Gambling and video gaming companies risk not to be compliant with the GDPR since they adopt a merely formal approach, while the EU privacy regulation could impact their model of business.
The data protection authority of Sweden, Datainspektionen, issued a fine under the GDPR against a school that implemented a facial recognition system to monitor the presence of students in classrooms.
The new Italian privacy rules on commercial information remove considerable restrictions on access by companies to such data, granting the opportunity to exploit new categories of data.
The Greek Data Protection Authority issued a fine of € 150,000 against a major consulting company under the GDPR for unlawful processing of the personal data of its employees.
Privacy compliance might no longer be the same after the $ 5 billion fine against Facebook to be issued by the Federal Trade Commission following the Cambridge Analytica case.
The potential decision of the European Court of Justice of invalidation of the Standard Contractual Clauses and the Privacy Shield urges companies to be ready for the worst.
A call center faced € 2 million privacy fine from the Italian data protection authority for lack of provision of a privacy information notice and collection of consent.
Privacy fines, data protection compliance organizational structure and how to determine when a party is a data controller or data processors are among the topics covered in the DLA Piper Italy event on the birthday of the GDPR.