On January 30th 2015, Facebook revised its Data Use Policy (DUP) and Terms of Services. At the request of the Belgian Privacy Commission, ICRI/CIR (KU Leuven) and iMinds-SMIT (Vrije Universiteit Brussel) have conducted an extensive analysis of the revisions. So what does the current version of their report (dated 23rd February 2015) find? Emma Cradock, … Continue reading
Category Archives: Privacy
Cartier et al v Sky et al 2014: what if the ISPs’ blocking systems did not implement Shallow Packet Inspection technologies?
Over the last couple of years, music and film copyright owners have obtained several website-blocking orders under UK copyright rules (section 97A of the Copyright, Designs and Patents Act 1988). However, as there is no equivalent legislative provision for trade mark infringement, website-blocking orders have not been used in respect of trade mark infringement… that … Continue reading
Google signs formal undertakings committing it to change its privacy policy for UK online users
‘The hits keep on rolling when you’re Google…’ As previously reported in this blog here and here, Google is rarely out of the headlines when it comes to the daily workloads of European data protection agencies (DPAs). The most recent story is the news from the UK’s Information Commissioner’s Office (ICO) that Google has signed … Continue reading
Article 29 Working Party on the concept of health data: could it mean that we need to adapt the definition of health data as well as that of personal data?
On 5 February 2015, the Article 29 EU Data Protection Working Party (WP) issued a letter addressed to Paul Timmers – the Director of Sustainable and Secure Society at the European Commission. Within the Annex of this letter, the WP identifies relevant criteria to determine when data processed by lifestyle and wellbeing apps and devices … Continue reading
What if Commissioners could be heard by the right people? Why DRIPA is getting muddier and muddier…
Just before Christmas, the UK Interception of Communications Commissioner’s Office (IOCCO) published online its submission for the Investigatory Powers Review. It is a 51 p. document full of interesting things. The purpose of this post is to highlight the main points made by the IOCCO with a view to clarifying the debate as regards the … Continue reading
A structured overview of the Article 29 Working Party’s guidelines on the implementation of the right to … alter the structured overview of data-subject information generated by search engines (the so-called ‘right to be forgotten’)
The Article 29 Data Protection Working Party adopted on 26 November 2014 its guidelines on the implementation of the controversial Court of Justice of the European Union (CJEU) judgment on Google Spain v. AEPD and Costeja (C-131/12). In that case, the CJEU ruled on three questions concerning the interpretation of the Data Protection Directive … Continue reading
CJEU interprets the concept of ‘in the course of a purely personal or household activity’ and indirectly delineates the remit of the Data Protection Directive
In its judgement of 11 December 2014 (Case C-212/13 František Ryneš v Úřad pro ochranu osobních údajů) the Court of Justice of the European Union (CJEU) had to answer “a very precise” question [to use the words of Advocate General JÄÄSKINEN]: “Can the operation of a camera system installed on a family home for the … Continue reading
EU Article 29 Working Party releases Opinion on Device Fingerprinting
That’s the way that the EU cookie rules crumble (again… even if it’s not a cookie), says watchdog The influential, pan-EU Article 29 Data Protection Working Party (DPWP) has released an Opinion (9/2014) on the applicability of the E-Privacy Directive (2002/58/EC) to device fingerprinting, in which it addresses what it believes to be “serious” data … Continue reading
Metadata, content data almost the same thing? Yes, implies a N.Y. District Court! But is it for good or bad?
Shira A. Scheindlin, a District Judge from the United States District Court for the Southern District of New York issued a very interesting opinion on 28 October 2014 for those eager to know if the distinction between metadata and content data does make sense [members of the Peep Beep! team have already took their pens … Continue reading
‘Nothing is agreed until everything is agreed’… but still a new version of Chapter IV of the proposed General Data Protection Regulation has been released!
The Council of the European Union has agreed on a “partial general approach” when reviewing specific aspects of the proposed General Data Protection Regulation (GDPR) in a note issued on the 3rd of October 2014 for publication in the Council Register. In particular, the note contains a revised version of the draft text of Chapter … Continue reading