Data protection / facebook / Privacy / Privacy policies

Facebook needs to re-revise its privacy policy says recent Belgian report.

On January 30th 2015, Facebook revised its Data Use Policy (DUP) and Terms of Services. At the request of the Belgian Privacy Commission, ICRI/CIR (KU Leuven) and iMinds-SMIT (Vrije Universiteit Brussel) have conducted an extensive analysis of the revisions. So what does the current version of their report (dated 23rd February 2015) find? Emma Cradock, … Continue reading

blocking injunction / Data protection / deep packet inspection / Intellectual Property / Internet intermediaries / ISPs / Privacy

Cartier et al v Sky et al 2014: what if the ISPs’ blocking systems did not implement Shallow Packet Inspection technologies?

Over the last couple of years, music and film copyright owners have obtained several website-blocking orders under UK copyright rules (section 97A of the Copyright, Designs and Patents Act 1988). However, as there is no equivalent legislative provision for trade mark infringement, website-blocking orders have not been used in respect of trade mark infringement… that … Continue reading

Data protection / Google / Internet intermediaries / Privacy

Google signs formal undertakings committing it to change its privacy policy for UK online users

‘The hits keep on rolling when you’re Google…’ As previously reported in this blog here and here, Google is rarely out of the headlines when it comes to the daily workloads of European data protection agencies (DPAs). The most recent story is the news from the UK’s Information Commissioner’s Office (ICO) that Google has signed … Continue reading

big data / consent / Data protection / health data / Privacy / sensitive data

Article 29 Working Party on the concept of health data: could it mean that we need to adapt the definition of health data as well as that of personal data?

On 5 February 2015, the Article 29 EU Data Protection Working Party (WP) issued a letter addressed to Paul Timmers – the Director of Sustainable and Secure Society at the European Commission. Within the Annex of this letter, the WP identifies relevant criteria to determine when data processed by lifestyle and wellbeing apps and devices … Continue reading

Data protection / Internet intermediaries / Privacy / Right to be forgotten

A structured overview of the Article 29 Working Party’s guidelines on the implementation of the right to … alter the structured overview of data-subject information generated by search engines (the so-called ‘right to be forgotten’)

  The Article 29 Data Protection Working Party adopted on 26 November 2014 its guidelines on the implementation of the controversial Court of Justice of the European Union (CJEU) judgment on Google Spain v. AEPD and Costeja (C-131/12). In that case, the CJEU ruled on three questions concerning the interpretation of the Data Protection Directive … Continue reading

Data protection / Internet intermediaries / Law enforcement / Privacy / Surveillance / video surveillance

CJEU interprets the concept of ‘in the course of a purely personal or household activity’ and indirectly delineates the remit of the Data Protection Directive

In its judgement of 11 December 2014 (Case C-212/13 František Ryneš v Úřad pro ochranu osobních údajů) the Court of Justice of the European Union (CJEU) had to answer “a very precise” question [to use the words of Advocate General JÄÄSKINEN]: “Can the operation of a camera system installed on a family home for the … Continue reading

Privacy / Surveillance

EU Article 29 Working Party releases Opinion on Device Fingerprinting

That’s the way that the EU cookie rules crumble (again… even if it’s not a cookie), says watchdog The influential, pan-EU Article 29 Data Protection Working Party (DPWP) has released an Opinion (9/2014) on the applicability of the E-Privacy Directive (2002/58/EC) to device fingerprinting, in which it addresses what it believes to be “serious” data … Continue reading

Breach notification / Data protection / Privacy / Privacy impact assessment / Security

‘Nothing is agreed until everything is agreed’… but still a new version of Chapter IV of the proposed General Data Protection Regulation has been released!

The Council of the European Union has agreed on a “partial general approach” when reviewing specific aspects of the proposed General Data Protection Regulation (GDPR) in a note issued on the 3rd of October 2014 for publication in the Council Register. In particular, the note contains a revised version of the draft text of Chapter … Continue reading