The aftermath of Cambridge Analytica’s scandal and other problems for Facebook in Europe

The scandal of Cambridge Analytica caused several consequences for Facebook in Europe. In the United Kingdom, the Information Commissioner (ICO) is investigating the use of personal data and analytics by political campaigns, parties, social media companies and other commercial actors by 30 organizations, including Facebook. See here. The Working Party 29(WP29) created a Social Media Working Group to develop a long-term strategy on the collection personal data from social media for micro-targeting Read more [...]

Data Privacy Resources

DATA PROTECTION AUTHORITIES  Eu Member States Austria: Austrian Data Protection Authority, Österreichischen Datenschutzbehörde Belgium: Commission for the Protection of Privacy, Commission de la protection de la vie privée, Commissie voor de bescherming van de persoonlijke levenssfeer,  (CBPL) Bulgaria: Commission for Personal Data Protection, Годишен отчет на Комисията за защита на личните данни Croatia: Croatian Personal Data Protection Read more [...]

Guidelines on Transparency under Regulation 2016/679 (wp260rev.01)

The guidelines on Transparency under Regulation 2016/679 provide practical guidance and interpretative assistance from the Article 29 Working Party (WP29) on the new obligation of transparency concerning the processing of personal data under the General Data Protection Regulation (GDPR). Transparency is an overarching obligation under the GDPR applying to three central areas: (1) the provision of information to data subjects related to fair processing; (2) how data controllers Read more [...]

Guidelines on consent under Regulation 2016/679

The Guidelines on consent under Regulation 2016/679 provide a thorough analysis of the notion of consent. Controllers must always consider which one is the appropriate lawful ground for the processing. Consent remains one of six lawful bases to process personal data, as listed in Article 6, GDPR. The data subject shall have a genuine choice with regard to accepting or declining the terms offered or declining them without detriment, thus exercising control over whether or not her personal Read more [...]

Users’ guidance on DPIA under the GDPR published by EU Data Protection Authorities

EU Data Protection Authorities released useful Data Protection Impact Assessment tools (DPIAS) Belgium: the Commission for the Protection of Privacy, Commissie voor de bescherming van de persoonlijke levenssfeer (CBPL) issued a Recommandation d'initiative concernant l'analyse d'impact relative à la protection des données (n° 01/2018) Cyprus: the Office of the Commissioner for Personal Data Protection, Γραφείου Επιτρόπου Προστασίας Δεδομένων Προσωπικού Read more [...]