Data Protection & Cybersecurity Archives | GamingTechLaw by Giulio Coraggio

The EDPB unvails new uncertainties with its guidelines on the concepts of data controller and processor

The EDPB guidelines on the concepts of data controller and processor are a valuable aid to the interpretation of fundamental aspects for the application of the GDPR.

Sep 2020

A German privacy authority issued a guide on data transfers after the Schrems II judgment

The privacy authority of the German state of Baden-Württemberg published a guide on data transfers outside the European Economic Area after the decision of the European Court of Justice in the famous Schrems II judgment.

Aug 2020

The Danish privacy authority issued a fine for breach of the data retention principle

The Danish privacy authority issued a fine against a hotel chain of approximately € 148K for breach of the data retention principle for data of its customers.

Aug 2020

Changes in the Italian gambling market with the August Decree

The Italian August Decree introduces gambling-related changes to Superenalotto, the fight against illegal sites, and advertising by affiliates.

Data Protection & Cybersecurity FinTech

Aug 2020

The European Data Protection Board sets the rules of Fintech with its guidelines on the PSD2

The Fintech revolution relies on data flows enhanced by the PSD2, which requires certainty now aimed by the European Data Protection Board guidelines on the interplay between the PSD2 and the GDPR, which leave gray areas though.

Top 5 recommendations on how to deal with data transfers after Schrems II decision

Here are some top 5 recommendations on the management of personal data transfers after Schrems II decision to help companies during these chaotic days.

BREAKING NEWS: Privacy Shield invalidated, but SCCs might not be enough for data transfers

The European Court of Justice held in the Schrems II case that the Privacy Shield is invalidated, but the possibility to rely on standard contractual clauses for data transfers needs to be assessed on a case by case basis.

Google convicted for late deindexing following a right to be forgotten request

Google has to pay damages for the late deindexing of pages following a user's request for the exercise of the right to be forgotten.

EU Commission report on GDPR reveals some gaps and improvements to be achieved

The report of the EU Commission on the GDPR unveils a situation where Member States and data protection authorities still need to have a more consistent approach and exploit all the potentials of the EU privacy regulation.

Jun 2020

Social media faces a privacy related fine for unlawful processing of data through cookies in Spain

The modalities of collection of individuals' consent and processing of personal data through cookies performed by a well-known social media was challenged by the Spanish authority that issued a privacy related fine against the company.