News & Analysis as of September 27, 2024

Corporate Fines

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

International Data Transfers Remain Under EU and UK Regulatory Scrutiny

Ogletree, Deakins, Nash, Smoak & Stewart,... on 9/26/2024

Organisations that make international transfers of personal data have undergone significant challenges and changes over the last few years. With the invalidation of the Privacy Shield agreement in 2020 and the introduction of...more

GDPR – Company Fined for Improper Data Collection

Barnea Jaffa Lande & Co. on 3/27/2024

The French Data Protection Authority (CNIL) recently imposed a EUR 310,000 fine, representing 1% of its turnover, on FORIOU, a telemarketing company promoting loyalty programs. The fine stemmed from FORIOU’s use of...more

Privacy Speaks: A clearer view?

BCLP on 1/19/2024

Clearview AI Inc's successful challenge to the ICO’s £7.5 million fine focused on the limits of the UK GDPR’s jurisdictional reach, succeeding on the grounds that Clearview’s processing activities were outside the scope of...more

CNIL Fines Health Website for Unlawful Data Processing

Latham & Watkins LLP on 6/12/2023

The French Data Protection Authority imposed a €280,000 fine for GDPR infringements and a €100,000 fine for violation of French cookie rules. On 11 May 2023 the French Data Protection Authority (the CNIL) handed down its...more

Irish Data Protection Commission Orders Meta Ireland to Suspend Facebook Data Transfers to the US and Imposes Record GDPR Fine of...

Latham & Watkins LLP on 5/23/2023

The final decision of the Irish Data Protection Commission (IDPC) in relation to the transfers of EU/EEA Facebook user data by Meta Platforms Ireland Limited (Meta Ireland) to its processor, Meta Platforms, Inc., in the US...more

DSGVO-Bußgelder: Reicht eine „strict liability“ oder ist der Nachweis eines Verschuldens nötig?

Latham & Watkins LLP on 4/18/2023

Der Europäische Gerichtshof (EuGH) wird bald darüber entscheiden, ob europäische Datenschutzbehörden künftig leichter Bußgelder nach Art. 83 DSGVO gegen Unternehmen verhängen können. Diese Entscheidung kann großen Einfluss...more

EDPB Adopts Guidelines on Calculation of GDPR Fines and on Facial Recognition Technology in Law Enforcement

WilmerHale on 5/31/2022

On May 16, 2022, the European Data Protection Board (EDPB), the independent body of data protection supervisors that promotes consistent data protection rules and application thereof throughout the European Union (EU),...more

Italian Supervisory Authority Imposes 20 Million EUR Fine on Controller Outside of Europe

Alston & Bird on 3/11/2022

The Italian Garante per la Protezione dei dati Personali (‘Italian SA’) published a decision of February 10, 2022 in which it imposes a 20 million EUR fine on a company outside of Europe for violation of the EU General Data...more

Europe: Amazon Slapped with Record-Breaking Privacy Fine

Barnea Jaffa Lande & Co. on 8/25/2021

E-commerce giant Amazon reported in its financial statements at the end of last month that the Luxembourg data protection authority had imposed on it a fine totaling EUR 746 million. The fine appears to have been laid on...more

Comply or Get Fined: 2020 GDPR Fines are the Highest on Record

Epiq on 1/13/2021

The European Union’s (EU) General Data Protection Regulation (GDPR) has been in effect since May 2018. The law’s goal of protecting EU citizens’ personal information and privacy seems to be coming into fruition. In the past,...more

H&M Fined EUR 35 Million for Violating Employee Privacy in Germany

Barnea Jaffa Lande & Co. on 10/26/2020

In early October, the Data Protection Authority in Hamburg, Germany announced that the clothing retailer H&M committed severe violations of its employees’ privacy. Because of these European General Data Protection Regulations...more

French Data Protection Authority Hands Down First Sanction as Lead Authority

Latham & Watkins LLP on 9/3/2020

The CNIL has imposed a €250,000 fine on an online retailer for GDPR infringements in cooperation with other EU supervisory authorities. Founded in 2006 and headquartered in France, Spartoo SAS (Spartoo) is one of the...more

French State Council Upholds CNIL’s €50M Fine for GDPR Violations

Latham & Watkins LLP on 7/6/2020

The Council decision contains useful considerations and clarifications on the “one-stop shop” mechanism, transparency obligations, and consent for targeted advertising. On 19 June 2020, France’s Highest Administrative...more

Highest Administrative Court in France Upholds Google’s €50 Million Fine

Orrick, Herrington & Sutcliffe LLP on 6/30/2020

On January 21, 2019, the CNIL (the French data protection authority) issued a fine of €50 million to Google under the General Data Protection Regulation (the “GDPR”) for its failure to (1) provide notice in an easily...more

First-Time Fine Imposed for GDPR Violations Involving Employee Data Breach

Barnea Jaffa Lande & Co. on 8/19/2019

The Hellenic Data Protection Authority (HDPA) recently imposed a EUR 150,000 fine on the international consulting firm PwC for its violations of the new European data protection regulations (the General Data Protection...more

ICO Issues First Intentions to Fine Under the GDPR

Proskauer on Privacy on 7/25/2019

GDPR fines are seemingly like buses, you wait over a year for enforcement action by the UK’s data supervisory authority, the ICO, and then two come along at once – and with quite dramatic effect. The ICO has stretched its...more

Announced GDPR Fine Against Marriott Raises Reporting and Coverage Implications

White and Williams LLP on 7/16/2019

Last week on July 9, 2019, the United Kingdom’s Information Commission Office (ICO) announced its intention to fine Marriott International £99.3 million (about $124 million), or 2.5% of Marriott’s worldwide annual revenue, in...more

January’s Privacy Blizzard

Eversheds Sutherland (US) LLP on 2/5/2019

As predicted, the start of 2019 provided scant respite from the frenetic pace of privacy and cybersecurity developments during 2018. This past month alone, in a blizzard of activity, regulators amended regulations and...more

Google Fine Signals GDPR Enforcement Priorities and Complexities

Dorsey & Whitney LLP on 1/31/2019

The French Data Protection Authority, CNIL, has fined Google $50 Million Euros for Google’s alleged failure to comply with the EU’s sweeping General Data Protection Regulation (GDPR). The enforcement action is significant for...more

Google Hit With Large Fine For Non-Compliance With GDPR

Epiq on 1/31/2019

The General Data Protection Act has been making headlines for quite some time now, especially the potential fines that can be levied for non-compliance. Since the law’s recent enactment in May 2018, legal professionals and...more

Google Fined $57M by French Data Protection Authority for Alleged Violations of GDPR

Robinson+Cole Data Privacy + Security Insider on 1/28/2019

France’s data protection authority (DPA) (CNIL) recently announced that it has fined Google $57 million for violations of the General Data Protection Regulation (GDPR). This is the first fine by a European DPA of an American...more

German GDPR Fine Proceedings Conclude Favourably for Defending Company

Latham & Watkins LLP on 12/28/2018

Germany’s first GDPR fine offers lesson for companies planning a data breach policy. In November 2018, Germany’s first fine under the General Data Protection Regulation (GDPR) was imposed — and it was much lower than many...more

The Sky's the Limit: The Cathay Pacific and British Airways Data Hacks, and the GDPR Six Months On

Katten Muchin Rosenman LLP on 12/20/2018

Cathay Pacific, the Hong Kong airline, is the latest airline to face a cyber-attack; in this case, one that has resulted in the theft of personal data of up to 9.4 million passengers. The hackers gained "unauthorised access"...more

GDPR Is Here: Not Yet Compliant? What Employers Need to Consider

Fisher Phillips on 5/31/2018

After much anticipation, the General Data Protection Regulation (GDPR) finally went into effect on May 25, 2018. For employers, that means some enhanced employee rights, and the risk of significant penalties for...more

How the GDPR Will Impact U.S.-Based Companies (Part 1)

Schwabe, Williamson & Wyatt PC on 5/7/2018

On May 25, 2018, the European Union (“EU”) will implement the most robust regulation of privacy data that the digital world has ever seen—commonly known as the General Data Protection Regulation, or “GDPR.” The GDPR is the...more

26 Results

View per page

Page: of 2

General Data Protection Regulation (GDPR) › Personal Data › Corporate Fines

"My best business intelligence, in one easy email…"