Latest

Privacy Transformation - Issue 262

A note to you Whether you're a regular, occasional, or accidental visitor to this newsletter, thank you for being here! I have some news to share about a new direction I’m taking with these updates. Given your interest in privacy and data protection (a passion we share!

Privacy Transformation - Issue 261

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY & SECURITY European privacy regulator blasts Meta’s ‘pay-or-okay’ The European Data Protection Board is issuing a negative opinion on Meta’s pay-or-okay revenue model, where users pay a subscription to opt

Privacy Transformation - Issue 260

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY & SECURITY 💡 Insights: The American Privacy Rights Act's definition of covered data In combing through a proposed or draft bill, privacy professionals naturally orient themselves by seeking out defined terms,

Privacy Transformation - Issue 259

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Meta could face further squeeze on surveillance ads model in EU Meta’s tracking ads business could be facing further legal blows in the European Union: An influential adviser to the bloc’

Privacy Transformation - Issue 258

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Meta defends subscription model after ‘wishy-washy’ rebuke from top EU data agency Ireland’s Data Protection Commission is currently assessing Meta’s pay or consent model – the legality of which has now

Privacy Transformation - Issue 257

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY The U.S. may finally get a federal privacy law to rival Europe’s GDPR Get ready for a lobbying furore, because there’s suddenly a plausible, bipartisan, bicameral push to finally

Privacy Transformation - Issue 256

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY EU Parliament votes to strengthen GDPR enforcement Members of the European Parliament have voted on amendments to strengthen the enforcement of the EU’s General Data Protection Regulation, however, stakeholders urged for

Privacy Transformation - Issue 255

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Lawmakers to approve updated GDPR rules despite companies' concerns Lawmakers are set to approve rules under the EU's General Data Protection Regulation designed to ease cross-border cooperation between national

Privacy Transformation - Issue 254

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY France’s latest foreign interference bill questions democratic control over surveillance services In the wake of the terrorist attacks in 2015, France passed a sweeping Intelligence Law which empowered its intelligence services

Privacy Transformation - Issue 253

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Oireachtas Justice Committee raises concerns over plans to reform key data protection laws The Oireachtas Justice Committee has written to European Commission chief Ursula von der Leyen to raise concerns over plans

Privacy Transformation - Issue 252

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Europe’s landmark AI Act passes Parliament vote European lawmakers have voted to pass a landmark regulation on artificial intelligence in Strasbourg, a file that had garnered major lobbying attention from large

Privacy Transformation - Issue 251

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Under new management: Inside the Irish data regulator’s critical reboot The Data Protection Commission has endured no shortage of opprobrium under the leadership of Helen Dixon. Its new bosses might be

Privacy Transformation - Issue 250

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Concerns raised over UK Data Protection Bill’s impact on EU’s GDPR A letter sent by member of European Parliament Paul Tang raises questions regarding the potential effects of the UK’

Privacy Transformation - Issue 249

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY New Irish Data Protection Commissioners take up their roles wo new Data Protection Commissioners have taken up their roles. The Government announced the appointment of Dr Des Hogan and Dale Sunderland to

Privacy Transformation - Issue 248

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Ireland DPA: Two new Data Protection Commissioners appointed The Irish Government has announced the appointment of two new Data Protection Commissioners, Dr Des Hogan and Dale Sunderland. Their appointments will take effect

Privacy Transformation - Issue 247

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY EU countries give crucial nod to first-of-a-kind Artificial Intelligence law The ambassadors of the 27 countries of the European Union unanimously approved the world’s first comprehensive rulebook for Artificial Intelligence, rubber-stamping

Privacy Transformation - Issue 246

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Google forced to stop telling publishers about ‘right to be forgotten’ decisions after court ruling Google has been forced, under a ­controversial European privacy law, to stop informing media organisations of decisions

Privacy Transformation - Issue 245

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Google begins High Court case against Irish data regulator Google has started a High Court case against Irish data regulator over a new privacy investigation into the company, taking the unusual step

Privacy Transformation - Issue 244

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. Ireland Is World's 'De Facto Data Police' Ireland's Data Protection Commission has enforced the lion’s share of a record €1.78 billion in European GDPR fines

Privacy Transformation - Issue 243

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY You think last year was big for data protection? Brace yourself for 2024 Privacy legislation is set to mushroom with huge implications for Ireland. Helen Dixon speaks of ‘Clunky’ EU Law Thwarting

Privacy Transformation - Issue 242

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Data protection rules not observed, say compliance officers More than half of compliance professionals believe that data protection rules have been breached in their organisation at one time or another. An even

Privacy Transformation - Issue 241

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Key takeaways from the CJEU's recent automated decision-making rulings On 7 Dec., the Court of Justice of the European Union issued its judgment in the SCHUFA case (case C-634/21)

Privacy Transformation - Issue 240

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY EDPB: Application of the GDPR successful, but sufficient resources are necessary to tackle the challenges of the future During its latest plenary, the EDPB adopted its contribution to the European Commission’s

Privacy Transformation - Issue 239

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY European Union squares the circle on the world’s first AI rulebook The AI Act is a landmark bill to regulate Artificial Intelligence based on its capacity to cause harm. The file

Privacy Transformation - Issue 238

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY EU data protection authorities ban Meta from personal data usage in behavioural advertising The European Data Protection Board has announced its binding decision about banning Meta’s platforms from processing personal data

Privacy Transformation - Issue 237

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Consumer groups file complaint against Meta’s ‘pay-or-consent’ model The European Consumer Organisation (BEUC) and 18 of its members has filed a complaint to the European Commission against Meta’s “unfair pay-or-consent”

Privacy Transformation - Issue 236

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Meta secures temporary pause to effects of DPC’s data processing ban The Irish arm of technology giant Meta has brought a High Court challenge against a proposed immediate ban against its

Privacy Transformation - Issue 235

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Irish Data-protection commissioner Helen Dixon to leave role Helen Dixon has confirmed that she will leave her role as the State’s data-protection commissioner in early 2024 after a decade in the

Privacy Transformation - Issue 234

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Electric Ireland warns data of 8,000 customers may have been compromised Electric Ireland said the personal and financial information of about 8,000 of its customers may have been compromised and

Privacy Transformation - Issue 233

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY EU squeezes Meta on personal data use for targeting ads The European Data Protection Board HAS adopted a binding decision that will ban Facebook and Instagram owner Meta from using the personal data of users

Privacy Transformation - Issue 232

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments. PRIVACY Thousands of drivers have sensitive data exposed to hackers in major IT breach The driving licences of thousands of motorists who had vehicles towed on behalf of the Irish police were left

Privacy Transformation - Issue 231

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY DPC inquiry into Irish Central Bank data breach compounds regulator’s embarrassment The Central Bank, which has happily doled out more than €400 million of fines to financial institutions and individuals in the past 17

Privacy Transformation - Issue 230

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Dixon’s dilemma: Irish data watchdog faces big call over Meta’s subscription plan Eyebrows were raised around the world last week when it emerged that Meta was planning to start charging Europeans a monthly

Privacy Transformation - Issue 229

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY TikTok challenges €345m fine for failing to protect children’s privacy TikTok has launched a High Court challenge aimed at quashing the Data Protection Commission's decision to fine it €345m for failing to

Privacy Transformation - Issue 228

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY 'The Department got caught out': The story of the dossier scandal When a whistleblower went public more than two years ago to reveal controversial information gathering techniques within the Department of Health – one

Privacy Transformation - Issue 227

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY TikTok fined €345m by Irish Data Protection Commission The Irish Data Protection Commission has fined video-sharing platform TikTok €345m for breaches related to the processing of children's data. It follows an investigation which

Privacy Transformation - Issue 226

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Data Protection Commission seeks meeting with FAI over youth player registration concerns The Data Protection Commission (DPC) has asked to meet with the Football Association of Ireland amidst a data protection dispute that has seen

Privacy Transformation - Issue 225

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Meta denied injunction against Norway’s ban order on its surveillance ads Meta has lost a first bid to get an injunction slapped on a ban Norway’s data protection authority imposed on its consent-less

Privacy Transformation - Issue 224

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Court backs Data Protection Commission over Google inquiry The Irish High Court has dismissed a claim the Data Protection Commission failed to fully investigate a complaint made to it five years ago about an alleged

Privacy Transformation - Issue 223

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Irish Central Bank admits data breach may have hurt credit ratings of more than 20,000 borrowers More than 20,000 borrowers may have been unfairly assessed for loans or credit assessments because of an

Privacy Transformation - Issue 222

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Man arrested in connection with PSNI data breach A 39-year-old man has been arrested by PSNI detectives investigating criminality linked to last week's data breach. The man was arrested on suspicion of collecting

Privacy Transformation - Issue 221

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Northern Ireland police officers’ details exposed in ‘monumental’ breach A “monumental” data breach has exposed the names and rank of every serving police officer in Northern Ireland. A spreadsheet was mistakenly published online detailing the

Privacy Transformation - Issue 220

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Meta to seek user permission for targeted ads in the EU Facebook and Instagram parent company Meta has said it intends to ask users in the EU for their consent before allowing businesses to target

Privacy Transformation - Issue 219

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Schrems’ privacy group challenges Ryanair’s use of facial recognition Digital rights group NOYB on Thursday filed a complaint against Ryanair, alleging that it is violating customers’ rights to data protection by using facial recognition

Privacy Transformation - Issue 218

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY WhatsApp shifts legal basis for processing personal data in Europe WhatsApp updated its privacy policy on Monday (17 July) by switching to the ‘legitimate interest’ legal basis following an Irish Data Protection Commissioner’s sanction

Privacy Transformation - Issue 217

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY EU seals new US data transfer pact but challenge ahead The European Commission announced a new data transfer pact with the United States today, seeking to end the legal uncertainty plaguing thousands of companies which

Privacy Transformation - Issue 216

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Facebook-owner Meta loses as EU court ruling may boost powers over data breaches The ruling followed a challenge by Meta after the German cartel office in 2019 ordered the social media giant to stop collecting

Privacy Transformation - Issue 215

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY New Irish law might make data protection procedures confidential The Irish government added a last-minute amendment to a bill allowing the Irish Data Protection Commission to label all their procedures as confidential. 🔗 RELATED: * ‘Last-minute’ amendment

Privacy Transformation - Issue 214

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Digital rights group wants court to direct DPC to fully investigate claims against Meta A European digital rights advocacy group wants the High Court to direct Ireland’s data protection watchdog to fully investigate its

Privacy Transformation - Issue 213

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY KPMG found there was no legal basis for public services card database The Department responsible for the beleaguered Public Services Card was unable to legally justify the creation of a database of citizens’ photos when

Privacy Transformation - Issue 212

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Public Services Card debacle shows the State is prepared to take liberties with citizens' data The result of the latest investigation into the Public Services Card by the Data Protection Commission was made public

Privacy Transformation - Issue 211

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Why did the Irish data regulator not want to fine Meta? Data Protection Commissioner initially planned not to fine Meta for data breaches but fines are arguably the most dissuasive tool in the GDPR toolkit.

Privacy Transformation - Issue 210

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Record Meta fine masks Europe’s privacy struggle Five years and almost €4 billion worth of fines stemming from tougher privacy enforcement and the European Union is still asking if it's doing enough

Privacy Transformation - Issue 209

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Irish Data Protection Commission to order Meta to stop data transfers to US as firm faces EU fine Facebook owner Meta Platforms Inc. is set to be handed a record European Union privacy fine for

Privacy Transformation - Issue 208

Curated privacy news, insights & resources, with a focus on Irish and EU developments. ‌             ‌ PRIVACY Irish Government will not say if spyware is used to monitor Irish citizens The Government has declined to confirm whether or not State agencies routinely use spyware to monitor Irish citizens, following an inquiry from

Privacy Transformation - Issue 207

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Concerns raised as teachers required to use controversial PSC card for online payslips The mandating of teachers to get a public services card (PSC) in order to receive a new digital payslip has been branded

Privacy Transformation - Issue 206

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Meta hints at European exit over decision of data watchdog Facebook parent Meta has hinted at a possible exit from its European business should an upcoming decision by the Data Protection Commission fail to satisfy

Privacy Transformation - Issue 205

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Time is right for converstiton about AI regulation, says outgoing Data Protection Commissioner The Irish Data Protection Commissioner has said Artificial Intelligence (AI) is an area that needs regulation and now is the right time

Privacy Transformation - Issue 204

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY ChatGPT is entering a world of regulatory pain in Europe ChatGPT has set itself up for a rough ride with Europe's powerful privacy watchdogs. The chatbot is the hottest sensation of artificial intelligence

Privacy Transformation - Issue 203

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Italy's data protection agency opens ChatGPT probe on privacy concerns Italy's data protection agency said today it had opened a probe into OpenAI's ChatGPT chatbot over a suspected breach

Privacy Transformation - Issue 202

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Meta challenges DPC’s €265m fine over third-party data ‘scrape’ Meta is asking the High Court to quash a decision of Ireland’s data-protection watchdog to fine it €265 million for an alleged breach of

Privacy Transformation - Issue 201

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Bank of Ireland apologises for errors giving 'unauthorised people' access to customers' online accounts Bank of Ireland has apologised after a series of errors gave unauthorised people access to customers' Banking365

Privacy Transformation - Issue 200

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Use of Meta tracking tools found to breach EU rules on data transfers Austria’s data protection authority has found that use of Meta’s tracking technologies violated EU data protection law as personal data

Privacy Transformation - Issue 199

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY European Commission says Ireland's new data law may be 'inapplicable' The European Commission has dismissed Ireland’s new controversial data retention law as possibly “inapplicable and unenforceable”, as it was not

Privacy Transformation - Issue 198

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY EU-US data transfer framework: European privacy authorities put forth caveats The European Data Protection Board (EDPB) welcomed with reservations the new Data Privacy Framework, meant to provide the legal framework for transatlantic data flows. [Read

Privacy Transformation - Issue 197

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Brussels sets out to fix the GDPR The European Commission will propose a new law before the summer that’s aimed at improving how EU countries’ privacy regulators enforce the GDPR, a newly published page

Privacy Transformation - Issue 196

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Leinster House use of CCTV will be reviewed due to spying fears A “best practice” review of CCTV cameras at Leinster House will be undertaken following concerns being raised that they are being used to

Privacy Transformation - Issue 195

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Digital Rights Ireland to sue for damages for Facebook users over dark web data leak Digital Rights Ireland has said it intends to sue for damages for Facebook users across the EU whose data was

Privacy Transformation - Issue 194

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY EU vows to get tougher on Big Tech privacy violations The European Commission will now require that EU nations share overviews of "large-scale" GDPR investigations every two months. This includes "key procedural

Privacy Transformation - Issue 193

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY DPC in dispute with Dáil committee over 'inaccurate data' in report An Oireachtas Committee has told the Data Protection Commission it is “satisfied” with how it produced a report which the DPC has

Privacy Transformation - Issue 192

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY DPC unable to fine Facebook, Instagram on basis of profits earned from illegal data processing The Data Protection Commission (DPC) was unable to fine Facebook and Instagram on the basis of profits earned from illegal

Privacy Transformation - Issue 191

Curated privacy news, insights & resources, with a focus on Irish and EU developments. PRIVACY Meta Advertising Ban - Decision Published The Irish DPC issued it's final decision on Meta's illegal processing of user data for personal advertising. RELATED: Analysis: Bare (Contractual) Necessity: DPC issues Final

Privacy Transformation - Issue 190

PRIVACY Data Protection Commission increases Meta fines to €390m after European ruling Facebook and Instagram not entitled to rely on legal basis currently used to justify data collection under GDPR, says Irish regulator. RELATED: Noyb: Meta (Facebook and Instagram) prohibited from using personal data for advertisement DPC Statement Data Protection

Privacy Transformation - Issue 189

PRIVACY Twitter faces investigation in Ireland over data breach Ireland's Data Protection Commission on Friday opened a probe into Twitter over a data breach that has reportedly affected more than 5 million users. The opening of the investigation comes after the data of millions of Twitter users appeared

Privacy Transformation - Issue 188

PRIVACY EU Ombudsman seeks improvements to DPC reports to European Commission The EU Ombudsman recommended changes to how the Irish Data Protection Commission (DPC) provides regular reports to the European Commission on cases involving so-called Big Tech firms, in a move that may give the commission greater insight to the

Privacy Transformation - Issue 187

PRIVACY EU confirms draft decision on replacement US data transfer pact The European Commission has announced a draft decision on US adequacy, paving the way for a replacement EU-US data transfer deal to be adopted next year. RELATED: Statement: Commission starts process to adopt adequacy decision for safe data flows

Privacy Transformation - Issue 186

PRIVACY Meta faces record EU privacy fines EU is finalizing imminent decisions on the legality of the US tech giant’s data-hungry business model. RELATED: Meta’s Targeted Ad Model Faces Restrictions in Europe Noyb: Meta's business model declared illegal in the EU according to WSJ. Facebook, Instagram

Privacy Transformation - Issue 185

PRIVACY Ireland fines Meta €265M for ‘data scraping’ leak The penalty is for a 2021 data breach, where more than half a million records of people’s personal information surfaced on a public forum. RELATED: Data Protection Commission announces decision in Facebook “Data Scraping” Inquiry First patch to the privacy

Privacy Transformation - Issue 184

PRIVACY EU court throws access to anti-money laundering data in doubt The future of public registers of business owners has been thrown into doubt after the Court of Justice of the EU ruled the provision whereby the information is accessible in all cases to any member of the general public

Privacy Transformation - Issue 183

PRIVACY Is Elon Musk's Twitter about to fall out of the GDPR's one-stop shop? Helmed by erratic new owner Elon Musk, Twitter is no longer fulfilling key obligations required to claim Ireland as its "main establishment" under the European Union's General Data

Privacy Transformation - Issue 182

PRIVACY Data Protection Commission pleads for new senior staff The Data Protection Commission (DPC) warned of a desperate need to appoint new senior staff to ensure it could speed up how it makes decisions. Irish DPC submits Article 60 draft decision on inquiry into Yahoo! The Data Protection Commission (DPC)

Privacy Transformation - Issue 181

PRIVACY Czech Presidency hones in on platform workers’ personal data protection A new, third compromise text from the Czech Presidency of the EU Council on the platform workers' directive further emphasises the importance of algorithmic management and workers' personal data protection. New legislation will make it easier for

Privacy Transformation - Issue 180

PRIVACY Countdown to compliance as EU's Digital Services Act published The European Union's flagship reboot of long-standing ecommerce rules, aka the Digital Services Act (DSA), has now been published in the bloc's Official Journal. RELATED: Digital Services Act Court throws out data protection breach

Privacy Transformation - Issue 179

PRIVACY Data Protection Commission asked to investigate garda data retention The Data Protection Commission has been asked to investigate An Garda Síochána's practice of retaining files on people who have been cleared of producing or sharing child sexual abuse material. DPC facing legal action over GDPR complaint against

Privacy Transformation - Issue 178

PRIVACY Analysis: New Hope for EU-US Data Transfer Mechanism Following White House Executive The White House has issued its Executive Order (“EO”) on Enhancing Safeguards for United States Signal Intelligence Activities, which provides additional due process protections to the use of surveillance mechanisms by U.S. intelligence agencies and creates

Privacy Transformation - Issue 177

PRIVACY Biden signs executive order on EU-U.S. data privacy agreement The order will set surveillance limits and establish a new court for European citizens to redress privacy concerns with US intelligence agencies. RELATED: Whitehouse Statement Data Protection Commission warned legal costs could drain resources, document shows The risk register

Privacy Transformation - Issue 176

PRIVACY US expected to publish Privacy Shield executive order next week The White House is expected to publish its long-awaited executive order on transatlantic data transfers next week, according to three officials with knowledge of the matter. The order is designed to address European concerns over surveillance practices in the

Privacy Transformation - Issue 175

PRIVACY EU court adviser: Competition bodies may consider data protection breaches in their probes A non-binding opinion by the advocate general, an influential adviser to the EU’s top court, might open the door for antitrust watchdogs to assess compliance with data protection rules in future investigations. European Parliament group

Privacy Transformation - Issue 174

PRIVACY Scant resources might threaten enforcement on Big Tech, EU data protection bodies warn The European privacy watchdogs have sent a letter, seen exclusively by EURACTIV, requesting the European Parliament and Council to allocate more financial resources in next year’s budget or face a loss in credibility in the

Privacy Transformation - Issue 173

PRIVACY Instagram fined €405M for violating kids’ privacy The Irish Data Protection Commission has fined Meta-owned social media platform Instagram €405 million for violations of the General Data Protection Regulation. Sydney school’s use of fingerprint scanners in toilets an invasion of privacy, expert says Moorebank High School installed the

Privacy Transformation - Issue 172

PRIVACY Don’t expect Meta to pull out of EU if DPC halts data transfers to US Meta's threat to halt services in the EU if data transfers to the US are halted should not be taken seriously. Sharp increase in Garda attempts to obtain social media users’

Privacy Transformation - Issue 171

PRIVACY Norway wants Facebook fined for illegal data transfers Facebook owner Meta Platforms should be fined for continuing to shuttle Europeans’ personal information to the United States in violation of a landmark EU court ruling, Norway’s data protection authority has told its peer regulators. NOYB targets Google over '

Privacy Transformation - Issue 170

PRIVACY EU Court Expands Definition of Sensitive Data, Prompting Legal Concerns for Companies Companies will be under increased pressure after Europe’s top court ruled they must apply special protections to data that firms previously didn’t consider sensitive. The ruling will require companies to protect data that indirectly relates

Privacy Transformation - Issue 169

PRIVACY Facebook defends itself after handing over chat messages to US police investigating abortion Facebook has defended itself after court documents emerged showing that it provided chat messages to police which are being used to prosecute a mother and daughter over an abortion. Daragh Troy BL: Does your spouse’s

Privacy Transformation - Issue 168

PRIVACY Sensitive data ruling by Europe’s top court could force broad privacy reboot A ruling put out by the European Union’s top court could have major implications for online platforms that use background tracking and profiling to target users with behavioral ads or to feed recommender engines that

Privacy Transformation - Issue 167

PRIVACY Data Protection Commission to be expanded The Government is to appoint two additional commissioners at the office of the Data Protection Commission (DPC). The current Commissioner Helen Dixon is to become Chairperson of the DPC. [Read DoJ Press Release] CCTV to be used to prosecute littering and illegal dumping

Privacy Transformation - Issue 166

PRIVACY Data Protection Commission urged to act over alleged illegal retention of data The Government’s bid to address the fallout from convicted murderer Graham Dwyer’s successful challenge to mobile phone metadata retention laws here faces another hurdle with the Data Protection Commission being urged to act immediately over

Privacy Transformation - Issue 165

PRIVACY Europe’s state of mass surveillance The EU’s top court says mass surveillance is banned. Governments do it anyway. Insights: Your compliance obligations under the UK’s Online Safety Bill; or, welcome to hell Last month I wrote a post about the UK’s “world-leading” vision for age-gating

Privacy Transformation - Issue 164

PRIVACY DPC moves closer to possible ban on Facebook EU-US data flows Ireland's data privacy regulator moved a step closer to a ruling that could halt EU-US data transfers by Meta-ownedFacebook and Instagram when it shared an updated draft order with other EU regulators today, a spokesperson said.

Privacy Transformation - Issue 163

PRIVACY Plans to fast-track law to deal with fallout from Dwyer appeal hits hurdle Oireachtas Justice Committee has refused request from Minister to waive pre-legislative scrutiny of the legislation as part of efforts to have it passed before summer recess. Sovereignty requirements remain in cloud certification scheme despite backlash The

Privacy Transformation - Issue 162

PRIVACY The UK is getting closer to its own GDPR, and it’s quite different The UK government claims the Data Reform Bill will create more than £1bn in business savings over 10 years, but many are sceptical. RELATED: Pop-ups are dead, long live pop-ups: or, the bait-and-switch hidden in

Privacy Transformation - Issue 161

PRIVACY What’s wrong with the GDPR? European Data Protection Supervisor Wojciech Wiewiórowski wants Brussels to break the silence on flawed enforcement of the bloc’s flagship privacy rulebook. Max Schrems on the EU-US Data Transfer Saga, ‘Hate Mail’, and His Next Court Case In a presentation and interview at

Privacy Transformation - Issue 160

PRIVACY Facial recognition technology 'cannot be safely rolled out' in Ireland The proposed Garda use of facial recognition technology would pose more risks than benefits, according to a digital policy professor. How GDPR Is Failing The world-leading data law changed how companies work. But four years on, there’

Privacy Transformation - Issue 159

PRIVACY Facial recognition technology 'not about mass surveillance' - McEntee The Minister for Justice has said the introduction of legislation to enable gardaí to use facial recognition technology in criminal investigations "is not about mass surveillance." RELATED: Facial recognition technology: A solution to problems that hardly

Privacy Transformation - Issue 158

PRIVACY Graham Dwyer case: Supreme Court will dismiss State appeal against data ruling The Supreme Court is to make orders upholding Graham Dwyer’s successful High Court challenge to Ireland’s data retention laws and dismissing an appeal by the State. Data protection breach decision upheld in hospice worker'

Privacy Transformation - Issue 157

PRIVACY Delay in European Commission response to Irish data inquiry The European Commission has delayed its response to an EU Ombudsman investigation into the monitoring of data protection regulations in Ireland. Google sued for using the NHS data of 1.6 million Britons 'without their knowledge or consent'

Privacy Transformation - Issue 156

PRIVACY UK government confirms plans to remove 'cumbersome aspects' of GDPR In the Queen's Speech for the coming parliament, the UK government has confirmed plans for a Data Reform Bill to shake up GDPR. European Commission to force scanning of communications to combat child pornography The

Privacy Transformation - Issue 155

PRIVACY Alleged Excessive Data Gathering by Department of Social Protection Being Examined A database that stored information on when and where free travel passes were used was in place at the Department of Social Protection up to 2020 — when it was then deleted in its entirety. An Post accused of

Privacy Transformation - Issue 154

PRIVACY Facebook Doesn’t Know What It Does With Your Data, Or Where It Goes: Leaked Document “We do not have an adequate level of control and explainability over how our systems use data,” Facebook engineers say in leaked document. Ireland blew its chance to be super enforcer for online

Privacy Transformation - Issue 153

PRIVACY DMA: EU legislators resist pressure to change data provisions in the final text Despite insistence from stakeholders, the final text of the Digital Markets Act (DMA), containing significant changes to a key data-related measure, will not be revised. EU to unveil landmark law to force Big Tech to police

Privacy Transformation - Issue 152

PRIVACY Digital Markets Act: Significant Additions in Final Text The long-waited final text for the Digital Markets Act, seen by EURACTIV, contains some unexpected last-minute changes. Data commissioner told to look again at handling of complaint A judge has told the Data Protection Commission to look again at its handling

Privacy Transformation - Issue 151

PRIVACY EU court rules in favour of Graham Dwyer in privacy case, paving way for murder conviction appeal The Court of Justice of the EU (CJEU) has ruled that EU law does not support holding data of electronic communications indiscriminately for the purpose of combating serious crime in a case

Privacy Transformation - Issue 150

PRIVACY EU and US agree outline of new data transfer pact The European Union and the US announced a preliminary data transfer deal on Friday, seeking to end the limbo in which thousands of companies found themselves after Europe’s top court threw out two previous such pacts due to

Privacy Transformation - Issue 149

PRIVACY US eyes breakthrough on data dispute with EU as Biden visits Brussels Political pressure from senior political leaders on both sides of the Atlantic, including European Commission President Ursula von der Leyen, is mounting to approve a new Privacy Shield pact as early as this week with technical details

Privacy Transformation - Issue 148

PRIVACY Facebook fined €17m by Data Protection Commission The Irish Data Protection Commission is imposing a fine of €17m on Facebook parent company Meta. The decision followed an inquiry by the commission into a series of 12 data breach notifications it received in the six-month period between 7 June 2018

Privacy Transformation - Issue 147

PRIVACY TikTok children’s privacy lawsuit can proceed, says UK High Court A UK High Court judge has granted permission for a class-action style privacy lawsuit to proceed against TikTok over its handling of children’s data. Fine over CCTV use in Limerick is a ‘scandalous disgrace’ says Community Alert

Privacy Transformation - Issue 146

PRIVACY Data Protection Commission’s Meta ruling could lead to decisive victory for data privacy If ‘no transfers’ decision gets EU backing, onus will be on US to get its data act together. The Irish Times view on the Data Protection Commission: the case for strong regulation No other agency

Privacy Transformation - Issue 145

PRIVACY Facebook's Meta facing order from Irish regulator to suspend data transfers to US Facebook owner Meta is facing an imminent order from Ireland’s data regulator to suspend data transfers to the United States, in a far-reaching privacy case that has already led to threats from the

Privacy Transformation - Issue 144

PRIVACY Dem duo's warning of CIA 'warrantless backdoor searches' revives domestic spying debate A newly declassified letter from two Democratic senators warning that the CIA has been conducting “warrantless backdoor searches” of Americans’ data is roiling Washington’s long-running debate over balancing national security with civil

Privacy Transformation - Issue 143

PRIVACY Emily O’Reilly opens inquiry into European Commission policing of GDPR in Ireland EU ombudsman Emily O’Reilly has opened an inquiry into the European Commission’s failure to act against the State over the pace of big tech investigations. The move comes on foot of a complaint lodged

Privacy Transformation - Issue 142

PRIVACY Explained: The Austrian data regulator’s issue with Google Analytics In the latest in a long line of challenges to the transfer of personal data from Europe to the US, the Austrian data protection authority, DSB, has found that the use by an Austrian website of Google Analytics did

Privacy Transformation - Issue 141

PRIVACY Understanding why the first pieces fell in the transatlantic transfers domino The Austrian DPA and the EDPS decided EU websites placing US cookies breach data transfers rules. Report into 'unlawful' CCTV cameras in Limerick raised with Minister for Justice Minister of State Patrick O’Donovan has raised

Privacy Transformation - Issue 140

PRIVACY As its data flows woes grow, Google lobbies for quickie fix to EU-US transfers As the legal uncertainty in Europe clouding use of US cloud services cranks up, Google has responded by firing up its lobbying engines to call for US and European lawmakers to get a move on

Privacy Transformation - Issue 139

PRIVACY France flexes muscles with fines against Facebook, Google over cookie banners By announcing fines of €150 million for Google and €60 million for Facebook, the French privacy watchdog CNIL went much further than other EU watchdogs have gone to rein in the trackers, which allow advertisers to target people

Privacy Transformation - Issue 138

PRIVACY European Commission defends Ireland tech watchdog amid criticism of privacy record The Dublin-based privacy regulator has faced criticism that it’s failing to uphold EU privacy rights. China harvests masses of data on Western targets, documents show Hundreds of projects launched since 2020 show that Chinese police, state media

Privacy Transformation - Issue 137

PRIVACY 2022: The turning point in EU’s Digital Policy The EU's ambitious digital policies face a moment of truth in 2022. “Digital is the make or break issue,” the European Commission President Ursula von der Leyen said in her annual State of the Union speech in September.

Privacy Transformation - Issue 136

PRIVACY HSE given stolen data, including medical records, taken by criminals during cyber attack in May The HSE has been given stolen data, including medical records, obtained by criminals during the May cyber attack, it emerged today. RELATED: Tusla confirms its data among that stolen during HSE cyberattack Four months

Privacy Transformation - Issue 135

PRIVACY Data Protection Commissioner has marked Government's card with PSC outcome The dropping of the Department of Social Protection’s legal challenge to the DPC may indeed represent a seismic shift in the Government’s attitude to data protection, one of the key modern concerns for most western

Privacy Transformation - Issue 134

PRIVACY DPC warns Government of need for major staffing changes The Data Protection Commission has called on the Government to allow it to recruit more people at higher pay to allow it to continue to operate properly in the coming years. RELATED: Data Protection Commission says it is ‘unfit for

Privacy Transformation - Issue 133

PRIVACY Facebook sets aside €1bn for new Irish data fines as profits soar Facebook has set aside over €1bn for data privacy fines it thinks are likely to come from Ireland’s Data Protection Commission, new accounts show. The increased sum reflects the likelihood of more decisions on existing Irish

Privacy Transformation - Issue 132

PRIVACY Schrems accuses DPC of trying to stop publication of Facebook complaint documents Privacy campaigner Max Schrems accused Ireland’s data protection commissioner (DPC) of attempting to prohibit him from publishing documents related to a long-running complaint against Facebook. RELATED: Irish DPC removes noyb from GDPR procedure - Criminal report

Privacy Transformation - Issue 131

PRIVACY EU privacy enforcement not working, says GDPR architect European Union privacy enforcement still isn’t working according to plan and changes may be needed, according to one of the architects of the sweeping General Data Protection Regulation (GDPR). Graham Dwyer given boost by European court in challenge to murder

Privacy Transformation - Issue 130

PRIVACY WhatsApp Ireland given permission to challenge DPC’s €225m fine The European arm of WhatsApp has secured permission from a High Court judge to challenge the Data Protection Commission’s decision to fine it €225 million. ‘Right to be forgotten’ should be reviewed by Data Protection Commission say civil

Privacy Transformation - Issue 129

PRIVACY EC vice president takes aim at ‘understaffed’ Irish Data Protection Commission EU Commission vice president Vera Jourova says Ireland’s Data Protection Commission is “understaffed and needs more capacity”. RELATED: Data watchdog under fire over Dublin HQ move Fears mother and baby home archive could be hacked, damaged or

Privacy Transformation - Issue 128

PRIVACY Government to beef up data protection regime The Government is considering a significant change to the Data Protection regime here by appointing additional commissioners amid controversy over how the current DPC Helen Dixon’s office is responding to the volume and pace of privacy complaints, including against tech giants

Privacy Transformation - Issue 127

PRIVACY Ireland’s Facebook decision triggers argument over limits of GDPR EU officials are gearing up for a fight over how much leeway companies should have to process personal data after a decision targeting Facebook from Ireland’s privacy regulator prompted pushback from campaigners. DPC asks NOYB to remove draft

Privacy Transformation - Issue 126

PRIVACY DPC proposes €36m fine for Facebook over data complaint The Data Protection Commission has proposed fining Facebook up to €36m in one of more than a dozen probes it has opened into the social media giant, according to a draft decision published by the complainant. RELATED: DPC greenlights Facebook&

Privacy Transformation - Issue 125

PRIVACY We must reform our Data Protection Commission Even as Covid-19 has forced us to spend more time online, we face a deepening privacy crisis. Headlines about predatory profiling of vulnerable people by gambling firms, electoral manipulation, and market distortion that hurts us as consumers are now matters of routine.

Privacy Transformation - Issue 124

PRIVACY Ireland is a ‘GDPR bottleneck’ that lets big tech off the hook The architect of the EU law believes a centralised regulator with real teeth is required Parents warned spreading Covid misinformation on WhatsApp could breach data protection laws Parents found to be spreading misinformation or personal data in

Privacy Transformation - Issue 123

PRIVACY Survivors consider legal action to get health records amid 'bizarre' row with department Survivors of mother and baby institutions have been told to submit FOI requests to get access to their records, despite already applying under GDPR. Data Protection Commission concerned about Facebook's smart glasses

Privacy Transformation - Issue 122

PRIVACY Irish data watchdog launches two inquiries into TikTok The Data Protection Commissioner has announced two inquiries into the social media platform TikTok looking at compliance with GDPR relating to the processing of children's personal data and transfers of data to China. Data watchdogs fail to police Google,

Privacy Transformation - Issue 121

PRIVACY Central Bank took two months to inform credit unions of data breach Credit union executives were not told by the Central Bank that their personal details had been wrongly handed over to a third party until more than two months after the mistake occurred, it has emerged. German firms

Privacy Transformation - Issue 120

PRIVACY Record €225m fine for WhatsApp Ireland over data protection breaches The Data Protection Commission has fined WhatsApp Ireland €225m for infringements of data protection rules. RELATED: WhatsApp fine offers pause for thought EU warns over post-Brexit data agreement with UK Decision sustaining cross-border trade and services could terminate if

Privacy Transformation - Issue 119

PRIVACY Watchdog opens new investigation into Public Services Card The Data Protection Commission has begun a new investigation into the Department of Public Expenditure's use of the Public Services Card. It centres on complaints that the database of personal information underpinning the card is being unlawfully used by

Privacy Transformation - Issue 118

PRIVACY DNA analysis firm Genuity Science bought by HiberCell Genuity Science, the DNA analysis firm previously known as WuXi NextCode and Genomics Medicine Ireland, has been bought by New York headquartered company HiberCell. RELATED: Genuity says Irish DNA database will still be managed locally after sale Asking for employees’ vaccination

Privacy Transformation - Issue 117

PRIVACY Apple's Plan to "Think Different" About Encryption Opens a Backdoor to Your Private Life Apple has announced impending changes to its operating systems that include new “protections for children” features in iCloud and iMessage. If you’ve spent any time following the Crypto Wars, you

Privacy Transformation - Issue 116

PRIVACY Amazon given record $888 million EU fine for Data Privacy Breach Amazon.com Inc. faces the biggest ever European Union privacy fine after its lead privacy watchdog hit it with a 746 million-euro penalty for violating the bloc’s tough data protection rules. RELATED: With Amazon fine, Luxembourg emerges

Privacy Transformation - Issue 115

PRIVACY Civil rights ‘in peril’ unless data protection watchdog is reformed, says committee The Data Protection Commission (DPC) should adopt a culture of enforcement rather than “emphasising guidance” in its efforts to get businesses and organisations to comply with data privacy regulations, the Joint Oireachtas Committee on Justice has recommended.

Privacy Transformation - Issue 114

PRIVACY Austrian activist Schrems' Facebook complaint referred to EU court Austria's Supreme Court has questioned the legal basis on which Facebook collects user data and referred key issues for a ruling by Europe's top court, after awarding symbolic damages to activist Max Schrems in his

Privacy Transformation - Issue 113

PRIVACY HSE allowed to question frontline staff about vaccine status following data commissioner ruling Frontline health staff will have to indicate their Covid-19 vaccination status if asked by their employer under a directive due shortly from the HSE. This follows a ruling by the Data Protection Commissioner that vaccination may

Privacy Transformation - Issue 112

PRIVACY Data rights group concerned as CSO collects Covid information Digital Rights Ireland has expressed reservations about the CSO allegedly “not being open and transparent about its dealings with medical data”. German Data Protection Commissioner Tells Country's Government Organizations To Shut Down Their Facebook Pages Germany's

Privacy Transformation - Issue 111

PRIVACY EU rules UK data protection is ‘adequate’ in boost for business British data protection standards are “adequate”, the EU has ruled in a long-awaited decision that lets digital information continue to flow between the UK and the bloc. But Brussels warned Boris Johnson’s government the decision could be

Privacy Transformation - Issue 110

PRIVACY EDPB’s data transfer recommendations adopt a risk-based approach with teeth On June 21, the European Data Protection Board issued its highly anticipated final recommendations on supplementary measures for data transfers. The recommendations outline a process organizations can follow to transfer personal data outside the European Economic Area to

Privacy Transformation - Issue 109

PRIVACY ECJ rules privacy complaints against tech giants can bypass Irish data protection commissioner The European Court of Justice (ECJ) has ruled that privacy complaints against US tech giants do not only have to be taken to the Irish data protection commissioner but instead can be handled by any of

Privacy Transformation - Issue 108

PRIVACY The European Commission issues Schrems II-proof Standard Contractual Clauses to allow global dataflows Following the coming into effect of the GDPR three years ago and in light of last year’s Schrems II decision, the European Commission has adopted a new set of Standard Contractual Clauses (SCC) aimed at

Privacy Transformation - Issue 107

PRIVACY HSE cyber attack latest: Sensitive data of 520 patients has been put online by hackers, HSE reveals HSE data relating to around 520 patients, as well as some corporate documents, have been released on to the internet following the cyber-attack, the HSE revealed today. RELATED: How to negotiate with

Privacy Transformation - Issue 106

PRIVACY Data Protection Commission resumes Facebook data transfer probe The Data Protection Commission (DPC) has given Facebook six weeks to respond to an investigation that may trigger a ban on the social media giant's transatlantic data transfers following a High Court ruling that the probe could resume. HSE

Privacy Transformation - Issue 105

PRIVACY HSE cyber attack: 'Inevitable' major Irish entity would be hit With malware attacks becoming more sophisticated and concerning, and critical infrastructure increasingly targeted, it was inevitable a major Irish public entity would be hit eventually. On Friday morning, it was the Health Service Executive. High Court rejects

Privacy Transformation - Issue 104

PRIVACY Working from home: Remote workers face monitoring by employers of number of mouse clicks per minute, warns union Remote workers may be forced to accept invasive technologies that monitor the number of mouse clicks they make in a minute, the Government has been warned. Concerns have been raised about

Privacy Transformation - Issue 103

PRIVACY DPC clashes with regulators over proposed WhatsApp fine The Data Protection Commissioner has clashed with several of her European counterparts after they objected to her proposal to impose a fine of up to €50 million on WhatsApp for violating privacy laws. GDPR one-stop shop ‘unsustainable,’ says key regulators Irish

Privacy Transformation - Issue 102

PRIVACY Data Protection Commissioner criticised for inefficient decision-making on GDPR matters The Data Protection Commissioner (DPC) has defended her office from accusations of consistent inertia as “relying on very sensationalist statements based on inaccurate information”. A hearing of the justice committee on Tuesday (27th) focused on GDPR and heard from

Privacy Transformation - Issue 101

PRIVACY Thousands urged to sue Facebook in mass action over leaked data Facebook users whose personal data was compromised in a recent leak have been urged to join a legal case against the tech giant that will be the largest-ever mass action of its kind. Digital Rights Ireland (DRI) is

Privacy Transformation - Issue 100

PRIVACY Irish approach to data protection ‘Kafkaesque’, says Schrems Austrian privacy campaigner Max Schrems has described Ireland’s approach to protecting European Union citizens’ data as a “Kafkaesque” waste of Irish taxpayers’ money. Related: DPC launches inquiry into Facebook in relation to a collated dataset of Facebook user personal data

Privacy Transformation - Issue 99

PRIVACY Facebook facing mounting questions over massive data leak Three years after a scandal that saw data from nearly 90 million people illegally harvested to influence votes in elections like Donald Trump's 2016 win, Facebook finds itself in the middle of a tornado of questions around how it

Privacy Transformation - Issue 98

PRIVACY Department of Health inspected by data watchdog as part of ‘autism dossiers’ probe The Data Protection Commissioner (DPC) has carried out an inspection at the Department of Health as part of its “autism dossiers” probe. In a significant ramping up of its investigation, authorised officers visited the department this

Privacy Transformation - Issue 97

PRIVACY Department of Health built secret dossiers on children with autism The Department of Health has been secretly using private information to build and maintain dossiers on children with autism who were involved in legal actions against the State. Related: The whistleblower exposing the Department of Health's secret

Privacy Transformation - Issue 96

PRIVACY Irish data regulator sparks row with EU colleagues on Facebook oversight Ireland’s data protection commissioner (DPC) Helen Dixon has triggered an unprecedented war of words with other EU regulators, dragging into the open a long-simmering stand-off over its oversight of Facebook and other US tech companies based in

Privacy Transformation - Issue 95

PRIVACY Surveillance Concerns Could Hold Up European-U.S. Data Agreement for Years EU Justice Commissioner, Didier Reynders, has warned that negotiations with the U.S. over a new data-transfer agreement could take years rather than months. EDPB Statement on the ePrivacy Regulation The EDPB has strongly rejected the notion of

Privacy Transformation - Issue 94

PRIVACY Data Protection Commissioner hits back at ‘ludicrous’ critics Ireland's Data Protection Commissioner Helen Dixon has hit back at “ludicrous” comments from critics who complain her office has been too slow to rein in companies, including Facebook. EU to develop Covid-19 vaccine ‘pass’ amid divisions over issue The

Privacy Transformation - Issue 93

PRIVACY DPC publishes 2020 Annual Report - 10% increase in data security breaches The Data Protection Commission handled more than 10,000 cases last year, a 9% increase on the previous year. 6,628 valid data security breaches were notified to the commission over the period, up 10% on 2019,

Privacy Transformation - Issue 92

PRIVACY Big data is booming in the U.S., but other countries are making the rules Lawmakers and regulators in some of the world’s largest countries are ramping up enforcement of privacy laws, revising statutes or debating new rules. EU set to publish UK Adequacy Decision Draft adequacy decision

Privacy Transformation - Issue 91

PRIVACY Portugal’s plans to conclude ePrivacy saga The Portuguese presidency of the EU has pitched a new text on the controversial ePrivacy regulation, focusing on the processing of communications metadata and data stored on end-user equipment, according to the latest proposal. Passenger data not shared between Dublin and Belfast

Privacy Transformation - Issue 90

PRIVACY Data watchdog rejects EU criticism over Max Schrems complaints The DPC had been dealt a stinging rebuke by the EU’s Parliamentary Committee on Civil Liberties, Justice and Home Affairs. Data Protection Commission seeks answers on destruction of mother and baby homes recordings DPC has raised concerns with the

Privacy Transformation - Issue 89

PRIVACY Majority of Irish businesses unsure of data protection landscape More than three-quarters (76%) of Irish businesses have experienced growing uncertainty across the data protection spectrum over the last 12 months with no signs of this abating according to a new survey from the Association of Compliance Officers Ireland (ACOI)

Privacy Transformation - Issue 88

PRIVACY As Greece touts EU vaccine passports, privacy champions warn of risks Proof of vaccination or immunity could help countries open up faster, but EU privacy activists are sounding the alarm. It's time to tell the truth – give survivors their data Ministor for Children, Roderic O’Gorman'

Privacy Transformation - Issue 87

PRIVACY Data Protection Commission ‘acutely strained’ by big tech cases The Data Protection Commission warned it was “acutely strained” as it grappled with cases involving giant multinational tech companies and rising complaints from members of the public. European court opinion strengthens role of national data supervisors in Facebook case The

Privacy Transformation - Issue 86

PRIVACY Concerns raised about cameras at self-service supermarket checkouts Concerns have been raised about the installation of front-facing cameras at self-service checkouts at a number of Tesco stores in Ireland. The supermarket chain has claimed the move is an additional security feature for customers. 'Big rise' in complaints

Privacy Transformation - Issue 85

As you would expect — it's been a slow news week, but that leaves a bit of room for considering what lies ahead for data protection and privacy in the year to come. Here's my take: * The next six months will see a lot of attention paid

Privacy Transformation - Issue 84

Happy Christmas! Well we've finally made it to the end of what one could charitably call — an eventful year. While this unprecedented experience (at least in our lifetimes) was shared by all, it impacted everyone in different ways, and that impact will be with us for some time

Privacy Transformation - Issue 83

PRIVACY Twitter fined €450,000 by data watchdog for GDPR breach Twitter has been fined EUR 450,000 by the Data Protection Commission for a data breach, marking the first time the regulator has penalised a big tech company under European GDPR rules. Facebook will move UK users to US

Privacy Transformation - Issue 82

PRIVACY French privacy regulator readies fines for Google, Amazon The French data protection authority CNIL is set to impose multimillion euro fines on Google and Amazon for violations of EU privacy rules. DPC: EU-US Data Transfers - Judicial Review Proceedings The DPC has issued a press release stating that it

Privacy Transformation - Issue 81

PRIVACY Swedish court rejects Google's appeal in RTBF case The Swedish Administrative Court of Stockholm confirmed Google violated the EU GDPR in several instances and rejected Google's motion that Sweden's data protection authority's decisions be repealed due to formal deficiencies. The court

Privacy Transformation - Issue 80

PRIVACY State to wait on Dwyer case outcome before fixing data retention law The Department of Justice says it will wait until a key European decision on the case of convicted murderer Graham Dwyer is made before fixing Ireland’s data retention law. European Commission proposes measures to boost data

Privacy Transformation - Issue 79

PRIVACY Irish businesses left in limbo after Schrems II data transfer ruling More than two-thirds of Irish businesses want the Government to act to provide an interim solution that will allow companies to continue international data transfers following the recent ruling that invalidated the Privacy Shield agreement. Ministers have ‘difficulty’

Privacy Transformation - Issue 78

PRIVACY Open Rights Group taking the Privacy regulator ICO to court in a landmark case Open Rights Group (ORG) have announced that they are taking the UK ICO to court over the regulator’s failure to stop unlawful practices by the Digital Advertising Technology (AdTech) industry. Industry groups urge Europe

Privacy Transformation - Issue 77

PRIVACY Data Commissioner faces large costs bill in ‘most unusual’ Facebook case The Data Protection Commissioner has been ordered to pay the bulk of the substantial costs of long running litigation in the State and in Europe concerning the validity of decisions approving EU-US data transfer channels used by Facebook

Privacy Transformation - Issue 76

PRIVACY Prison security systems violate data law, DPC rules The Prison Service is illegally compelling prison officers to provide thumbprints in order to operate security systems, the Data Protection Commissioner (DPC) has found. EDPS Statement: Strategy for EU institutions to comply with “Schrems II” Ruling The European Data Protection Supervisor

Privacy Transformation - Issue 75

PRIVACY EU regulator warns Europol could be breaking data rules Law enforcement agency Europol is likely to have mishandled troves of personal data in breach of the agency's own rules, according to the data protection agency in charge of policing EU institutions. European Regulator Turns Up Heat on

Privacy Transformation - Issue 74

PRIVACY Data Protection Commission to receive €2 million extra funding The Data Protection Commissioner is getting more than €2 million extra next year, reflecting a 13%  increase, giving the data protection watchdog a tenfold increase in funding since 2014. Explainer: Irish websites had six months to fully comply with cookie

Privacy Transformation - Issue 73

PRIVACY EU's top court rules that UK, French and Belgian mass surveillance regimes must respect privacy The Court of Justice of the European Union issued judgments in three cases in the UK, France and Belgium. We answer some of the main questions. Opinion: What to expect on revised

Privacy Transformation - Issue 72

PRIVACY Warning of impact of Schrems II ruling on Irish economy Business group Ibec has warned that the recent ruling on the transfer of data from Europe to the United States that invalidates the Privacy Shield agreement, will have a “significant negative impact on the Irish economy”. Revamped EU data

Privacy Transformation - Issue 71

PRIVACY Civil liberties group demands action on 'largest data breach ever recorded' The Data Protection Commission has been accused of an “unacceptable” lack of action concerning the behaviour of the online advertising industry, alleged to be “the largest data breach ever recorded”. Related: New data on the RTB

Privacy Transformation - Issue 70

PRIVACY Facebook launches High Court challenge to DPC's order to suspend EU-US data transfers Facebook has launcheda High Court challenge to an order by the Data Protection Commission (DPC) telling the social media giant to suspend certain data transfers. More info: See NOYBs statement on this development. We&

Privacy Transformation - Issue 69

PRIVACY Ireland to Order Facebook to Stop Sending User Data to U.S. Ireland’s privacy regulator is seeking Facebook’s response to a preliminary order to suspend the company’s data transfers to the U.S. because of concerns over American government surveillance practices. See NOYBs statement relating to

Privacy Transformation - Issue 68

PRIVACY UK ICO says Children’s Code will help protect children online A statutory code requiring organisations to provide better online privacy protections for children has come into force, triggering the start of a 12 month transition period. The Age Appropriate Design Code or Children’s Code applies to organisations

Privacy Transformation - Issue 67

PRIVACY Salesforce and Oracle face GDPR lawsuit relating to cookies The Privacy Collective claims that its lawsuit against the two companies could amount to €10bn in damages being paid out to consumers. MPs slam UK data regulator for failing to protect people’s rights The Information Commissioner’s Office has

Privacy Transformation - Issue 66

PRIVACY Twitter privacy ruling delayed after dispute among EU regulators The DPC has said that some European Union regulators objected to Ireland's preliminary ruling in a landmark privacy investigation of Twitter, triggering a process where a majority decision will be sought. 101 Complaints on EU-US transfers filed NOYB

Privacy Transformation - Issue 65

PRIVACY EU, US initiate talks on potential 'enhanced' Privacy Shield The U.S. Department of Commerce and the European Commission announced that they have initiated discussions "to evaluate the potential for an enhanced EU-U.S. Privacy Shield framework to comply with the CJEU judgement in the '

Privacy Transformation - Issue 64

PRIVACY The demise of Privacy Shield may be the end of US-Europe data transfers Increasing restrictions on data worldwide are prompting companies to rethink how they do business. Why a Data Breach at a Genealogy Site Has Privacy Experts Worried Nearly two-thirds of GEDmatch’s users opt out of helping

Privacy Transformation - Issue 63

PRIVACY 'Ireland's Data Protection Commissioner needs more staff' There are many over-the-top, misleading claims made about Ireland's Data Protection Commissioner from foaming critics. But one of them has always been hard to completely refute: the office isn't sufficiently resourced. Cynics and critics

Privacy Transformation - Issue 62

PRIVACY Schrems II: there's no way to transfer data to US and comply with EU law In the week since the Court of Justice of the European Union (ECJ) handed down its far-reaching decision in the Schrems 2 case, many – especially in the US – just keep missing the

Privacy Transformation - Issue 61

PRIVACY Privacy Shield Invalidated, SCCs problematic — Blockbuster Schrems decision to impact nearly every business CJEU justices have given a blockbuster opinion that will impact nearly every business, small to large. At the heart of this decision lie Edward Snowden’s 2013 disclosures about secretive US surveillance agency programmes that access

Privacy Transformation - Issue 60

PRIVACY Judicial Review against DPC over slow procedure granted Irish High Court grants leave in case against Irish Data Protection Commission (DPC) over extremely slow GDPR complaints procedures. A Popular Bar Uses Smart Cameras to Monitor Customers’ Temperatures Using the 127 Hikvision cameras to monitor those who go to work

Privacy Transformation - Issue 59

PRIVACY Inquiry into data gathered for child benefit applications The Irish Data Protection Commission is set to review all data gathering pertaining to child benefit applications in the fallout from a contentious court case between itself and the Department of Employment Affairs and Social Protection. EDPS: 2020-2024 Strategy — Shaping a

Privacy Transformation - Issue 58

PRIVACY Businesses face privacy minefield over contact-tracing rules Bars, restaurants, hairdressers and churches face a minefield, privacy campaigners have warned, after the government instructed them to record people’s contact details in case they need to assist with test-and-trace efforts. EDPB responds to open letter on “confidential” dealings in Facebook

Privacy Transformation - Issue 57

PRIVACY US Cloud Act may threaten UK data adequacy decision, warns EDPB A powerful committee of data protection regulators has warned that the US Cloud Act could threaten Britain’s right to an EU data adequacy decision after Brexit. The EDPB letter can be found here. ICO releases findings on

Privacy Transformation - Issue 56

PRIVACY Next government needs to create a national public genome project Tomorrow is an important deadline. It’s the final day for Irish people who have donated brain tissue samples (or a donor’s family, if the individual is deceased) to decide whether to allow their DNA be used in

Privacy Transformation - Issue 55

PRIVACY EDPB Signals Efforts on International Data Transfers as CJEU Review of Current Tools Draws Near The European Court of Justice recently published plans to issue its much awaited decision in CJEU case C-311/18 on July 16. The ruling will impact how organisations lawfully transfer personal data from the

Privacy Transformation - Issue 54

PRIVACY Open Letter on “confidential” dealings in Facebook case DPC had "confidential" meetings with Facebook on bypassing the GDPR before it became applicable in 2018. NOYB discloses the details after two years of a Kafkaesque procedure. Related Reading: Irish Times: Schrems letter turns up heat on Data Protection

Privacy Transformation - Issue 53

PRIVACY Tusla becomes first organisation fined for GDPR rule breach The child and family agency, Tusla, has become the first organisation in the State fined for a breach of the General Data Protection Regulation (GDPR). The agency was fined €75,000 arising out of an investigation into three cases where

Privacy Transformation - Issue 52

PRIVACY Schrems files GDPR complaint over Android Advertising ID Google faces a data-protection complaint from Austrian privacy activist Max Schrems amid concerns it unlawfully monitors users and passes on the “tracking ID” to advertisers. You can read the complaint here. Adtech scores a pandemic pause from UK privacy oversight The

Privacy Transformation - Issue 51

PRIVACY Data protection offices need proper resources now more than ever Europe’s General Data Protection Regulation (GDPR) is unable to function properly and give mandated protections because EU member states have failed to adequately fund and staff their data protection authorities, a new report from privacy-focused web browser company

Privacy Transformation - Issue 50

PRIVACY GDPR at risk of failing due to underfunding of regulators, study finds Digital privacy regulations introduced in Europe nearly two years ago are in danger of failing because regulators have not been properly resourced, a new report claims. There are similar stories this week in both Wired (Germany says

Privacy Transformation - Issue 49

PRIVACY Ministers plan to give more UK public bodies power to access phone data Ministers want to expand the scope of UK surveillance laws to give more public authorities – including a pensions watchdog and the Environment Agency – the power to access vast databases of personal phone and computer data. COVID-19

Privacy Transformation - Issue 48

PRIVACY Report by the DPC on the use of cookies and other tracking technologies The DPC conducted a cookie sweep on 40 website operators. On foot of this they have issued updated cookie guidance (see resources section) and given a period of 6 months for controllers to bring their cookie

Privacy Transformation - Issue 47

PRIVACY DPC Report on the use of cookies and other tracking technologies The Irish Data Protection Commission released its report on the use of cookies and other tracking technologies. The DPC audited 38 organisations against the e-Privacy Directive which has had lax enforcement with respect to the use of cookies

Privacy Transformation - Issue 46

PRIVACY HSE says smartphone app to facilitate contact tracing to be rolled out The Health Service Executive has said it is likely that a smartphone app to facilitate contact tracing will be rolled out in the next 10 days. When the owner of a device with this app installed tests

Privacy Transformation - Issue 45

PRIVACY Data privacy erosions could leave a dangerous legacy When an image circulated on Twitter last week showing colour-coded data from more than a million smart thermometers plotted to a map of the United States, it created a sensation. Areas with fever-level readings from the thermometers, highlighted in orange and

Privacy Transformation - Issue 44

What an extraordinary few weeks it has been for Europe and the world, as nations try to get a handle on the COVID-19 outbreak, and societies adjust to what is, for the moment, the new normal. This issue focuses on privacy-related stories connected to the outbreak, illustrating how some governments

Privacy Transformation - Issue 43

PRIVACY COVID-19 response and data protection law in the EU and US Managing the COVID-19 outbreak and stopping its spread is now a global challenge. In addition to the significant health and medical responses underway around... Combining privacy and innovation: ICO Sandbox six months on It’s been an exciting,

Privacy Transformation - Issue 42

PRIVACY In Coronavirus Fight, China Gives Citizens a Color Code, With Red Flags A new system uses software to dictate quarantines — and appears to send personal data to police, in a troubling precedent for automated social control. Minister claims Data Protection Commission erred in findings on Public Services Card A

Privacy Transformation - Issue 41

PRIVACY Critics on Croatia's ePrivacy proposal: Legitimate interest provisions not legitimate The Croatian presidency published its first draft proposal to break the ePrivacy Regulation deadlock. The proposal would allow for metadata to be processed on the grounds of legitimate interest. Critisism of the proposal was hot on its

Privacy Transformation - Issue 40

The Irish Data Protection Commission today released their Annual Report for 2019 (see Resources section). Of note in the report are the significant increases in the reporting of complaints (75% over 2018) and data security breaches (71% increase over 2018). The DPC, despite resource constraints concluded 5,496 complaints in

Privacy Transformation - Issue 39

PRIVACY Data and privacy will be Brexit battlegrounds RTÉ's Europe Editor Tony Connelly examines the potential problems ahead for Ireland if the EU and Britain struggle to agree a new data sharing deal. PSC data protection policy updated after Doherty loses seat The Department of Employment Affairs and

Privacy Transformation - Issue 38

PRIVACY German regulator says Irish data protection commission is being 'overwhelmed' Ireland’s Data Protection Commission (DPC) is overwhelmed with the task of regulating big tech, needs more resources and should accept outside help, according to Germany’s federal data commissioner. Data Protection Commission launches separate probes into

Privacy Transformation - Issue 37

PRIVACY GAA tells clubs to stop using WhatsApp due to GDPR concerns Laois County Board has told clubs to stop using the messaging service WhatsApp due to General Data Protection Regulation (GDPR) concerns around those included in team groups. Croatian Presidency tempers expectations on ePrivacy progress The Croatian Presidency of

Privacy Transformation - Issue 36

PRIVACY Irish organisations struggle to comply fully with GDPR Just 8 per cent of Irish organisations believe they are fully compliant with EU digital privacy regulations, according to a new survey. 18 months after the introduction of the GDPR, the study shows that companies are still struggling to come to

Privacy Transformation - Issue 35

PRIVACY Controversial cameras needed at children’s hospital ‘to prevent babies being taken’ Controversial facial recognition technology is being installed in the new national children’s hospital in order to prevent babies being snatched, local politicians in Dublin has been told. This story comes on the heels of Politico reporting

Privacy Transformation - Issue 34

PRIVACY Department appeals Public Service Card enforcement notice by Data Commissioner The Department of Employment Affairs and Social Protection has officially appealed the enforcement notice served upon it regarding the Public Services Card by the Data Protection Commissioner. Department was advised by data consultancy not to use Public Services Card

Privacy Transformation - Issue 33

PRIVACY ‘We have a huge problem’: European regulator despairs over lack of enforcement More than 18 months after the European Union began implementing the world’s toughest privacy law, the bloc's ability to rein in Big Tech is increasingly in doubt amid growing frustration over a lack of

Privacy Transformation - Issue 32

Welcome to the final Privacy Transformation issue for 2019 in what was a significant year for the implementation and enforcement of the General Data Protection Regulation as well as the raising of privacy awareness among citizens worldwide. At the same time, advances in areas such as facial recognition and online

Privacy Transformation - Issue 31

PRIVACY ECJ says Facebook data transfers to US ‘valid’ in Max Schrems case Judges follow recommendations in advocate general opinions in four out of five cases The DPC is holding a DPO Conference on 31 March 2020 SAVE THE DATE: The DPC is holding a DPO Conference on 31 March

Privacy Transformation - Issue 30

PRIVACY Ireland National Children's Hospital Chooses Hikvision End-to-End With Facial Recognition The world's most expensive hospital project ever has chosen Hikvision but privacy experts and an Irish politician raised serious concerns. How do I protect my online privacy from 'surveillance capitalism'? Chris wants to

Privacy Transformation - Issue 29

PRIVACY Public Services Card: Doherty insists data commissioner misinterpreted law Minister for Social Protection Regina Doherty has insisted the Data Protection Commissioner has misinterpreted the law governing the use of the Public Services Card. Portland plans to propose the strictest facial recognition ban in the country Portland, Oregon, aims to

Privacy Transformation - Issue 28

PRIVACY How the ePrivacy Regulation talks failed again This week, the Permanent Representatives Committee of the Council of the European Union once again rejected the latest draft of the ePrivacy Regulation. The Nov. 22 vote means that the member states still cannot agree on a common position. MEPs choose Wiewiórowski

Privacy Transformation - Issue 27

PRIVACY DPAs from DPC stage: Fines don't mean everything Concerns that the EU General Data Protection Regulation "isn't working" based on the fact there hasn't been a bevy of massive fines are ill informed. Privacy 2030: A New Vision for Europe Prior

Privacy Transformation - Issue 26

PRIVACY DNA collection firm focus of data protection inquiry A State-backed company that plans to collect the DNA of hundreds of thousands of Irish people is being probed by the Data Protection Commissioner, following complaints about the way it gathers information. Archiving and Accountability: The 46th EDPS-DPO meeting The essence

Privacy Transformation - Issue 25

PRIVACY Sweden authorises the use of facial recognition technology by the police Sweden’s data protection authority has approved the use of facial recognition technology by the police, to help identify criminal suspects. The decision is controversial following successive bans of this technology in US cities. The Government Protects Our

Privacy Transformation - Issue 24

PRIVACY Facebook agrees to pay fine over Cambridge Analytica scandal Facebook has agreed to pay a £500,000 fine, the highest possible, to the Information Commissioner’s Office over the Cambridge Analytica scandal, ending more than a year of litigation between the regulator and social network. A statement by the

Privacy Transformation - Issue 23

PRIVACY DCU Brexit Institute: DPC Helen Dixon says post Brexit Personal Data issues are 'broad and deep' for Irish business Personal data issues arising from the UK’s departure from the EU are “broad and deep” – and Irish businesses that ignore these issues do so “at their peril”

Privacy Transformation - Issue 22

PRIVACY Is Ireland breaching EU rules by underfunding data regulator? With the release of Budget 2020, it is worth noting the contrast of the Horse and Greyhound Fund being awarded a budget approaching five times that of the Data Protection Commission, one of the lead supervisory authorities in Europe responsible

Privacy Transformation - Issue 21

PRIVACY Data Protection Commission ‘disappointed’ at budget allocation The Data Protection Commission received less than a third of the additional funding it sought in Budget 2020, a situation that leaves it having to reassess its planned expenditure for next year, a period in which its role as a key supervisory

Privacy Transformation - Issue 20

COURTS, JUDGEMENTS & OPINIONS Understanding the Planet 49 Decision The Court of Justice of the European Union issued a judgment on Case C‑673/17 (Planet49), relating to the use of pre-ticked boxes and valid cookie consent. It is a significant judgment. In this article, Alexander Hanff who has lobbied

Privacy Transformation - Issue 19

PRIVACY Google wins landmark right to be forgotten case The EU's top court has ruled that Google does not have to apply the right to be forgotten globally. It means the firm only needs to remove links from its search results in Europe - and not elsewhere -

Privacy Transformation - Issue 18

PUBLIC SERVICES CARD DPC report investigating Public Services Card released The final investigation report examining the lawful basis and transparency of processing of the Public Services Card has been released. The Department of Employment Affairs and Social Protection has also issued its reponse which can be found here. Inappropriate to

Privacy Transformation - Issue 17

PUBLIC SERVICES CARD Are we the wild west of data protection? By their actions shall we know them. The handling by the Government of the public service card (PSC) saga speaks volumes for how it governs. Right now the whole issue is of far greater importance than whether or not

Privacy Transformation - Issue 16

PUBLIC SERVICES CARD Data Protection Commissioner will no longer engage with Department of Social Protection regarding Public Services Card The Department of Social Protection’s rejection of the recent highly critical findings of the Data Protection Commissioner regarding the Public Services Card has been struck a perhaps fatal blow with

Privacy Transformation - Issue 15

PRIVACY IAB Europe Is Updating Its EU Privacy Guidelines, But Skeptics Say It's Not Enough The online advertising trade group IAB Europe is making changes to how it suggests publishers and ad-tech companies comply with Europe’s data privacy laws, but some say the updates might not properly

Privacy Transformation - Issue 14

PRIVACY Europe’s top data protection regulator, Giovanni Buttarelli, has passed away Europe’s data protection supervisor, Giovanni Buttarelli, has died. His passing at age 62 was announced by his office. He is a great loss to the privacy world, having been appointed as European Data Protection Supervisor in 2014

Privacy Transformation - Issue 13

PRIVACY DPC finds Public Services Card breached data protection laws The Data Protection Commission (DPC) has found the Department of Employment Affairs and Social Protection's processing of personal data during the issuing of Public Services Cards (PSC) for use in transactions between a person and a public body

Privacy Transformation - Issue 12

PRIVACY Committee rejects project to harvest brain tumour data A project to harvest information on brain tumours from 9,000 Irish patients has been rejected over concerns about patient consent and the potential sharing of project data with “unknown international third parties”. Protecting children online: update on progress The ICO

Privacy Transformation - Issue 11

PRIVACY Public services card carries ‘big risk’, says UN poverty envoy The public services card (PSC) system runs the risk of becoming a centralised database containing intimate, personal information, the UN’s special rapporteur on extreme poverty has said. Philip Alston, a professor of law at New York University, said

Privacy Transformation - Issue 10

PRIVACY Irish genetic data collected by private firm to be shared with health service Genetic data being collected by an Irish branch of a genomics multinational with links to China will eventually become available to the Irish health service, the chief executive of the company has indicated. UK taking '

Privacy Transformation - Issue 9

This week saw the EDPB release its 2018 annual report and the ICO issue guidance on Controllers and processors. Both are worth a read. In continuing fallout for Facebook from the Cambridge Analytica scandal, the Federal Trade Commission has reportedly voted to approve fining Facebook roughly $5bn to settle an

Privacy Transformation - Issue 8

Max Schrems and the question of whether SCC's comply with Europe’s data protection laws was before the ECJ this week. Europe's top court will give an opinion on December 12th which could have a significant affect on how hundreds of thousands of companies transfer personal

Privacy Transformation - Issue 7

I was speaking with a colleague today about the definitive uptick we're seeing in enforcement actions relating to the GDPR. You will see that enforcement stories are well-represented in this weeks edition. Data Protection Authorities are opening and concluding investigations at an increasing clip. The Irish DPC has

Privacy Transformation - Issue 6

This week the EU Cybersecurity Act (CSA) entered into force and ENISA, having now been given a permanent mandate, has been renamed the European Union Agency for Cybersecurity. This is a step firming up Europe's approach to cyber security and will see it play an increasingly important role

Privacy Transformation - Issue 5

With this issue of the newsletter I'm going to begin formatting it in a way that will hopefully be more useful to its readers. Beneath the initial headline story, you will now find other news items categorised to better identify the areas of privacy and data protection news

Privacy Transformation - Issue 4

Welcome to another issue of the Privacy Transformation newsletter. One of the problems that privacy professionals face is keeping abreast of the news and information that benefit them in doing their jobs (and ultimately, in looking after the individuals that they are entrusted with protecting). That's what this

Privacy Transformation - Issue 3

This week in Privacy news Facebook lost its appeal in the Irish Supreme Court against a High Court referral regarding the validity of EU-US data transfers to the CJEU. Max Schrems issued a statement in response to the decision noting that the case centres on a complaint he issued in

Privacy Transformation - Issue 2

Welcome to issue #2 of the Privacy Transformation newsletter. We are now one year on from the introduction of the GDPR and many are asking when the enforcement of the regulation against big tech is coming from the Irish DPC. Ms. Dixon points out in the Politico story below that

Privacy Transformation - Issue 1

Hello, and a very warm welcome to the first ever issue of the Privacy Transformation Newsletter! It's my hope for this newsletter to bring together relevant, topical and thoughtful data privacy news & resources of interest to the privacy community and beyond. Thank you sincerely for your interest,