Liveblog Archive - Page 4 of 20

Landmark CJEU Ruling: SCHUFA Case Redefines Automated Decision-Making Responsibilities

by e.sheikh | Jan 2, 2024

The recent judgment (C-634/21) by the Court of Justice of the European Union (CJEU) in the SCHUFA case has significant ramifications, particularly for entities engaged in automated decision-making processes. The case specifically addresses credit reference agencies,...

Fear over possible misuse of personal data resulting from a data breach regarded as non-material damage

by howard | Dec 21, 2023

The Court of Justice of the European Union (“CJEU”) has ruled that the fear of a data subject over the possible misuse of their personal data from a data breach is regarded as non-material damage and can lead to financial compensation from the data controller. Facts:...

EDPB’s Urgent Binding Decision Regarding META

by Emine Bilsin | Dec 19, 2023

Regarding the decision adopted on 27 October 2023 concerning the processing of personal data with the reason of behavioral advertising on the legal grounds of contract and legitimate interest within the European Economic Area (“EEA”), the Irish Data Protection...

How much can a DPA fine a Controller who is Part of a Group of Companies?

by howard | Dec 12, 2023

The European Court of Justice (CJEU) has clarified the conditions under which a national supervisory authority (DPA) may fine one or more controllers for violations of the GDPR. In particular, it points out that the imposition of such fines is predicated on illegal...

Suffer a ransomware attack and a fine by the competent DPA? Sometimes it happens!

by howard | Nov 30, 2023

Ransomware is a malicious software designed to block access to a computer system until a sum of money is paid. However, some forms of ransomware allow deeper penetration into the internal resources of the targeted entity, and may allow the attackers to: steal...