European Commission publishes two draft UK adequacy decisions
On 19 February 2021, the European Commission initiated the process for adopting two adequacy d…
In the spotlight
Council of the European Union agrees on negotiating position for revised ePrivacy rules
On 10 February 2021, the Council of the European Union ("Council") announced that its Member States …
Romanian DPA fines bank for failure to ensure security of personal data
On 10 February 2021, the Romanian DPA announced a fine of EUR 1,000 was imposed against a bank for f…
EDPB launches public consultation on guidelines on data breach notification examples
On 18 January 2021, the EDPB announced it has adopted for public consultation guidelines on examples…
Irish DPA releases domestic CCTV guidance
On 14 January 2021, the Irish Data Protection Commission ("DPC") released domestic CCTV guidance, fo…
The Bank for International Settlements publishes bulletin on COVID-19 and cyber risk in the financial sector
On 14 January 2021, the Bank for International Settlements ("BIS") published a bulletin presenting i…
Spanish DPA fines bank with EUR 6M for lack of valid consent and transparency failures
On 13 January 2021, the Spanish data protection authority ("AEPD") issued a resolution fining a bank…
CJEU Advocate General delivers opinion on cross-border data processing
On 13 January 2021, Advocate General Bobek issued his opinion in Case C-645/19 (Facebook Ireland and…
EDPS releases website evidence collector tool
On 12 January 2021, the European Data Protection Supervisor ("EDPS") announced completing the develo…
Motor industry employee sentenced to eight months’ imprisonment for transferring personal data without authorization
On 8 January 2021, the UK’s DPA ("ICO UK") announced a motor industry employee has been sentenced by…
