Remove Data protection Remove Document Remove e-records
article thumbnail

European Data Protection Roundup – February 2025

Debevoise Data Blog

Our top-five European data protection developments from February are: European Commission publishes guidelines on prohibited AI practices : The EU Commission has published non-binding guidance on the EU AI Acts prohibited use cases. Spanish Telecomm provider fined 1.2 Spanish Telecomm Provider Fined 1.2

article thumbnail

European Data Protection Roundup – Q4 2024

Debevoise Data Blog

Our top-eleven European data protection developments for the end of 2024 are: EU Cyber Resilience Act: The Council of the European Union approved the Cyber Resilience Act , introducing cybersecurity requirements for digital products sold in the EU. The UK Upper Tribunal did not consider the provisions under the UK GDPR.

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Data Protection in the Workplace: Employer Guidance

Legal IT Group

For example, in 2020, the Data Protection Authority of Hamburg imposed a 35.3 In particular, specific details about the lives of some employees of H&M (illnesses, medical diagnoses, religious beliefs, and family problems) were comprehensively recorded and stored as information on a network drive. 6 (1) (e) of GDPR Art.

article thumbnail

You Subpoenaed My Documents, Shouldn’t You Pay for Them?

Percipient

Your company received a document subpoena in a legal dispute in which it is not involved. Or it received a data request from a consumer under the GDPR or California Consumer Privacy Act. The court-appointed the SBA as a receiver and permitted it to marshal Cardinal’s assets and business records. In United States v.

article thumbnail

European Data Protection Roundup – May 2024

Debevoise Data Blog

Our top five European data protection developments from May are: UK guidance on ransom payments: The UK NCSC and various insurance industry bodies co-published guidance on key considerations for ransomware payments. 22, then there must be sufficient human-involvement in that processing for it to be GDPR-compliant.

article thumbnail

UK Data Protection and Digital Information Bill: Key Proposed Changes

Debevoise Data Blog

On 18 July 2022, the UK government published the Data Protection and Digital Information Bill (the “Bill”), which proposes reforms to the UK’s data protection and e-privacy landscape in-line with the National Data Strategy.

article thumbnail

European Data Protection Roundup – May 2023

Debevoise Data Blog

Third country data transfers : Businesses that transfer personal data outside of the EEA may want to review their transfer mechanisms in light of new guidance on the EU and South East Asia SCCs, and the DPC’s record-breaking €1.2 billion fine against Meta. These developments, and more, covered below. (1)