About this site

DLA Piper’s Data Protection and Privacy practice delivers topical legal and regulatory updates and analysis from across the globe.

Read more

Categories
Key publications

EU Law on Cookies Guide

Privacy Matters
DLA Piper's Global Privacy & Data Protection Resource

Tag: Compliance

FRANCE: The CNIL publishes new standards on HR management and whistleblowing schemes

By Denise Lebeau-Marianna and Caroline Chancé   On 11 April 2019, the French Data Protection Supervisory Authority (CNIL) published two draft standards intending to provide practical guidance in relation to the processing of personal data for HR management and whistleblowing systems. The purposes of such standards is to: Assist businesses in their compliance process, and Help […]

Read More

FRANCE: THE FIRST CNIL STANDARD REGULATION FOR BIOMETRIC SYSTEMS IN THE WORKPLACE

By Denise Lebeau-Marianna (Partner) & Alexandre Balducci (Associate) Why did the CNIL adopt a specific regulation for the use of biometric data processing in the workplace? In accordance with Article 9 (4) of the General Data Protection Regulation (GDPR) which provides that “Member States may maintain or introduce further conditions, including limitations, with regard to […]

Read More

FTC Updates COPPA Guidance: Six-Step Compliance Plan for Your Business

Written by Michelle Anderson and Samantha Glazer In a June 21, 2017 blog post, the FTC announced updates to its Six-Step Compliance Plan for Your Business under the Children’s Online Privacy Protection Act (COPPA). The revisions make clear that the FTC considers new business models (e.g., voice-activated devices) and products (e.g., connected toys) to be covered under COPPA. […]

Read More

THE NETHERLANDS: DPA published phased plan to prepare for GDPR

By Richard van Schaik and Róbin de Wit Last week, the Dutch Personal Data Protection Authority (Autoriteit Persoonsgegevens, “AP”) published a step-by-step plan for organiations to prepare for the upcoming GDPR. The plan, consisting of 10 steps, reads as follows.   Awareness As a first step, key players within the organization (e.g. policymakers) need to […]

Read More

EUROPE: ECJ – Dynamic IP addresses may constitute personal data

By Jan Pohle and Jan Spittka In its landmark decision in the case Breyer v. Federal Republic of Germany (decision dated 19 October 2016, case number C-582/14), the European Court of Justice (ECJ) not only ended the long and tricky debate whether dynamic IP addresses constitute personal data even if the data controller processing the […]

Read More

Mobile Apps and Privacy — A Global Issue: Are you in Compliance with Australian Privacy Law?

By Alec Christie At the end of October, we talked about the California Attorney General’s enforcement of its privacy laws against mobile app providers, noting that the California AG sent letters to numerous mobile app providers alleging that they were in violation of California law by failing to maintain a privacy policy for the app. We emphasized that app providers should […]

Read More