Bulgaria adopts GDPR harmonization law

Posted on by Federica Romanelli
On February 20, 2019, Bulgaria adopted the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) harmonization law. The law amends and supplements the previous data protection act from 2002. It also transposes the EU Law Enforcement Directive (Directive (EU) 2016/680). The new Law on Personal Data Protection (LASLPDP) entered into force on March 2, 2019 and is available at  http://dv.parliament.bg…   European Commission’s update on GDPR after 8 months of its application Read more [...]

Advocate General warns against embedding the Facebook “Like” button on websites

Posted on by Federica Romanelli
On December 19, 2018, Advocate General Bobek, published his opinion in case C-40/17, deeming that anyone who enters the Facebook “Like” button on his website can be considered a joint controller. In this case, a German fashion online retailer embedded a Facebook’s ‘Like’ button in its website. As a result, when users landed on the retailer’s website, information about that user’s IP address and browser string was transferred to Facebook. The transfer occurred automatically when Read more [...]

CNIL publishes guidance on data transfer to third parties for electronic prospecting

Posted on by Federica Romanelli
On December 28, 2018, the French Data Protection Agency, the Commission Nationale de l’informatique et des Libertés (CNIL) published several principles to help companies comply with the General Data Protection Regulation (GDPR) while transferring personal data to their commercial partners for electronic prospecting. Particularly, the CNIL highlights how: the data subject must give consent before the data is transmitted to third parties; the data subject must be able to know who the Read more [...]

Antitrust fines Facebook 10 million for aggressive and misleading practices

Posted on by Federica Romanelli
On November 29, 2018, the Italian Antitrust Authority (Garante della Concorrenza e del Mercato “AGCM”) found that Facebook committed two violations of the Italian Consumer Code and fined the it EUR 5 million for each violation. Facebook mislead consumers in registering to Facebook -in violation of articles 21 and 22 of the Italian Consumer Code – by not adequately informing them at the time of registration that their data would be used for commercial purposes. In addition, the AGCM found Read more [...]

EDPS adopts Guidelines on GDPR’s territorial scope

Posted on by Federica Romanelli
On November 16, 2018, the European Data Protection Board (EDPB) adopted guidelines on the territorial application of the GDPR. Guidelines 3/2018 on the territorial scope of Regulation 2016/679/EU- Version for public consultation. The guidelines are now open to public consultation. The Guidelines aim at clarifying the territorial scope of the GDPR, in particular where the data controller or processor is established outside of the EU. The EDPB sets out and clarifies the criteria for determining Read more [...]