Remove 2018 Remove Court Remove Data protection
article thumbnail

ICO Dawn Raids: How to respond and what you can do to prepare – An FAQ

Debevoise Data Blog

However, data controllers and processers should be aware that the UK’s Information Commissioner’s Office (“ICO”) can also carry out dawn raids as part of investigations into compliance with data protection laws. The ICO must obtain a court warrant to conduct a dawn raid. unlawfully obtaining personal data).

article thumbnail

Facebook fined €265Million for exposing PII of half a billion users!

Vogel IT Law

HealthCareInfoSecurity.com reported that “A user of the now-shuttered BreachForums in April 2021 posted a data set of 533 million Facebook profiles, including mobile numbers, email addresses and names scraped from the site in 2018 and 2019.” Facebook reported revenue of $23 billion in 2022 and $39 billion in 2021.

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The CLOUD Act and the Warrant Canaries That (Sometimes) Live There

Discovery Advocate

The Clarifying Lawful Overseas Use of Data Act (Pub. 115-141 (2018), or the CLOUD Act, was enacted in the U.S. on March 23, 2018, in response to difficulties U.S. Supreme Court heard argument on the case in February 2018. Microsoft lost the case in 2014 , but won an appeal in 2016.

Court 52
article thumbnail

The Supreme Court’s Decision in Lloyd v Google: What Impact on UK Mass Claims?

Debevoise Data Blog

Overview In a much anticipated decision, the UK Supreme Court has unanimously decided that a mass claim brought against Google by Mr Richard Lloyd, on behalf of a class that could include as many as 4.4 million iPhone users (the “iPhone Users”), cannot proceed, as currently constituted, as a ‘representative action’ in the English courts.

article thumbnail

Fourth Circuit Decision Highlights Class Action Waivers for Data Breaches are Alive and Well

Technology Law Dispatch

On August 18, 2023, the Fourth Circuit decertified approximately 20 million putative class action claims arising out of a 2018 data breach involving Marriott Hotels. According to the Fourth Circuit, this “error affect[ed] the whole of the certification order.”

article thumbnail

EU Rules Restricting the International Transfers of Non-Personal Data

Inside Privacy

In this blog post, we outline the current and forthcoming EU legislation on the international transfer of non-personal data. Some of this legislation has been enacted recently, and other legislation on this topic is making its way through the legislative process but has yet to be adopted. X (Recent Council versions remove this obligation.)

article thumbnail

TechTicker Issue 46: An eye for AI in DIA

Ikigai Law

Instead of a separate regulator, the government is contemplating a body similar to the data protection board suggested under the latest version of the data bill. Meanwhile, courts continue to interpret. , emerging tech (read: we got to do something about AI), digital competition (whose pie is this issue anyway?),