On 14 March 2024, the Court of Justice of the European Union (CJEU) delivered its judgment in Case C-46/23, Újpesti Polgármesteri Hivatal.
First, the CJEU concluded that Article 58(2) of the GDPR should be interpreted as allowing a data protection authority (DPA) to order a controller or processor to erase unlawfully processed personal data in the absence of a prior request to that effect from …
The Artificial Intelligence Act (AI Act) continues its path towards final adoption.
The draft regulation has been voted today (13 March) in the EU Parliament by a large majority (523 votes in favor, 46 against and 49 abstentions).
This comes after the EU Parliament and the EU Council reached a provisional agreement on the AI Act in December 2023, while in February this year, the representati…
Today, 7 March 2024, the Court of Justice of the European Union (CJEU) delivered its judgment in the case C-604/22 (IAB Europe).
In this case, the CJEU was asked by a Belgian court whether a structured string, such as the TC String provided by IAB Europe, which records a user’s consent preferences before placing advertisements on websites or applications, either on its own or in combination wit…
It is hard to regulate technology. One of the reasons, amongst many others, is time. What you regulate today does not correspond to the technical landscape of tomorrow. Back in the first decade of 2000, when the ePrivacy Directive was adopted and amended, the European legislat…
Romanian DPA case studies – our top 5 picks
1. Refusal to provide the contractual clauses which represent the safeguard for the data transfer to a third country
Case study: A data subject complained about the refusal of a financial banking institution to provide …
As we all know, “personal data” represents information related to an identified or identifiable natural person.
So how do you identify someone? By name or through an image, one would answer. But what happens when we do not know the name and the image of the person but we are able to …
On January 25, Iurie Cojocaru, Partner and Head of the Data Protection Practice, was a speaker at the „GDPR – Data Privacy Observer 2024” conference. Iurie Cojocaru talked in the conference`s first session of discussions and shared information on the personal data protection requirements resulting from the EU`s Data Act, recently entered into force.
Moreover, the third edition of the Romanian R…
On Tuesday, November 21, NNDKP`s Data Protection practice organized an event focused on current issues in the field of data protection and security, an information and debate opportunity dedicated to clients.
In an interactive discussion framework, the participants discussed topics of interest with NNDKP`s data protection team members and analyzed various situations encountered in practice, fac…
On Monday, November 6, Iurie Cojocaru, Partner and Head of the Data Protection Practice joined the ZF Live special edition, where he discussed together with Cristian Hostiuc about the ANSPDCP practice – favorite topics, the fields in which they have been applied sanctions and recommendations of the authority.
The recording of the debate can be watched on Ziarul Financiar`s Facebook page.
…