First hearing for the EU class action against Facebook took place in Vienna

On April 9, 2015, the Vienna Regional Court (Landesgericht) heard the first hearing (vorbereitende Tagsatzung) of the class action claiming that Facebook breached EU privacy laws. The class action claims that Facebook Ireland: has a data use policy that violates EU law; does not provide users with the possibility to express effective consent to several types […]

Council of Europe issues Recommendation CM/Rec(2015)5 on the processing of personal data by employers

On April 2, 2015, the Council of Europe issued Recommendation CM/Rec(2015)5 on the processing of personal data in the context of employment. The document lists several principles – for the public and private sectors – that member States should reflect in the application of domestic legislation on the processing of personal data of employees and […]

Data Privacy Resources

DATA PROTECTION AUTHORITIES  Eu Member States Austria: Austrian Data Protection Authority, Österreichischen Datenschutzbehörde Belgium: Commission for the Protection of Privacy, Commission de la protection de la vie privée, Commissie voor de bescherming van de persoonlijke levenssfeer,  (CBPL) Bulgaria: Commission for Personal Data Protection, Годишен отчет на Комисията за защита на личните данни Croatia: Croatian Personal Data […]

Germany anticipates EU IT Security legislation by pushing forward a cybersecurity bill

On March 20, 2015, the German Federal government expedited a draft bill on the enhancement of security of IT systems (Gesetzesentwurf der Bundesregierung zum IT-Sicherheitsgesetz). The draft aims at improving the protection of German citizens, companies and governmental institutions against a variety of IT security risks. The proposed legislation would require operators of digital infrastructures […]

UK Gov’t polices itself: Privacy agency fines fraud agency for privacy violation

On March 30, 2015, the UK Information Commissioner’s Office (ICO) has fined the Serious Fraud Office £180,000 after a witness in an investigation was mistakenly sent evidence relating to 64 other people involved in the case. “The Serious Fraud Office is an independent government department, operating under the superintendence of the Attorney General.  Its purpose is […]

UK Court of Appeal holds UK data subjects can sue Google in the UK for cookies violations even if there was no pecuniary loss

On March 27, 2015, the Court of Appeal issued its final judgment on ‘Safari workaround’: it dismissed Google’s appeal and gave the leeway for UK data subjects to sue Google in England for cookies violations. At the beginning of 2013 several claimants alleged that Google used cookies to track their browsing activity “Browser Generated Information” without […]

Italian DPA finds that misleading snippets must be deleted but in case under review Google had already done it

On December 18, 2014, the Italian Data Protection Authority (DPA) issued an order with which it confirmed that the right to be forgotten must be balanced with the public interest to read recent important facts.  However, in addition to confirming the need to balance the right to be forgotten with the freedom of expression, the order […]