EU Commission adopts adequacy decision on Japan

Posted on by Federica Romanelli
On 23 January 2019, the EU Commission adopted its adequacy decision on Japan, allowing personal data to flow freely between Europe and Japan. The adequacy decision started to apply as of January 23. The same will happen on the Japanese side. The adequacy decision includes: a set of Supplementary Rules to strengthen the protection of sensitive data, the exercise of individual rights and the conditions under which EU data can be further transferred from Japan to another third country. Read more [...]

Antitrust fines Facebook 10 million for aggressive and misleading practices

Posted on by Federica Romanelli
On November 29, 2018, the Italian Antitrust Authority (Garante della Concorrenza e del Mercato “AGCM”) found that Facebook committed two violations of the Italian Consumer Code and fined the it EUR 5 million for each violation. Facebook mislead consumers in registering to Facebook -in violation of articles 21 and 22 of the Italian Consumer Code – by not adequately informing them at the time of registration that their data would be used for commercial purposes. In addition, the AGCM found Read more [...]

“Advanced TVs” ought to keep in mind data protection best practices

Posted on by Federica Romanelli
Privacy needs to be reckoned with by “Advanced TV” industry. and this will be more and more the case. According to the press, marketers are investing more and more in advanced TV targeting. Rather than broadcasting the same ad to all households, advanced televisions serve targeted ads to each household. The term “advanced TV” is an “umbrella term that refers to several forms of streaming TV content, including connected TV, TV everywhere, linear addressable and video on demand Read more [...]

Report on the Blockchain and the GDPR by the European Union Blockchain Observatory and Forum

Posted on by Federica Romanelli
On October 16, 2018, the European Union Blockchain Observatory and Forum published a thematic report on the Blockchain and the GDPR (“Report”). The report includes the input of a number of different stakeholders and sources. The report aims at answering the question of whether GDPR compliant blockchain is possible. The paper highlights a fundamental point: there isn’t per se a GDPR compliant technology; it is the way the technology is used that must be compliant with the GDPR’s Read more [...]

FTC’s enforcement in relation to Privacy Shield 

Posted on by Federica Romanelli
In August, the FTC took action against false claims of participating to the EU-US Privacy Shield Framework. These are the first cases addressing the Privacy Shield Framework introduced on July 12, 2016. Allegedly, the companies under investigation started the application for the EU-U.S. Privacy Shield but never completed it; yet they falsely claimed to be participants. See here. In September 2018, the FTC reached settlements with four other companies that falsely claimed participation in the Read more [...]