Scope: privacy

Can't find what you're looking for? Try the search bar!

The Belgian DPA draws a hard line against excessive eight-year email access requests

Ex-employee request for 8 years of e-mails, labelled excessive by Belgian data protection authority in new decision. What is an “excessive” data subject request under the GDPR has not often been discussed by authorities, so this case may be of interest – but careful generalising it too hastily, due to the facts. Facts: – X, […]

Read Analysis →

Comparing French CNIL enforcement strategies with the uniform EDPB fine rules

How do GDPR fines of the French CNIL (and other authorities) compare to the EDPB’s guidelines on administrative fines for data protection infringements? That’s what the excellent Florence Chafiol and I will be discussing during our session (in French) at the IAPP’s “DPI: France” on Tuesday 14 March in Paris. Trends, divergences (+ forum shopping), […]

Read Analysis →