Data protection / Law enforcement / Security / Surveillance / terrorism

New Air Passenger Data Processing Rules to Apply from 2018

Ready, steady, go… Clock countdown formally starts for the reform of three major pieces of EU data legislation! It’s finally final – three separate pieces of data privacy-related legislation in the EU will be coming into effect soon: As anticipated by Sophie last month here, the final version of the General Data Protection Regulation (GDPR) … Continue reading

Copyright / Data protection / Google / Internet intermediaries / Linking / Privacy

I link, he delists and they get entangled in! Re-mixing copyright, trade marks and data protection while waiting for the CJEU’s decision in GS Media…

Some of you certainly remember the Google v Vuitton case decided by the CJEU some years ago now, in 2010, which was a case about trade mark infringement. (Sometimes it is useful to go back to the roots!) To make the story short, the case involved the use of keywords corresponding to trade marks in … Continue reading

anonymisation / big data / Data protection / data protection agencies / European Data Protection Supervisor / General Data Protection Regulation / ICO / Privacy / pseudonymisation / Risk-based approach

The GDPR and the biggest mess of all: why accurate legal definitions really matter….

Issued last week, here is what seems to be the final version of the General Data Protection Regulation (the GDPR)! This 6 April 2016 version, likely to be adopted by the European Parliament this week, is now in the kiosks! HIP HIP HOORRAY I hear you thinking, either ironically because more than 4 years of … Continue reading

Data protection / Geo-location data / Personal data

Latest Policy Guidance Published on Data Protection and Location Analytics Data

‘We Know Where You Are’ to ‘We Know Who You Are’ … How far are the risks involved with processing information collected from geo-location technologies alleviated by data protection rules? With the wide uptake of smart mobile devices and the rapid development of location-based apps and services, all kinds of geographic information about us are … Continue reading

Access to data / Breach notification / Data protection / Data retention / General Data Protection Regulation / Law enforcement / Personal data / Privacy / Privacy impact assessment / Surveillance

Article 29 WP and the draft directive on the processing of personal data by law enforcement agencies: has Article 29 WP been heard?

Last month, the Permanent Representatives Committee (Coreper) of the Council of the EU  the compromise texts agreed with the European Parliament on data protection reform. As a reminder, the reform is a legislative package concerning two legislative instruments: the second of which discussed here (and far less catching the press headlines than the General Data … Continue reading

anonymisation / big data / Data protection / General Data Protection Regulation / Personal data / pseudonymisation / research / sensitive data

What does the agreed version of the GDPR say about processing personal data for research purposes? Is the GDPR better than the Directive?

What does the agreed version of the GDPR say about processing personal data for research purposes? Is the GDPD better than the Directive? So here we are. It’s almost Christmas and after three years of intense debate the Council of the European Union and the European Parliament have announced that they have informally agreed on … Continue reading

anonymisation / General Data Protection Regulation / Personal data

A German view of the Council’s proposed General Data Protection Regulation: let’s try one more time… by the way what do we do with Browser-Generated Information?

The Council of the European Union released its version of the Proposed Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or ‘GDPR’) on 11 June 2015, as mentioned by … Continue reading

Data protection / pseudonymisation / Risk-based approach

Council reaches general agreement on proposed Data Protection Regulation, but disagreements remain in view

‘A single road ahead or cross-roads reached?’ – Is the aim of EU harmonisation of data protection rules disappearing out of sight? On 15 June, the Council of the EU announced that it had agreed a general approach to the draft Regulation on the protection of individuals with regard to the processing of personal data … Continue reading

Data protection / Google

Court of Appeal upholds landmark judgement against Google arising from its exploitation of Apple’s Safari web-browser privacy settings

Should privacy protection extend to compensate me for ‘distress’ suffered from the aggregation of my browser-generated information without my consent, so as to enable third-party advertising to be targeted at me –  which in turn is viewable by others, on my device screen? In March 2015, the English Court of Appeal ruled that three individuals may … Continue reading