Graham McKay

In the news this week: Brave submits formal GDPR complaint against Google’s internal data free-for-all. Pharmacy Doorstep Dispensaree is challenging the UK data watchdog’s decision to fine it under the GDPR (EA/2020/0065). CNIL enforcement looms over the adtech sector in France. Will BA and Marriott proposed fines now disappear in part due to COVID-19? How to avoid being phished during COVID-19. Statement …

Privacy Update for the week ending 22nd March 2020 Read More »

In the news this week: The Swedish DPA imposes €7m administrative fine on Google. A further draft of the ePrivacy Regulation has been published. Australia sues Facebook for $529 billion. ICO issues two legal warnings to schools for wrongly disclosing the personal data of children. Scotland creates a Commissioner to oversee the use of biometrics by Police. IAPP cancels UK and Global privacy events. Norwegian …

Privacy Update for the week ending 15th March 2020 Read More »

In the news this week:  Information Commissioner’s Office (ICO) has fined Cathay Pacific Airways Limited £500,000 for failing to protect the security of its customers’ personal data (pre-GDPR). The ICO has published guidance for organisations wanting to develop GDPR Codes of Conduct or Certification schemes. Further concerns raised about IoT in your home.  Doorbells that record every interaction and baby monitors …

Privacy Update for the week ending 8th March 2020 Read More »

In the news this week: Microsoft launches open-source privacy mapping tool – Data Protection/Privacy Mapping Project. Commentary piece on Subject Access Requests and the Search for Proportionality. The Danish Data Protection Authority has ordered two organisations to communicate a personal data breach to the data subjects concerned. Namely.com & Intervare. EDPB contribution to the evaluation of GDPR.  Key areas: The EDPB will participate …

Privacy Update for the week ending 1st March 2020 Read More »

In this week’s news: Facebook argue in court (Vienna) that users have no right to compensation for data protection violations because they deliberately harmed themselves by using Facebook and that data protection on Facebook is ‘easy to understand for users’. Facebook witness: 9 ½ hours of “we don’t know”. Danish Data Protection Authority announced it has …

Privacy Update for the week ending 23rd February 2020 Read More »

In this week’s news: The US charges four Chinese military officers over Equifax hack. A misconfiguration in an election day app exposes data on over 6.4 million Israelis. ICO and FCA issues statement covering the use of personal data by insolvency practitioners. Data retention laws being used in Australia by law enforcement at odds with the federal government specifically excluding …

Privacy Update for the week ending 16th February 2020 Read More »

In the news this week: Excellent overview of the role of the ICO post Brexit and the status of ICO as Lead DPA for BCRs. An overview of the politics behind a potential adequacy finding for the UK. Privacy campaigners bid to beat UK police facial recognition plans by wearing ‘dazzle’ makeup. Or consider the privacy mask. UK Bill to Prohibit the use …

Privacy Update for the week ending the 7th February 2020 Read More »

In the news this week: Ring doorbell app accused of surveilling its customers. Data Protection Day Joint Statement by Vice-President Jourová and Commissioner Reynders. Data Protection and Brexit – Clearing Up Some Misunderstandings by David Smith ex ICO.  Hamburg (Germany) data protection authority initiates fine proceedings in alleged H&M employee spying scandal.  Norwegian consumer group files a complaint against Grindr about a …

Privacy Update for the week ending 31st January 2020 Read More »

In the news this week Coverage of DLA Piper’s GDPR report. EEA breach notifications and fines finds the Netherlands leads Ireland in notified data breaches per capita. France, Germany and Austria top the rankings for the total value of fines imposed to date with just over €51 million, €24.5 million and €18 million respectively. Europe’s privacy overhaul …

Privacy Update for the 24th January Read More »

Following an ongoing battle of 6 years (Schrems II), the Advocate General’s Opinion is that standard contractual clauses for the transfer of personal data to processors established in third countries are valid. Whilst not legally binding, the Advocate General’s opinion holds weight with the CJEU judges, who will rule in the coming months and follow advisers’ recommendations in …

Privacy Update for the 11th January 2020 Read More »