EDPO (European Data Protection Office)’s Post

I have documentation proving that the Norwegian DPA doesn't rely on or take into account the European Data Protection Board Guidelines 04/2022 of 24 May 2023 on the calculation of administrative fines under the GDPR or other EDPB guidelines when handling complaints. Even though the complainant refers to these guidelines. #datatilsynet.

🔍 Concerns Raised Over UK Data Protection Bill’s Impact on EU’s GDPR 🌐 The UK’s proposed Data Protection & Digital Information Bill (DPDI) has raised eyebrows in Brussels. Aimed at replacing the EU’s General Data Protection Regulation (GDPR), the bill has sparked apprehensions about potential violations of the Trade and Cooperation Agreement and individuals’ rights. 📝 European Parliament member Paul Tang penned a letter questioning the bill’s effects on the GDPR. Meanwhile, the European Commission introduced a new EU-US data transfer framework, bolstering safeguards for US intelligence services’ access to European data. 🔍 Additionally, the Court of Justice of the EU (CJEU) recently ruled that decision-making by scoring systems using personal data is unlawful, with significant implications. #dataprotection #GDPR #privacy #EU #UK #legislation #mydatatrust https://lnkd.in/eQgvMcJq

"A letter sent by member of European Parliament Paul Tang, seen by Euractiv, raises questions regarding the potential effects of the UK’s Data Protection Bill on the EU’s General Data Protection Regulation (GDPR).   The letter, dated 22 February, states that the UK’s Data Protection and Digital Information Bill would weaken the protection of the GDPR and the protection of EU citizens.   'The soon-to-be-voted Data Protection & Digital Information Bill (DPDI), which is the UK Government’s attempt to replace GDPR, risks violating the Trade and Cooperation Agreement and the rights of EU and UK citizens', the letter reads." #GDPRandNonEUcompanies #EDPObrussels #EUrepresentative #DataProtection #UKrepresentative #EDPOuk #UKGDPR #EUGDPR #GDPR #DPDI #UKDataReform #DataReformBill #UKDataProtectionBill #DataProtectionBill Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/e7huMUeC

Another post-Brexit weakening of rights by the UK. This bill is far worse than described. On a macro level, failure to remain at least in step with EU GDPR risks the free flow of data between the EU and UK throwing thousands of organisations and businesses into chaos. #GDPRandNonEUcompanies #EDPObrussels #EUrepresentative#DataProtection #UKrepresentative #EDPOuk #UKGDPR #EUGDPR #GDPR #DPDI #UKDataReform #DataReformBill #UKDataProtectionBill #DataProtectionBill

#Safety for whom, from whom? Law enforcement with your #biometric data? Yet 8 of 10 #drugs withdrawn from market with toxicity are toxic in women. How about we start with biometric data used for better #health and less medical harm? “Not only is it eliminating the Biometrics and Surveillance Camera Commissioner, but it also allows indefinite retention of certain biometric data by UK law enforcement”, Tang wrote about the bill in his letter to the Commission, adding that “the DPDI undermines safeguards set by the European Court of Human Rights, potentially jeopardising law enforcement cooperation frameworks like Prüm II and the Law Enforcement Directive”. As a #FemTech founder, there already are cybersecurity risks to consider. Then add these creepy approaches from governments, to spy and control via data. This adds additional risk and adds hurdles to any venture seeking to build trustworthy #tech. Harms would most affect the marginalized, like #minority or #refugee populations. This makes people unwilling to share data and increases the #digitaldivide. Was at a women in #AI event last night co-hosted by Glasswing Ventures and C10 Labs where the issue of #GDPR and privacy standards came up. Personally, I too had thought Europe offered greater safety and protection for #datascience for women’s health. After a few brief weeks of exploring an attempted partnership in Europe, HER Heard made a quick pivot out of that and stayed fully American. Despite certain risks, the U.S. remains the best place to build tech. It takes a high integrity founding team and board with genuine consistent community engagement and partnerships to build what is needed to better serve all of us for health. #surveillance #data #dataprivacy #police #lawenforcement #humanrights Jennifer Jordan Kleida Martiro Beth Porter Rebecca Curry Simon Johnson Fiona Murray Ramesh Raskar

🔔🔍On July 2, 2024, the Lithuanian Data Protection Authority (State Data Protection Inspectorate) imposed a penalty of EUR 2,385,276 on Vinted for violating the #GDPR. The fine follows complaints from French and Polish DPAs, revealing that Vinted breached GDPR principles of legality, fairness, transparency, accountability, and data subject rights. 🟣VDAI’s investigation, covering complaints from 2021 and 2022, found that Vinted failed to adequately address requests for data deletion ("right to be forgotten") and access. Vinted rejected deletion requests without specifying the required "specific grounds" under Article 17 GDPR and failed to inform applicants about the continued processing of their data. 🟣Additionally, Vinted used "shadow blocking" to handle users potentially violating platform rules without their knowledge, impacting users' rights. Vinted also lacked sufficient measures to demonstrate compliance with GDPR accountability principles. 🔵The fine calculation considered the cross-border nature of Vinted's data processing, the number of affected data subjects, and the duration of the breaches. The decision, coordinated with supervisory authorities from several EU countries under the "one-stop shop" principle, may be appealed to the Administrative Court of Regions within a month. #privacy

⚡ The Court of Justice of the European Union (#CJEU) has issued today its decision in the case C‑33/22 (Österreichische Datenschutzbehörde). ⚖ In a nutshell, the court confirmed that the fact that the processing is carried out by a #committee of inquiry set up by the Parliament of a UE Member State does not, in itself, exclude such activity from the scope of the #GDPR. 🔴 Moreover, the fact that the #controller is a public authority whose main activity is to ensure national security is not in itself sufficient to exclude from the scope of the GDPR the processing of personal data by that public authority. 🔵 In addition, the CJEU stated that if a Member State has established only a single supervisory authority (#DPA) pursuant to the GDPR, that DPA shall be competent in respect of complaints referred to in Article 77 (1) of the GDPR, irrespective of provisions of national law that exclude from its competence processing of personal data falling within the scope of the GDPR. ⚫ For more on this decision, check out blog #PrivacyOutLoud: https://lnkd.in/dtTsFEyS

📰 Check out our latest article where we identify ten #dataprotection rulings delivered by the Court of Justice of the European Union (#CJEU) in 2023, interpreting various provisions of the #GeneralDataProtectionRegulation (#GDPR) and offering valuable guidance to #legalprofessionals, #organizations and #datasubjects when navigating the complex landscape of data protection rules.   🔎The highlighted rulings cover important GDPR provisions, such as, #compensation for non-material damage, #rightofaccess, #unlawfulprocessing, #profiling and #automateddecisionmaking.   👀 What can we expect to see in 2024? More important rulings are expected by the CJEU in the coming months which will provide guidance on interpretation of GDPR in relation to #oral #datatransfers and personalised #advertising.   🎯As data privacy continues to play a pivotal role in our personal lives and businesses, the need for #controllers and #DPOs to stay informed about and prioritise GDPR #compliance has become more critical than ever.   📖 You can read the full article by clicking the link🔽    #GDPR #DataProtection #CJEU #DataPrivacy #2023Highlights #2024Outlook https://lnkd.in/emU5jbQa

🇬🇧 UK GDPR reforms move forward in UK Parliament 👩⚖️On 29 November, the proposed UK Data Protection and Digital Information Bill moved a step closer to becoming law. The UK House of Commons voted to avoid recommitting the bill following the recent introduction of government-backed amendments, instead moving the proposal to the 👉 report stage of consideration. The bill, which was originally published in March, aims to make various reforms to the UK's GDPR and the Data Protection Act 2018. #GDPRUK Read more on the IAPP website 👇. --- #SypherPrivacyTalks Stay tuned for more:📌 follow the Sypher Solutions company page. We'll keep you updated on #dataprotection, #privacy, #privacymanagement, #GDPR, #GDPRcompliance, #DPO, #cookies, #consent

📢 Exciting News from the European Parliament! 🇪🇺 Yesterday, MEPs reached a crucial milestone by agreeing on their position to bolster the enforcement of data protection rules. Here are the key highlights from the recent developments: 🤝 𝑬𝒏𝒉𝒂𝒏𝒄𝒆𝒅 𝑪𝒐𝒐𝒑𝒆𝒓𝒂𝒕𝒊𝒐𝒏: Addressing concerns over lack of cooperation that has hindered cross-border investigations, MEPs are advocating for harmonized procedural rules to streamline the handling of such cases. 🔍 𝑬𝒎𝒑𝒐𝒘𝒆𝒓𝒊𝒏𝒈 𝑪𝒐𝒎𝒑𝒍𝒂𝒊𝒏𝒂𝒏𝒕𝒔: MEPs are pushing for stronger rights for complainants, including the right to be heard and access to information. This move aims to ensure fairness and transparency throughout the enforcement process. 📝 𝑵𝒆𝒘 𝑷𝒓𝒐𝒄𝒆𝒅𝒖𝒓𝒂𝒍 𝑹𝒖𝒍𝒆𝒔: The European Parliament has adopted its position on additional procedural rules related to the enforcement of the General Data Protection Regulation (GDPR). This step is crucial in ensuring the effective implementation of GDPR across Member States. ✅ 𝑺𝒕𝒂𝒏𝒅𝒂𝒓𝒅𝒊𝒛𝒆𝒅 𝑷𝒓𝒐𝒄𝒆𝒅𝒖𝒓𝒆𝒔: MEPs are proposing clear deadlines to expedite procedures, including time limits for acknowledging and processing complaints. Standardizing these procedures is essential for timely and efficient resolution of data protection issues. 📚 𝑩𝒂𝒄𝒌𝒈𝒓𝒐𝒖𝒏𝒅: Following concerns raised about uneven enforcement of GDPR by national Data Protection Authorities, the European Parliament took action to address these issues and strengthen enforcement mechanisms. 🛤️ 𝑵𝒆𝒙𝒕 𝑺𝒕𝒆𝒑𝒔: The file has been referred back to committee for inter-institutional negotiations. Stay tuned for updates on the progress of these discussions, which will be continued by the new Parliament following the upcoming European elections. This development marks a significant step forward in safeguarding data protection rights and ensuring consistency in enforcement practices across the European Union. Stay tuned for further updates on this important matter! #DataProtection #EURegulation #GDPR #EuropeanParliament Source: https://lnkd.in/gQT6PVRx