standard - NIST Unveils Draft Guidance to Protect Critical Infrastructure - On October 22, 2020, the National Institute of Standards and Technology ("NIST")...more

Twitter fined $546,000 in December 2020 by European Data Protection Authority for 2019 Breach Notification Violations

Robinson+Cole Data Privacy + Security Insider on 1/5/2021

The Irish Data Protection Commission (DPC) fined Twitter 450,000 euros (about US$546,000) for failing to timely notify the Irish DPC within the required 72 hours of discovering a Q4 2018 breach involving a bug in its Android...more

Hamburg Data Protection Supervisory Authority Issues Record-Breaking €35 Million Fine against H&M

K&L Gates LLP on 10/23/2020

As announced by a press release dated 1 October 2020, the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) has issued a fine of €35,258,707.95 (approx. US$41.2 million) against H&M Hennes &...more

Blackbaud Data Breach: Do You Need to Notify Affected Individuals or EU Data Protection Authorities?

McGuireWoods LLP on 7/28/2020

On July 16, 2020, Blackbaud, a U.S. based cloud computing provider and one of the world’s largest providers of education administration, fundraising, and financial management software, notified users of its services that it...more

Cyber Security Trends: Tips from recent UK enforcement activity – Part 5

BCLP on 6/30/2020

In this part of our briefing series, we look at how individual reactions to a data breach can shift the dial from a regulator’s perspective. Recent decisions have shown that the ICO will look behind a company’s public...more

Jones Day Global Privacy & Cybersecurity Update | Vol. 24

Jones Day on 1/10/2020

UNITED STATES - Regulatory—Policy, Best Practices, and Standards - FTC Submits Comment on the Preliminary Draft for the NIST Privacy Framework - On October 24, 2019, the Federal Trade Commission ("FTC") announced that...more

GDPR Compliance

Best Best & Krieger LLP on 12/2/2019

BB&K's Christina Morgan Talks About Data Privacy in Riverside Lawyer Magazine - Due to rising concerns about privacy in the digital world, in April 2016, the European Union adopted the General Data Protection Regulation...more

German Data Protection Authorities Adopt New GDPR Fine Model

Latham & Watkins LLP on 10/4/2019

Data protection violations may result in German authorities imposing significantly increased fines. The Conference of the German Data Protection Authorities (DSK) ? the joint body of the German data protection authorities...more

High GDPR Fines: German Data Protection Authority Joins the Club

Latham & Watkins LLP on 8/28/2019

Following in the footsteps of the CNIL and the ICO, the Berlin DPA will impose a multimillion-euro fine for breach of the GDPR. The Berlin Data Protection Authority (Berlin DPA) recently announced that it will issue a...more

First-Time Fine Imposed for GDPR Violations Involving Employee Data Breach

Barnea Jaffa Lande & Co. on 8/19/2019

The Hellenic Data Protection Authority (HDPA) recently imposed a EUR 150,000 fine on the international consulting firm PwC for its violations of the new European data protection regulations (the General Data Protection...more

Privacy and Data Security Alert | August 2019

Shook, Hardy & Bacon L.L.P. on 8/6/2019

French Data Protection Authority Issues Guidelines on Cookie Use - CNIL, France’s data protection authority, has released new rulesfor obtaining consumer consent under the GDPR for companies using cookies and other tracking...more

The ICO Updates Its Data Sharing Code of Practice

Hogan Lovells on 8/5/2019

On 9 July 2019 the UK data protection authority (ICO) updated its Data Sharing Code of Practice (first published in 2011) (Code). On the same day, the ICO also announced its intention to fine Marriott International just over...more

Privacy & Cybersecurity Update - May 2019

Skadden, Arps, Slate, Meagher & Flom LLP on 6/3/2019

In this month's edition of our Privacy & Cybersecurity Update, we examine expanded data breach notification laws in New Jersey and Washington state, as well as the SEC's risk alert regarding cloud-based storage solutions. We...more

A Year of GDPR: Five Recommendations to Help Limit Regulatory Scrutiny

Akin Gump Strauss Hauer & Feld LLP on 5/31/2019

A year ago, on May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) came into force. With its extraterritorial scope and detailed requirements, the GDPR aimed to change the approach to personal data...more

48 Results

View per page

Page: of 2

General Data Protection Regulation (GDPR) › Data Breach › Data Protection Authority

"My best business intelligence, in one easy email…"