EDPB adopts statement on data processors
On 9 October 2024, the EDPB (European Data Protection Board) adopted an opinion on data processing relationships and the resulting obligations of
German court holds Microsoft liable for third-party privacy violations in Microsoft Advertising
The Microsoft Advertising service allows businesses to display personalised advertising and to measure their audience. It uses cookies and similar technologies, in particular a so-called ‘UET tag’. In a case before the court of Frankfurt
EDPB adopts guidelines on ePrivacy Directive
In November 2023, the European Data Protection Board (EDPB) published draft guidelines on the technical scope of Art. 5(3) of the ePrivacy
Swedish data protection authority imposes €3.2 million fine on pharmaceutical company
A Swedish pharmaceutical company had been using the Meta Pixel for personalised advertising and audience measurement on its website since 2017. In
AI Summit, Masterclass: „AI & GDPR: Key topics for SME’s“
ePrivacy is holding a masterclass on “AI & GDPR: Key topics for SME’s” at the AI SUMMIT in Hamburg. This masterclass covers
EDPB issues guidelines on legitimate interests
On 9 October, the EDPB adopted the long-awaited guidelines on legitimate interests. The EDPB initially endorses the three-step test developed by the European
AI compliance check: What does the EU AI Act mean for your business?
The EU AI Act has been in force since August of this year and will be partially applicable from February 2025. It
Sensitive data when ordering medicines online – the GDPR does not bar competition lawsuits
It follows from a decision also handed down on 4 October 2020 (Case C-21/23) that, in the opinion of the European Court
Principle of data minimisation in online marketing – permissibility of processing personal data which are manifestly made public by the data subject under Art. 9 GDPR
On 4 October 2024, the European Court of Justice (ECJ) issued another decision in the dispute between Max Schrems and Meta in case
The existence of the balancing of interests clause is to be examined in three stages – Art. 6 (1) (c) GDPR does not require a legislative basis
In a somewhat special case, the European Court of Justice (ECJ) had to examine whether the receipt or disclosure of contact data