Data Protection — Assembly — Regulation Updates

Data Protection,Data Protection

Irish data protection authority to stop Facebook transferring personal data from Europe to the US

The Standard Contractual Clauses under which the transfers occur may no longer be valid after the demise of Privacy Shield.

Brazil establishes its first data protection authority

The authority will oversee compliance with the General Data Protection Law, which will come into force in August 2020.

Australian Competition Authority sues Google for misleading conduct

The ACCC maintains Google misled consumers to obtain their consent for collecting a broader scope of personal data.

German Constitutional Court rules data retention rules unconstitutional

The Court found the current rules lack proportionality, and will mean the German Telecommunications Act needs revisiting.

European Court of Justice invalidates EU-US Privacy Shield scheme

The Court annulled the scheme through which transfers of personal data from the EU to the US take place, however companies can still use standard contractual clauses.

German presidency of the EU presents a new ePrivacy proposal

Germany will seek for an agreement on the purposes for processing communications metadata, including responses to future pandemics.

UK regulators form a Digital Regulation Cooperation Forum

Ofcom, the ICO and the CMA strengthen their collaboration to better monitor online services.

European Commission concludes two-year review of GDPR

The Commission maintains the Regulation is generally working, but has found room for improvement in cooperation between countries.

Google loses appeal against GDPR fine in France

The Council of State confirmed the decision of the data protection authority to fine Google €50m for its targeted advertising practices.

Germany announces COVID-19 contact-tracing app in collaboration with Deutsche Telekom

The Government is adopting a decentralised approach for matching contacts, and relies on voluntary adoption of the app.