Introduction In an attempt to counter an ever-growing global menace, new EU cyber security rules have been finalized and published. They aim to address cyber security challenges at an EU-wide level – the new rules can be found here. The new EU rules are in the form of a Directive called the “NIS Directive” (in Read more »
French Data Protection Regulator fines BrandAlley
Last month the French data protection regulator, CNIL announced that it had imposed a €30,000 penalty on the fashion, beauty and home retailer, BrandAlley. BrandAlley is reportedly in the top 15 e-commerce sites in France with a claimed catalogue of more than 60,000 items. It also has a presence in other countries including Germany, Italy, Read more »
Recent Developments in Bribery and Corruption
It was something of a good news, bad news week for the Serious Fraud Office last week with the announcement that they have agreed a second deferred prosecution agreement but with the news that the politician who previously sought their abolition is now Prime Minister. Second DPA We looked at the UK’s first deferred prosecution Read more »
EU extends sanctions against Russia by a year
Since early 2014 the EU has imposed various sanctions with regard to Russia in connection with the situation in the Ukraine and the Crimea through a raft of different measures which have undergone expansion and renewal – we reported on the most recent extension at the start of this year here. Under recently adopted legislation the Read more »
More Safe Harbor enforcement – fines for three multinational companies
In our alert in February we talked about the activities of the Data Protection Supervisor in Hamburg, Dr Johannes Caspar and the proceedings that he said he was starting against three companies for failure to put in place measures to replace Safe Harbor. You can see that alert here. Dr Caspar published more details of Read more »
Episode 173: Ashley Madison Class Action – No Anonymity for Class Representatives
In this week’s podcast Eric and Jonathan look at progress with the Ashley Madison Class Action in the US. Can those whose names were exposed in the hack sue anonymously? What are the chances of similar class actions succeeding in Europe? Will GDPR make a difference? TechLaw10 is a 10-minute audio podcast update from U.S. Read more »
GDPR now published
The EU General Data Protection Regulation (“GDPR”) has now been published in the EU Official Journal. It will fully apply from 25 May 2018. By way of very quick reminder the key features of GDPR are: Streamlined data processing principles; Privacy by design and default; Recalibrated consent requirement; Mandatory data protection impact assessment for high Read more »
EU e-Privacy Directive reform launched
Hot on the heels of the adoption of the European General Data Protection Regulation (“GDPR” – see our FAQs and video on it here) the EU is now proposing to reform EU Directive 2002/58/EC on Privacy and Electronic Communications (http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:32002L0058) (“the EU e-Privacy Directive”) and has launched a public consultation (https://ec.europa.eu/digital-single-market/en/news/public-consultation-evaluation-and-review-eprivacy-directive). The EU e-Privacy Directive Read more »
Scottish £2.2 million settlement case for failure to prevent bribery
The Scottish prosecution service, the Crown Office and Procurator Fiscal Service, recently announced that a Glasgow logistics company has paid UK £2.2 million (USD $,3,113,810) under a civil settlement after self-reporting to the authorities in a matter concerning failure to prevent bribery under the UK Bribery Act 2010 (“the Act”). Section 7 of the Act Read more »
Episode 172: Children go to Court over climate change
This week’s podcast focuses on a recent U.S. court case in which a federal magistrate judge has ruled that a climate change lawsuit brought by 21 young people, ranging in age from 8 to 19 years old, can proceed. The lawsuit asserts that the U.S. federal government is in violation of their constitutional rights to Read more »