Data Protection & Cybersecurity Archives | GamingTechLaw by Giulio Coraggio

€ 405 million GDPR fine against Instagram for unlawful processing of children’s data

The Irish privacy authority issued a € 405 million fine against social platform Instagram for violating the GDPR in the collection and processing of data from users aged 13 to 17.

How to maximize the exploitation of data ensuring GDPR compliance?

The increase in GDPR fines made exponentially complex for businesses to maximize the profits generated by the exploitation of data, but here are potential options to be considered.

ENISA 2022 ransomware report gives insights also on regulatory measures to be undertaken

The ENISA 2022 ransomware report provides valuable insights to companies on how to deal with cyberattacks, also in relation to regulatory measures to be implemented to limit the risk of data breaches.

News rules on cross border data transfers from China

There have been significant developments on cross-border transfers of personal data and “important data” from China and here is a summary of the current status.

Transparency Decree: New privacy obligations towards employees in Italy

The so-called Transparency Decree has been adopted in Italy, introducing, among others, new information obligations, including new privacy obligations, of the employer towards employees on the use of automated decision-making and monitoring systems.

ByMaria Chiara Meneghetti 0Comments

New Public Register of Oppositions for opt-out to telemarketing kicks off in Italy

Operational as of today, July 27, 2022, is the new Public Register of Oppositions (RPO) in Italy, which regulates opt-out to telemarketing extending to mobile numbers and introducing new rules also for paper mail.

Commercial Data Protection & Cybersecurity

Google investigated for abuse of dominant position in data portability in Italy

The Competition Authority (AGCM) has launched an investigation in Italy against Google alleging abuse of a dominant position resulting from limitations imposed by the group on data portability to other operators.

ByEmanuele Gambula 0Comments

Cookies cannot be processed on the basis of legitimate interest according to the Garante

The Italian data protection authority, the Garante, ruled that profiling through cookies by a famous social network cannot be based on the legitimate interest of users.

ByGiorgia Carneri 0Comments

A bank is a data processor in the distribution of insurance policies

According to the Italian Data Protection Authority (the Garante), a bank that distributes insurance policies is a data processor under the GDPR rather than a data controller.

Jun 2022