What Google should do to bring its privacy policy in line with the Italian Data Protection Code, according to the Italian DPA

On July 10, 2014, the Italian Data Protection Authority (“DPA”) issued a resolution to protect the privacy of Google’s services users in Italy. According to the decision, Google may not process users’ data for profiling without the subjects’ prior consent; furthermore, Google shall specifically inform the users that it is profiling them for marketing purposes. The […]

“Google Special Collects” (variation of Street View) must give notice of cameras in archeological sites and parks, Italian DPA decides

On December 4, 2014, the Italian Data Protection Authority (“DPA”) issued a resolution to answer the motion that Google presented in September for a waiver of the notification requirement of Article 13, paragraph 5 of the Italian Privacy Code (as interpreted by the DPA’s resolution of October 15, 2010 towards Google – read here) which […]

Google’s report on removals pursuant to the “right to be forgotten” – some interesting points

Google issued its report on the requests for removal pursuant to the  “right to be forgotten”. Period considered: May 29, 2014 to current. Here are some interesting points: Google received almost 200,000 requests “to be forgotten”, evaluated almost 700,000 urls and removed the 59.8% of urls. French are those who requested to be forgotten the […]

Users must have easy access to apps privacy policy, 23 privacy authorities around the world opine

On December 9, 2014, twenty-three privacy authorities from around the world signed a joint letter (specifically addressed to Apple, Google, Samsung, Microsoft, Nokia, BlackBerry and Amazon.com but intended for all companies operating app marketplaces) urging companies to make links to privacy policies mandatory for all applications that collect personal information. The authorities acknowledge the fact that numerous […]

Google challenges decision allowing UK data subjects to sue it in England for cookies violations

On December 8, 2014, the UK Court of Appeal began hearing Google’s appeal against the High Court’s decision which allowed UK data subjects to sue Google Inc. in England for misuse of private information. In brief, at the beginning of 2013, several claimants alleged that Google used cookies to track their browsing activity without their consent. […]

EU Data Protection Regulation update: EU Council agreed on more flexibility for the public sector and postponed decision on “one stop shop” mechanism

On December 4 and 5, 2014, the EU Justice and Home Affairs Council (one of the configurations of the Council of the European Union) made some progress on the EU data protection framework and the Proposal for a European Regulation. It discussed data protection in the public section and the “One Stop Shop” mechanism. The EU Council reached a […]

WP29’s Guidelines on the “right to be forgotten” – De-listing on all domains (including .com) required

On November 26, 2014, Article 29 Working Party (“WP29”) published the Guidelines for the implementation of the European Court of Justice (“ECJ)’s recent decision in the Costeja case, C-131/12 (“right to be forgotten” decision), holding that data subjects have a right to obtain the de-listing of links appearing in the search results based on a person’s name. Most […]