Can't find what you're looking for? Try the search bar or refine your parameters using the Frameworks & Concepts button above.
The privacy discourse is often one-sided: regulators and campaigners are vocal (“fundamental rights violated”, “illegal consent”), and few want to push back in public (lawyers because they are not keen on voicing their opinion, businesses because they fear drawing attention to themselves) – even though the GDPR *allows* interferences with privacy and data protection rights […]
Fancy catching up on some of the issues regarding onlineadvertising, ePrivacy, the GDPR, data as a commodity, cookieless and consent? Listen to this podcast episode in which I presented a different angle on these topics (and more). privacy data protection
Goodbye Google Cache – you were one of the best friends of litigators when it came to evidence-gathering. The Wayback Machine is obviously still there and a tremendous resource for longer term evidence, but for shorter term Google Cache was great. (On the defending side, if you were savvy enough, you knew that you could […]
Confusing, much? With all the “AIAct adopted” posts, 2 months after the previous flood of “AI Act adopted” posts, anyone not following closely might think “What, again?”. (+ rinse and repeat in a few weeks during European Parliament phases) So here’s the explanation: today’s COREPER vote by EU Member States was one of two critical […]
Is this about having their cake and eating it too? Norway, Netherlands & Hamburg want European regulators to take a position on “pay or consent” (or “pay or OK” or “pay or data”, however you wish to call it), and the Norwegian data protection authority says in this respect that “it will still be possible […]
The linguistics” – that’s what I said was intriguing about the AG Opinion in a GDPR class action case (Meta v BVV, CJEU case C-757/22) when Global Data Review asked me for a quote. This case deals with Art. 80(2) GDPR, which allows EU Member States to adopt (if they wish) laws to permit (consumer […]
Are you keen to have a discussion about datagovernance and third-party risk management (AI, cybersecurity, ESG), and will you be in Brussels (or come to Brussels) early March 2024? We are holding a complimentary event on 8 March for businesses and trade associations, with breakout sessions on these topics, as well as (in parallel) sessions […]
Reading through the CNIL’s new decision against Yahoo on cookies brings back to mind a question that has stuck with me for well over a decade: what is the exact reasoning that has led many EU-based authorities to say that advertising cookies/etc. are not strictly necessary for the provision of a service, and why does […]
It’s finally open: public consultation by the European Commission on the GDPR. Privacy campaigners will be sure to respond – but will controllers & processors? This is your chance to submit comments on what works and what doesn’t. Whether you see weaknesses in the way in which the DPO role is structured (I know this […]
Interesting new CJEU judgment on “controllership” (but only limited considerations re “joint controllership”) and perhaps incidentally broadening the legal ground of “legal obligation” under the GDPR. The CJEU says that legal provisions can determine the purposes and means “at least implicitly”, which is not exactly what some authorities had considered previously. The context: the Moniteur […]
