INTERNATIONAL DATA PROTECTION

EU-US “Umbrella Agreement” negotiations finalized: data protection in exchange of information between law enforcement authorities

Date 09/21/2015.

  On September 8, 2015, the EU-US data protection “Umbrella agreement” negotiations were finalized. The “Umbrella Agreement” establishes a comprehensive data protection framework for EU-US law enforcement cooperation. The agreement covers all personal data (for example names, addresses, criminal records) exchanged between the EU and the U.S. for the purpose of prevention, detection, investigation and prosecution […]

Children’s privacy is at risk, says Italian DPA

Date 09/17/2015.

According to an investigation carried out by the Italian Data Protection Authority (Garante della Privacy) the applications and the websites most used by Italian children do not adequately protect their privacy. Out of the 35 samples studied by the DPA (22 apps and 13 websites), 21 resulted highly at risk and 8 will require further investigation. […]

Ministry of Communications clarifies the scope of the amended Russian Personal Data Localization Law

Date 09/14/2015.

September 2, 2015   Dear Sirs, We would like to update you on the latest news regarding the Federal Law № 242-FZ introducing amendments to the Federal Law “On personal data” and to the Federal Law “On information, information technologies and protection of information” (hereinafter – “Personal Data Localization Law”) which has come into force from […]

Tax evaders’ name cannot be published on municipalities’ websites, Italian DPA says

Date 09/11/2015.

  Italian municipalities cannot publish on their website the names of those who did not pay city taxes. After one municipality announced the intention of publishing the names of those who did not comply with their fiscal duties, the Garante della Privacy (the Italian Data Protection Authority) started an investigation and clarified that the publication […]

Clapper update: ACLU moved Second Circuit to stop the Gov’t from resuming illegal mass surveillance of phone records

Date 09/10/2015.

As reported here, on May 7, 2015, the United States Court of Appeals for the Second Circuit found that the controversial surveillance program according to which the NSA collected Americans’ phone records was not authorized under Section 215 of the USA Patriot Act (ACLU v. Clapper, 2015 U.S. App. LEXIS 7531). On June 9 – after […]

As part of the “right to be forgotten”, Google must also delist the news about delisting, UK privacy authority says

Date 09/01/2015.

On August 18, 2015, the UK Information Commissioner Office (“ICO”) issued an enforcement notice against Google because it contravened the first and the third data protection principles by referencing to an article detailing the delisting of a link that followed a “request to be forgotten”. According to the ICO, Google contravened the third data protection […]

Dutch Gov’t’s surveillance of law firms is illegal, a Dutch court held

Date 08/28/2015.

On July 1, 2015, the Rechtbank Den Haag (the Dutch District Court of the Hague) found the practice of the Dutch government to intercept Dutch law firms illegal. A Dutch law firm, Prakken d’Oliveira, accused the Dutch government of spying on the law firm’s privileged conversations. The CCBE intervened in the process to highlight the […]

Bank of England issue questionnaire designed to increase cyber security

Date 08/25/2015.

The Bank of England recently wrote to insurance companies with a questionnaire designed to help the Prudential Regulation Authority (PRA) get a sense of the sector’s approach to cyber security. The questionnaire also includes questions from the Financial Conduct Authority (FCA). The questionnaire is just the latest in a line of initiatives from regulators designed […]

EU data protection jurisdiction may be triggered by the physical presence of one worker, Advocate General opines in Weltimmo case

Date 08/24/2015.

On June 25, 2015, the advocate general of the Court of Justice of the European Union (“ECJ”) filed his opinion in the case 230/14, Weltimmo s.r.o. v Nemzeti Adatvédelmi és Információszabadság Hatóság (“Weltimmo”). According to the Advocate General, in order to determine which EU data protection law applies, authorities shall consider where the companies’ activity […]