Data Protection & Cybersecurity Archives | GamingTechLaw by Giulio Coraggio

The Italian data protection authority issues its inspection plan for the second half of 2020

The Italian data protection authority's new inspection plan focuses on high-risk areas and data breaches and notes an increase in sanctions issued under the GDPR.

The Italian privacy authority rules on the definition of personal data and the relevance of the DPO’s opinion

A recent decision of the Italian privacy authority revealed a considerably broad definition of personal data and how the opinion from the DPO can help to reduce GDPR fines.

ByVincenzo Giuffré 0Comments

How loot boxes deal with regulations and limitations, and how the gaming industry is reacting?

What are the main regulations imposing restrictions on loot boxes? And why are they so much under the radar of authorities?

The inconsistency of privacy rules on cookies requires a new approach to compliance

The latest guidelines of CNIL on cookies and the draft of the ePrivacy Regulation amplified even further the current inconsistency around cookie rules, requiring a new approach to ensure their privacy compliance.

What is the scope of a transfer impact assessment after the Schrems II case?

A personal data transfer impact assessment is necessary after the Schrems II case, but shall not go beyond what required to ensure GDPR compliance.

Sep 2020

The tangled negotiations of the ePrivacy Regulation and what to expect in the coming months

With the new Presidency of the Council of the European Union, the ePrivacy Regulation could be at a turning point. Still, there are a few open negotiations that might impact the future of the economy.

Sep 2020

The EDPB unvails new uncertainties with its guidelines on the concepts of data controller and processor

The EDPB guidelines on the concepts of data controller and processor are a valuable aid to the interpretation of fundamental aspects for the application of the GDPR.

Sep 2020

A German privacy authority issued a guide on data transfers after the Schrems II judgment

The privacy authority of the German state of Baden-Württemberg published a guide on data transfers outside the European Economic Area after the decision of the European Court of Justice in the famous Schrems II judgment.

Aug 2020

The Danish privacy authority issued a fine for breach of the data retention principle

The Danish privacy authority issued a fine against a hotel chain of approximately € 148K for breach of the data retention principle for data of its customers.

Aug 2020

Changes in the Italian gambling market with the August Decree

The Italian August Decree introduces gambling-related changes to Superenalotto, the fight against illegal sites, and advertising by affiliates.