ICO investigation on data analytics used for political purposes

On July 10, 2018, the Information Commissioner Officer, ICO, issued a report of the office investigations into the use of data analytics in political campaigns. According to the ICO, data analytics is causing information asymmetry between different groups of voters. The report details some of the organizations under investigation, as well as the enforcement actions undertaken so far. This includes the ICO’s intention to fine Facebook a maximum £500,000 for two breaches. Evidence emerged Read more [...]

EU-US Privacy Shield doesn’t provide enough protection: US must comply by September 1, MEPs say

The European Parliament Committee on Civil Liberties, Justice and Home Affairs (LIBE) calls on the European Commission to suspend the EU-US Privacy Shield since it does not provide enough protection for EU data subjects. The United States has to comply by September 1, 2018. According to MEPs, the EU-US Privacy Shield should also remain suspended until the US authorities comply with its terms in full. The Privacy Shield is an agreement between the US and the EU allowing companies considered Read more [...]

Irish DPA prepared a list of processing operations that require DPIA open for public consultation

In June 2018 the Irish Data Protection Commission (DPC) published a draft list of processing operations for which it is mandatory to conduct a data protection impact assessment (DPIA). The list is intended to encompass both national and cross-border data processing under Article 35 of the General Data Protection Regulation (GDPR). With a view to finalizing the proposed list for submission to the EDPB for approval, the DPC is issuing its draft DPIA list for public consultation. Stakeholder shall Read more [...]

Data Privacy Resources

DATA PROTECTION AUTHORITIES  Eu Member States Austria: Austrian Data Protection Authority, Österreichischen Datenschutzbehörde Belgium: Commission for the Protection of Privacy, Commission de la protection de la vie privée, Commissie voor de bescherming van de persoonlijke levenssfeer,  (CBPL) Bulgaria: Commission for Personal Data Protection, Годишен отчет на Комисията за защита на личните данни Croatia: Croatian Personal Data Protection Read more [...]

Guidelines on Transparency under Regulation 2016/679 (wp260rev.01)

The guidelines on Transparency under Regulation 2016/679 provide practical guidance and interpretative assistance from the Article 29 Working Party (WP29) on the new obligation of transparency concerning the processing of personal data under the General Data Protection Regulation (GDPR). Transparency is an overarching obligation under the GDPR applying to three central areas: (1) the provision of information to data subjects related to fair processing; (2) how data controllers Read more [...]