PrivacyRules exclusive legal member for Thailand, Paul Crosio from the Silk Legal law firm, publishes an article to stress the importance of updating privacy policies as a result of the Thailand’s Personal Data Protection Act (PDPA). The article also highlights comparative elements with the EU General Data Protection Regulation (GDPR). Read the article here.
The Italian DPA (Garante per la protezione dei dati personali) has sanctioned the public administration INAL with a €50,000 fine for three recorded incidents that resulted in unauthorized access to sensitive data of some beneficiaries. The Garante underlines that all public bodies, in particular those with relevant institutional duties, must adopt adequate technical and organizational...
The Berlin DPA (Berliner Beauftragten für Datenschutz und Informationsfreiheit) has published a concise guideline on international data transfers relating to Art. 44 and following of the EU GDPR. The guideline notes that personal data may only be processed if there is a permit for this in the law. If personal data is to be transferred...
The Dutch Data Protection Authority (DPA – Autoriteit Persoonsgegevens) has published the the Smart Net Management Code of Conduct related to the processing of personal data by network operators. This code of conduct describes in concrete terms how network operators providing services in The Netherlands must comply with the EU GDPR on activities such as...
The Municipality of Reykjavík has been fined nearly EUR 36,000 for violation of the GDPR. In April 2021 the Icelandic Supervisory Authority (SA) was notified that one of Reykjavík’s elementary schools was obtaining consent from parents for processing of personal data of students using the Seesaw educational system, which is an American cloud-based service. The...
The official press release reads that Members of the European Data Protection Board (EDPB) have agreed to further enhance cooperation on strategic cases and to diversify the range of cooperation methods used. Andrea Jelinek, Chair of the European Data Protection Board, underlines that “strong and swift enforcement is crucial for ensuring a consistent interpretation of...
The Garante per la protezione dei dati personali (the Italian DPA) has sanctioned Clearview AI with a €20M fine for violations of the GDPR and has requested immediate deletion of it’s existing databases of Italian citizens’ images. Clearview AI is a US company which collects photos from the web and through AI analyses, processes and...
The French DPA (CNIL) has published its 2022-2024 strategic plan, which is accessible here. The plan has three priority areas for a trusted digital society: promoting respect for rights, promoting the GDPR as an asset and targeting regulation on high-stakes subjects.
American Headquarters:
PrivacyRules Ltd.
151 West 4th Street
Suite 200
Cincinnati, OH 45202, USA
European Office:
Via dei Della Robbia 112
50132, Firenze
Italy (IT)