Data protection supervision

All news and posts of our editorial team on the topic

TikTok: Authorities impose million-dollar fine
The Irish data protection supervisory authority DPC has imposed a heavy fine on the operator of the online video service TikTok, which is particularly popular with children, teenagers and young adults: the operator is now to pay €345 million. This was announced by the authority on Friday afternoon. The reason is the provider’s handling of […] continue reading →
Meta fined billions: a new dawn for data protection
Meta is to pay a fine of €1.2 billion, according to the European data protection authorities. It is not only the amount of the fine that marks a turning point in data protection. continue reading →
Wojciech Wiewiórowski: ‘Decisive moment for GDPR’
Almost five years ago, the transition period for the General Data Protection Regulation (GDPR) ended. In an interview, European Data Protection Supervisor Wojciech Wiewiórowski explains why he believes enforcement is now at a crucial point. continue reading →
Federal Press Office wants to continue using Facebook
The Press and Information Office of the Federal Government (BPA) filed a complaint with the Cologne Administrative Court on Thursday against a decision by the Federal Data Protection Commissioner (BfDI) Ulrich Kelber. At the end of February, Kelber had prohibited the agency from utilizing the Facebook page “Federal Government” in a kind of test case. […] continue reading →
EU-wide cooperation between data protection supervisors
The EU Commission plans a proposal for a regulation with the goal of improving cooperation between data protection supervisory authorities. The background to the initiative is problems with GDPR enforcement. continue reading →
Europe’s data protectors take tougher approach to Meta
Europe’s data protection regulators are stepping up the pace in their dealings with US corporations. Yesterday’s decision by the EU Data Protection Committee caused a stir. Whether Meta Group’s Facebook, Instagram, and WhatsApp are in breach of the General Data Protection Regulation (GDPR) is now hardly debatable. But the method is legally decisive – among […] continue reading →
CNIL imposes maximum fine on Clearview AI
The French data protection supervisory authority Commission Nationale de l’Informatique et des Libertés (CNIL) imposed the highest possible fine under the General Data Protection Regulation of €20 million on the US facial recognition provider Clearview AI. In addition, CNIL ordered Clearview AI to cease all data collection and to verifiably delete the unlawfully collected data […] continue reading →
LIBE Committee members visit Irish Data Protection Commission
A delegation of MEPs from the European Parliament’s Civil Liberties, Justice and Home Affairs (LIBE) Committee traveled to Ireland for three days to learn how the General Data Protection Regulation (GDPR) is implemented and enforced. The MEPs were as interested in how the “one-stop store” mechanism works as they were in the work of the […] continue reading →
EU data protection supervisor wants regulation article deleted
The European Data Protection Supervisor (EDPS) has filed a request with the European Court of Justice to annul two articles of the Europol Regulation. The regulation was adopted by the EU institutions earlier this year.The reason for this measure is no small matter: “The contested provisions of the amended Europol Regulation retroactively legalise processing operations […] continue reading →
Data protection: enforcement problems occupy LIBE committee
At a hearing in the European Parliament’s LIBE Committee, experts voiced strong criticism of the enforcement of the General Data Protection Regulation (GDPR). Although data protection law has been harmonized at the European level, implementation is lacking in several areas.National administrative law plays a special role in this regard: It is decisive in the implementation […] continue reading →
CNIL: DSGVO violation through the use of Google Analytics
In the dispute over transatlantic standards for data protection, the French data protection supervisory authority CNIL has made another momentous decision. According to this, the use of Google Analytics violates the General Data Protection Regulation (GDPR), as data would be transferred to the USA. The CNIL now asked the website operator to “bring these processing […] continue reading →
Irish data protection regulator: Reynders sees no need for action
The General Data Protection Regulation was supposed to ensure a uniform level of protection and enforcement of data privacy, but the Data Protection Commission (DPC) in the Republic of Ireland in particular has been the subject of repeated criticism. This is because the supervisory authority is responsible for the European offshoots of digital giants such […] continue reading →
Data protection: EU Commission certifies adequate level of protection for South Korea
The European Commission announced its decision on Friday that the level of data protection in the Republic of Korea is comparable to that in Europe. This means companies from South Korea can more easily collect and process data from people located in Europe. Under the basic data protection regulation, the so-called adequacy decision was preceded […] continue reading →
French data protection watchdog takes action against Clearview AI
The French data protection regulator CNIL has formally ordered facial recognition software company Clearview AI to stop collecting and processing data from France. Clearview has processed 10 billion photos worldwide from publicly available sources on the web for its algorithms largely without the consent of the subjects of the data. According to the CNIL, Clearview’s […] continue reading →