EDPB adopts guidelines on ePrivacy Directive
In November 2023, the European Data Protection Board (EDPB) published draft guidelines on the technical scope of Art. 5(3) of the ePrivacy
Author: ePrivacy GmbH
Swedish data protection authority imposes €3.2 million fine on pharmaceutical company
A Swedish pharmaceutical company had been using the Meta Pixel for personalised advertising and audience measurement on its website since 2017. In
AI Summit, Masterclass: „AI & GDPR: Key topics for SME’s“
ePrivacy is holding a masterclass on “AI & GDPR: Key topics for SME’s” at the AI SUMMIT in Hamburg. This masterclass covers
EDPB issues guidelines on legitimate interests
On 9 October, the EDPB adopted the long-awaited guidelines on legitimate interests. The EDPB initially endorses the three-step test developed by the European
AI compliance check: What does the EU AI Act mean for your business?
The EU AI Act has been in force since August of this year and will be partially applicable from February 2025. It
Sensitive data when ordering medicines online – the GDPR does not bar competition lawsuits
It follows from a decision also handed down on 4 October 2020 (Case C-21/23) that, in the opinion of the European Court
Principle of data minimisation in online marketing – permissibility of processing personal data which are manifestly made public by the data subject under Art. 9 GDPR
On 4 October 2024, the European Court of Justice (ECJ) issued another decision in the dispute between Max Schrems and Meta in case
The existence of the balancing of interests clause is to be examined in three stages – Art. 6 (1) (c) GDPR does not require a legislative basis
In a somewhat special case, the European Court of Justice (ECJ) had to examine whether the receipt or disclosure of contact data
No obligation for a data protection supervisory authority to take remedial action in the event of a breach of the protection of personal data
The case underlying a request for a preliminary ruling from the European Court of Justice (ECJ) was that an employee of a
Keine Verpflichtung einer Datenschutzaufsichtsbehörde im Falle einer Verletzung des Schutzes personenbezogener Daten Abhilfemaßnahmen zu ergreifen
Einem Vorabentscheidungsersuchen an den Europäischen Gerichtshof (EuGH) lag der Fall zugrunde, dass eine Mitarbeiterin eines Kreditinstitutes mehrfach unbefugt auf Daten eines Kunden