article thumbnail

European Data Protection Roundup – January 2025

Debevoise Data Blog

Our top five European data protection developments from January are: UK ransomware reporting proposals. DeepSeek investigated by Italian DPA over AI chatbot data collection practices. Under the GDPR, personal data is any information that can be used to directly or indirectly identify an individual.

article thumbnail

Data Protection in the Workplace: Employer Guidance

Legal IT Group

For example, in 2020, the Data Protection Authority of Hamburg imposed a 35.3 This fact became known when the H&M servers encountered a technical error, and the data on the network drive became accessible to all employees for a few hours. Read more about employer monitoring and data protection in our previous article.

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

“Bossware” under labour and data protection law

new tech law blog

In this regard, we describe below what they should take under consideration in light of Polish labour law and data protection law. Therefore, implementation and exploitation of such solutions by the employer (as a controller of employee data) must be done in compliance with the rules for processing of personal data under Art.

article thumbnail

UK Data Protection Bill No.2 – What is changed?

Technology Law Dispatch

On 8 March 2023, the UK government presented a new version of the UK Data Protection and Digital Information Bill No.2. As with the previous bill, the new bill aims to alleviate the burden of compliance with the UK GDPR and its implementing UK Data Protection Act (2018) for organisations in the UK.

article thumbnail

European Data Protection Roundup – November 2023

Debevoise Data Blog

For example, the Garante notes the need to incorporate data protection by design and by default principles within any AI systems used in the healthcare space. In particular, the paper recommends the use of internal data access controls, regular auditing of data security measures, and the use of data protection impact assessments.

article thumbnail

European Data Protection Roundup – October 2023

Debevoise Data Blog

Data protection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.

article thumbnail

California’s Age-Appropriate Design Code (AADC) Is Completely Unconstitutional (Multiple Ways)–NetChoice v. Bonta

Eric Goldman

Last year, the Ninth Circuit struck down a key part of the AADC that required businesses to prepare Data Protection Impact Assessments (“DPIAs”) about their offerings and share those with the state AG. ” EVERY SEGREGATE-AND-SUPPRESS LAW DOES THIS BY DEFINITION. Newsom didn’t care.

Court 52