Italian Data Protection Authority’s guidelines for controllers of biometric data

On November 12, 2014, the Autorità Garante della Privacy (Italian Data Protection Authority) issued a decision together with guidelines on the processing of biometric data. The DPA clarified that “a biometric data is a personal data as it can always be considered to be “information relating to an identified or identifiable natural person” by having […]

Cristina Vicarelli, Cookies: ten things to consider

Nowadays in Italy there is a big debate on “cookies”. Starting on June 3, 2015, data controllers shall implement the requirements issued by the Italian Data Protection Authority (Garante) with  Decision no. 229 of 8 May 2014 “Simplified Arrangements to Provide Information and Obtain Consent Regarding Cookies” (Published in the Official Journal no. 126 of […]

Email containing personal and health information is protected by privacy law and cannot be forwarded without consent, Italian Data Protection Authority holds

On April 23, 2015, the Italian Data Protection Authority (DPA) held that the privacy of the sender of an e-mail containing her personal and health information is violated when the email is forwarded without her consent. In this case, an employer of an IT company sent a promotional email to some franchisors of a real […]

European Data Protection Supervisor (EDPS)’s Opinion 1/2015 on m-health

On May 21, 2015, the European Data Protection Supervisor (EDPS) published Opinion 1/2015 (Mobile Health – Reconciling Technological Innovation with Data Protection). The opinion acknowledges that Mobile Health (“mHealth”) is a rapidly growing sector stemming out of the convergence between healthcare and ICT. mHealth includes mobile applications designed to deliver health-related services through smart devices. Big […]

Italian Data Protection Authority approves digital identity providers’ framework regulation

On April 23, 2015, the Autorità Garante della Privacy (Italian Data Protection Authority) issued an opinion approving the framework regulation for the digital identity providers’ accreditation and surveillance system. The regulation defines the requirements that the public system needs to have to manage the digital identity of citizens and companies. The full text of the […]

Laura Donohue, High Technology, Consumer Privacy, and U.S. National Security

4 Am. U. Bus. L. Rev. 11-48 (2015)   Abstract: “Documents released over the past year detailing the National Security Agency’s (“NSA”) telephony metadata collection program and interception of international content under the Foreign Intelligence Surveillance Act (FISA) implicated U.S. high technology companies in government surveillance. The result was an immediate, and detrimental, impact on […]

Italians well aware of their privacy rights

3 out of 10 Italian has contacted an organization to have their personal data deleted. According to Privacy Laws & Business, an online survey conducted in November 2014 on 800 Italians highlighted that the Italians pay considerable attention to privacy online, and are aware of their rights. More information is available at http://www.privacylaws.com… Follow us […]

Phone call metadata is personal information and must be treated as such (including right of access), Australian Privacy Authority rules

On May 1, 2015, the Australian Privacy Commissioner ruled that phone call metadata is ‘personal information’ and therefore access rights apply. A data subject requested access to all his metadata information that Telstra, Australian telecom company, had stored about him in relation to his mobile phone service, including (but not limited to) cell tower logs, inbound […]