Remove Data protection Remove Defendant Remove e-records
article thumbnail

European Data Protection Roundup – January 2021

Debevoise Data Blog

As covered in our Annual Review , 2020 was a blockbuster year for European data protection. has appealed , both penalties show that companies need to be wary not only of how they treat customer data, but also employee data. Spanish DPA hands CaixaBank record €6m fine. While Notebooksbilliger.de

article thumbnail

European Data Protection Roundup – December 2023

Debevoise Data Blog

Sensitive personal data: The CJEU has clarified that the processing of special category personal data, such as health data, requires a legal basis under both GDPR Art. 6, meaning that businesses may wish to review their records of processing activities to ensure that both are reflected. 9 and GDPR Art.

article thumbnail

A New Era of FTC Privacy and Cybersecurity Oversight: Top Ten Things Companies Should Know When Assessing FTC Compliance and Exposure

Debevoise Data Blog

To establish individual liability, the FTC must show that the individual defendant participated directly in the illegal practices or had authority to control them. 27] Examples include the telemarketing sales rule, children’s online privacy protection rule, and health breach notification rule. [28] RCG Advances LLC et al.,