In what is one of the largest GDPR fines to date the German Federal Data Protection Authority (BfDI) has fined the telecommunications service provider 1&1 Telecom GmbH €9.55m. What was this about? Under GDPR organisations are obliged to put in place adequate technical and organisational measures (TOMs) to prevent unauthorised access to personal data. In Read more »

Introduction In October 2019 the European Court of Justice rejected pre-ticked boxes as a valid means of consent for cookies. Instead, under the EU E-privacy rules and GDPR, an individual must clearly affirm, by appropriate means, that they consent to cookies, such as ticking/checking an unticked/unchecked box. What’s the case about? In the case of Read more »

Introduction In October 2019 the Grand Chamber of the European Court of Human Rights (ECHR) ruled that employees’ privacy rights had not been infringed in what has been a somewhat controversial case about the covert video surveillance of Spanish supermarket employees (who were caught stealing on film); we previously wrote about the earlier judgement in Read more »

Introduction It’s a point often missed that whilst GDPR abolished data protection registrations the UK maintained the requirement to register in UK law. The registration must be made with the Information Commissioner’s Office (ICO) and a recent case shows that forgetting to do this won’t stop an organisation being fined. What was the case about? Read more »