Privacy Update 6th September 2019

In the news this week:

The Bavarian DPA is investigating the blood donation service’s processing of particularly sensitive health data under Art. 9 of the GDPR. One of the things to be ascertained, is whether Facebook was able to infer the answers of individuals and even link them to specific Facebook profiles.


US Ninth Circuit Certifies Privacy Class Action Against Facebook’s Photo Tag Suggestion Tool.

Google Is Fined $170 Million for Violating Children’s Privacy on YouTube.

A Maryland federal court has ordered Marriott to disclose an investigation report into its November 2018 data breach.


South Wales Police use of facial recognition ruled lawful. The ICO have published a statement on the High Court judgement on the use of live facial recognition technology by South Wales Police.


Fraudsters have used artificial intelligence-based software to deceive the CEO of a UK-based energy firm of £200,000.

Information Commissioner’s Office issues warning about historical personal details accessed through work.

UK – London developer in King’s Cross facial-recognition plans revealed by letter. Met Police gave images for King’s Cross facial recognition scans. Eduardo Ustaran provides commentary.

Privacy International study of 136 popular web pages related to mental health in France, Germany and the UK reveals how websites share user’s personal data with advertisers, data brokers and large tech companies like Google, Facebook and Amazon.


Google accused of secretly feeding personal data to advertisers Brave uncovers Google’s GDPR workaround for Advertising Real Time Bidding breaching Google’s own code. Could face $5bn penalty.

Hundreds of millions of phone numbers linked to Facebook accounts have been found online. Irish regulator investigating.

Ireland’s privacy regulator is weighing potential probes into how some online companies handle children’s data.


CJEU will hand down judgements on RTBF & search engines re global deindexing (C-507/17) on 24 September.


 Spanish court determines that energy consumption data is personal data.


Previous issues of Privacy Updates can be found here.


Leave a Comment

Your email address will not be published.