60% of the requests to be forgotten are granted in Italy

According to Italia Oggi, in 2016 60% of the received request to be forgotten from search results has been granted. The percentage concerns the request to be removed from search results after the European Court of Justice issued its famous “right-to-be-forgotten” decision in the Costeja case, C-131/12. According to the source, the percentage consider the cases where the  Garante […]

Microsoft addresses Windows 10 privacy flaws

On January 10, 2017, Terry Myerson, Window’s Executive Vice President, published a post acknowledging Window’s 10 privacy concerns and disclosing which actions have been taken  to solve the issue. Meyerson answered as follows to the several privacy flaws addressed by many, including the French Data Protection Authority (CNIL): Many of you have asked for more control […]

EU Commission’s ePrivacy Regulation Proposal to align electronic communications privacy to GDPR

On January 10, 2017, the European Commission issued a draft for a new ePrivacy Regulation (“Proposal”) that would replace Directive 2002/58/EC (‘the ePrivacy Directive’), implementing a higher level of privacy for all electronic communications. Scope of application: The Proposal applies to all electronic communication providers – including EU institutions – and aim at aligning the existing rules, which date back […]

Russia influenced several elections (including US election) in favor of Kremlin-friendly candidates

On January 6, 2016, the National Intelligence Council (NIC) released an Intelligence Community Assessment (ICA): “Assessing Russian Activities and Intentions in the Recent US Elections.” The document is a declassified version of a highly classified assessment provided to the President by the Central Intelligence Agency (CIA), the Federal Bureau of Investigation (FBI), and the National […]

Bavarian DPA sanctions appointment of IT manager of company as DPO

According to German data protection law, German data controllers must appoint a Data Protection Officer (“DPO“) in several cases, for example when ten or more people are involved in the automated processing of personal data. While an employee can be appointed as DPO, the appointee must be knowledgeable on data protection and must be reliable and independent. The […]

WP29 issues guidelines on data portability, DPO, and lead authority (and lays foundation for much more)

  On December 13, 2016, EU Article 29 Data Protection Working Party “(WP29”) dealt with several critical matters with regards to the implementation of the General Data Protection Regulation (GDPR) and the Privacy Shield. It also dealt with the enforcement measures on cases having a cross-border effect. As for the GDPR’s implementation, the WP29 importantly adopted: […]

Privacy Shield update: around 1300 active participants after over 4 months from start

As of mid December 2016, around 1300 companies were active under the EU-US Privacy Shield, according to the US Department of Commerce official website. The Privacy Shield Framework has now been effective for almost 4 months and it replaced the Safe Harbor, which had around 5,500 participants by 2016. The US Department of Commerce, International Trade Administration (ITA), […]

The Public’s Right to know trumps right to be forgotten in case of major crimes, Italian DPA decides

On October 6, 2016, the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) (“Italian DPA”)  issued an order denying the right to be forgotten to those involved in major crimes. A former city counselor involved in an investigation for corruption and fraud requested a de-indexation of some related articles. The events occurred […]

Italian DPA issued order allowing tracking of employees through their smartphones

On May 18, 2016, the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) issued an order allowing for the processing of personal geo-localization data collected through the employees’ smartphones. An Italian company, SITE S.p.A., submitted a preliminary request for examination of the DPA with reference to the processing of personal data gathered […]