DLA Piper’s Data Protection and Privacy practice delivers topical legal and regulatory updates and analysis from across the globe.
On 7 November, the European Data Protection Supervisor issued a set of guidelines that could be used by organisations to determine whether they act as controller, processor or joint controller. The Guidelines also contain easy-to-use checklists as well as a flowchart. On 7 November, the European Data Protection Supervisor (“the EDPS”) issued a set of […]
On 30 October 2019, the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit – “Berlin DPA”) imposed an administrative fine of about EUR 14.5 million against Deutsche Wohnen SE for infringements of the General Data Protection Regulation (GDPR). Facts and legal evaluation by Berlin DPA Deutsche Wohnen SE […]
An updated draft of China’s Amended Personal Information Security Specification (Amended PIS Specification) and proposed new amendments to the privacy specification for mobile apps (App Privacy Specification) were published this week, alongside brand new draft privacy regulations for the banking sector. These drafts will, if implemented, introduce some significant changes to current data protection practices […]
An updated draft of China’s Amended Personal Information Security Specification (“Amended PIS Specification”) and proposed new amendments to the privacy specification for mobile apps (“App Privacy Specification”) were published this week, alongside brand new draft privacy regulations for the banking sector. These drafts will, if implemented, introduce some significant changes to current data protection practices […]
On 29 October 2019 the Austrian national postal service (Post AG) published a press release titled “Milestones and outlook for 2019 and 2020”, wherein amidst the overall positive expectations for 2019 an accrual amounting to EUR 18,000,000 for a fine imposed by the Austrian Data Protection Authority (“Datenschutzbehörde“, or “DSB“) was mentioned. The fine was […]
On 16 October 2019 – after weeks of rumors and speculations – the German data protection authorities (‘DPAs’) published their guidelines (‘Guidelines’) for calculating administrative fines under Article 83 General Data Protection Regulation (‘GDPR’). The Guidelines are intended to guide enforcement action by German DPAs against business ‘undertakings’. They do not apply to individuals or associations […]
Multinationals increasingly turning to BCRs as providing more legal certainty for personal data transfers from the EU The EU General Data Protection Regulation (“GDPR”) brought about stricter data protection rules, and increased penalties for breaching these rules. For many multinationals this has led to reconsidering their framework for transferring personal data from the EU to […]
On 1 October 2019, the Court of Justice of the European Union (CJEU) has delivered its judgment in the Planet49 case, providing further clarity regarding the rules applicable to cookies. Facts and questions The case was brought to court by the Federation of German Consumer Organisations against Planet49, a company hosting a lottery on its […]
