The Italian DPA authorizes data transfer to the US under the Privacy Shield

On October 27, 2016, the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) authorized the transfer of personal data to the U.S. according to the EU-US Privacy Shield. With its decision, the Italian DPA has aligned itself with to the European Commission’s decision of adequacy, which recognized the Privacy Shield as granting an adequate […]

LinkedIn blocked in Russia

  On November 11, 2016, a court in Moscow upheld the decision of a lower court to block Russians from accessing LinkedIn. The court decision originated from a decision of the Russian data protection regulator (Roskomnadzor), which had found that LinkedIn had failed to maintain Russian data on Russian servers in breach of the Russian […]

District of Columbia Bar Opinion 370

Opinion No. 370 of the District of Columbia Bar’s Legal Ethics Committee   Topic: Social Media I, Marketing and Personal Use   Conclusion of the Committee: “Social media is a constantly changing area of technology. Social media can be an effective tool for providing information to the public, for networking and for communications. However, using […]

UK confirms that it will opt into GDPR in 2018

Following ICO’s comments on Brexit, on October 24, 2016, the UK Secretary of State Karen Bradley MP used her interview before the Culture, Media and Sports Select Committee to confirm UK’s participation to the General Data Protection Regulation (GDPR) coming into effect in the spring of 2018. The Secretary said that: “We will be members […]

A German DPA to carry out 500 company audits on international data transfers

On November 3, 2016, the Bavarian Data Protection Authority (BayLDA) informed that it will carry out a privacy audit on the international data transfers of more than 500 companies. The Authority has decided to carry out such audits because of the suspicion that companies may transfer data abroad without even being aware of it. Indeed, many small […]

German DPA prohibits data transfer from WhatsApp to Facebook

On September 26, 2016, the Hamburg Commissioner for Data Protection and Freedom of Information issued an order prohibiting Facebook to collect and store data of German WhatsApp users.  The decision came after WhatsApp issued a statement informing its users that the application’s terms and privacy policy was updated, as a consequence of WhatsApp’s joining Facebook. […]

European cloud providers’ association issues data protection code of conduct

On September 27, 2016, the Cloud Infrastructure Services Providers of Europe (CISPE) announced the publication of the Data Protection Code of Conduct for Cloud Infrastructures Services. The CISPE comprises several major European cloud infrastructure providers. The code of conduct provides that the certified cloud infrastructure providers: will process and store data exclusively within the EU/EEA […]

Privacy issues in biometrics

Commercial use of biometric data increased dramatically in recent years: some software are now able to recognize physical characteristics, such as fingerprints, retinas, hand and facial geometry, as well as voices. This technology makes people’s life easier as their hand or voice may be enough to access their phone or bank account, and one single click may […]