CNIL published guidelines on data protection in the health sector

In June 2018, the CNIL, Commission Nationale Informatique & Libertes, published guidelines for the protection of personal data in the health sector. In particular, the French Data Protection Authority (DPA) provides professionals in the health sector with tips to comply with the EU Privacy Regulation 2016/679, GDPR: limit the information collected to what is necessary […]

Irish DPA prepared a list of processing operations that require DPIA open for public consultation

In June 2018 the Irish Data Protection Commission (DPC) published a draft list of processing operations for which it is mandatory to conduct a data protection impact assessment (DPIA). The list is intended to encompass both national and cross-border data processing under Article 35 of the General Data Protection Regulation (GDPR). With a view to […]

Tags: ,

Italian DPA forbids pop-up requiring one consent for data processing for various purposes

On May 22, 2018, the Garante per la Protezione dei Dati Personali, Italy’s Data Protection Authority (DPA), prohibited a company offering a comparison service for light, gas, mobile line, insurance, mortgages (and other services) on its website (Company) to process for marketing and sales purposes the data collected through a pop-up on its website. The […]

Tags: ,

Italian police authority explains how it will verify companies’ privacy compliance

Informazionefiscale.it reported an interesting interview with Marco Menegazzo, commander of the Special Privacy Unit of the Italian Guardia di Finanza, who spoke during the Privacy Day Forum held on May 25, 2018, and which dealt with privacy, sanctions and checks under the GDPR. Which checks will be carried out by the Italian authority under the GDPR? […]

Tags: ,

ECJ’s preliminary ruling on case of German DPA against Facebook

  On June 5, 2018, the European Court of Justice (CJEU), issued its preliminary ruling in C‑210/16, opining on the definition of data controller, applicable national law, and jurisdiction under EU data protection law according to Directive 95/46/EC. According to the CJEU’s judgement, EU companies that have been advertising through Facebook can be considered data […]

Tags: ,

ICO’s right to be informed page

The Information Commissioner’s Office – ICO – published a resourceful page concerning the right to be informed. The right to be informed covers some of the key transparency requirements of the GDPR. It is about providing individuals with clear and concise information about how their personal data are processed. Among the answers to several questions concerning the right to […]

Tags:

Guidelines on Transparency under Regulation 2016/679 (wp260rev.01)

The guidelines on Transparency under Regulation 2016/679 provide practical guidance and interpretative assistance from the Article 29 Working Party (WP29) on the new obligation of transparency concerning the processing of personal data under the General Data Protection Regulation (GDPR). Transparency is an overarching obligation under the GDPR applying to three central areas: (1) the provision […]

Tags: ,

Guidelines on consent under Regulation 2016/679

The Guidelines on consent under Regulation 2016/679 provide a thorough analysis of the notion of consent. Controllers must always consider which one is the appropriate lawful ground for the processing. Consent remains one of six lawful bases to process personal data, as listed in Article 6, GDPR. The data subject shall have a genuine choice […]

Tags: ,

1 10 11 12 13 14 21