Privacy Shield officially adopted by the EU Commission … but American organizations “targeting Europe” might want to consider whether GDPR compliance would make more sense

On July 12, 2016, the European Commission officially approved the Privacy Shield, issuing the decision of adequacy (“Decision”). The Privacy Shield is supposed to provide a safe mechanism to transfer personal data from the EU to the US for those organizations that comply with the framework.  Compared to the Safe Harbor (which the Privacy Shield […]

Millennials are less concerned with privacy than older generations, ICO’s Annual Track 2016 finds

  On April 2016, the Information Commissioner’s Officer (ICO) issued the Annual Track 2016, a research that assesses the level of awareness of UK population of its information/privacy rights. According to the document, the most important social issue for UK citizens is health care. Only 15% is concerned with protection of personal information. And the younger generations seem […]

Data Protection Authority comments on Brexit

On June 24, 2016, the British Information Commissioner Officer (ICO), issued a press release in consideration of the recent referendum results. “The Data Protection Act remains the law of the land irrespective of the referendum result. If the UK is not part of the EU, then upcoming EU reforms to data protection law would not […]

French DPA (CNIL) launches consultation to help prepare for the GDPR

On June 16, 2016, the French data protection agency (CNIL) opened a consultation on the EU Data Protection Regulation (GDPR). The consultation aims at helping the Article 29 Working Party with the guidelines that it is preparing on Data Protection Officers, data portability, Privacy Impact Assessment, and certification. The purpose is to collect concrete questions, […]

Privacy Shield not robust enough to withstand ECJ’s future legal scrutiny, European Data Protection Supervisor opines

  On May 30, 2016, the European Data Protection Supervisor (EDPS) – whose mission is to advise the EU institutions on the data protection implications of their policies — published Opinion 4/2016 on the EU-U.S. Privacy Shield draft adequacy decision. According to the press release the Privacy Shield as it stands is not robust enough to withstand future […]

Christopher Kuner, Reality and Illusion in EU Data Transfer Regulation Post Schrems

Interesting article discussing international data transfer between Europe and the U.S. Abstract:  “In Schrems v. Data Protection Commissioner, the Court of Justice of the European Union invalidated the EU-US Safe Harbour arrangement allowing personal data to be transferred to the US. The judgment affirms the fundamental right to data protection, defines an adequate level of […]

Facebook’s transfer of data to the U.S. may end up in front of the ECJ again

On May 25, 2016, Schrem’s website “Europe v Facebook” (website collecting information regarding class actions against Facebook) released a press update according to which the Irish Data Protection Commissioner may refer another issue to the Court of Justice of the European Union (ECJ) i.e., according to the website, whether “Facebook can continue to transfer data from the […]

Minimizing board members’ responsibility for data breach

Among the consequences of a data breach for an organization is the risk of personal liability for board members. Besides the prevention measures that can/must be taken to avoid hacking, directors and management should invest in training, procedures, detection, and response. Going in the specific, the following can help directors in case their company suffers […]

Giulio Coraggio, Who is liable for blockchain?

The author discusses “one of the main issues affecting public blockchain [which] is the inability of controlling and stopping its functioning”. Does this “mean that none is liable for illegal activities performed through a DAO? Or on the contrary, the mere participation to the DAO creates a dristributed liability of all its participants as a […]