03 October 2019
Planet49: CJEU Rules on Cookie Consent
www.twobirds.com/en/news/articles/2019/global/planet49-cjeu-rules-on-cookie-consent

On 1 October 2019 the Court of Justice of the European Union (the 'CJEU') delivered its judgment in Planet49, a case analysing the standard of transparency and consent for the use of cookies and similar technologies.

03 December 2019
Pay attention to IT security to avoid GDPR fines
www.twobirds.com/en/news/articles/2019/global/pay-attention-to-it-security-to-avoid-gdpr-fines

It has been over 1,5 years since the General Data Protection Regulation (GDPR) has become applicable. While there was little enforcement in the first months, this has changed: European Data Protection Authorities (DPAs) ...

23 January 2019
First French GDPR sanction: Google fined EUR 50 million by the CNIL
www.twobirds.com/en/news/articles/2019/france/first-french-gdpr-sanction-google-fined-eur50-million-by-cnil

On 21 January 2019, the French Data Protection Authority (CNIL) has issued the first French sanction under the GDPR since the entry into force of the Regulation, namely a pecuniary sanction of EUR 50 million against ...

29 November 2019
The French Data Protection authority (CNIL) imposed a EUR 500,000 fine on Futura Internationale and confirms its willingness to implement "all the promises and potentialities of the GDPR".
www.twobirds.com/en/news/articles/2019/france/the-french-data-protection-authority-cnil-imposed-a-eur-500-000-fine-on-futura-internationale

On 21 November 2019, the CNIL imposed a EUR 500,000 fine on FUTURA INTERNATIONALE, a company of less than 100 employees, operating in the energy sector (providing insulation and heat pump equipment) and partner of EDF. ...

04 July 2019
Cookies: ICO publishes new guidance on cookies
www.twobirds.com/en/news/articles/2019/uk/cookies-ico-publishes-new-guidance-on-cookies

On 3 July 2019, the UK Data Protection Authority, th¬e Information Commissioner, published new guidance on the use of cookies together with a 'myth-busting' blog post.

13 May 2019
Facebook: Brussels Court of Appeal refers case to Court of Justice of the EU
www.twobirds.com/en/news/articles/2019/belgium/facebook-brussels-court-of-appeal-refers-case-to-court-of-justice-of-the-eu

In the latest episode of the case between Facebook and the Belgian Data Protection Authority, the Brussels Court of Appeal has referred 6 preliminary questions concerning the power of the Authority to engage in ...

09 December 2019
Information Commissioner consults on subject access guidance
www.twobirds.com/en/news/articles/2019/uk/information-commissioner-consults-on-subject-access-guidance

The UK Information Commissioner has just issued a consultation on new, draft, guidance on dealing with subject access request. The call for comments closes at 17:00 Wednesday, 12th February 2020.

26 April 2019
ICO issues new guidelines on the processing of children's data
www.twobirds.com/en/news/articles/2019/uk/ico-issues-new-guidelines-on-the-processing-of-childrens-data

The ICO has released its new code on age-appropriate design. It imposes strict rules on information society service providers whose services are likely to be accessed by children

07 May 2019
The Spanish Data Protection Agency has published a list of processing operations for which a privacy impact assessment is mandatory
www.twobirds.com/en/news/articles/2019/spain/spanish-data-protection-agency-publishes-list-of-processing-operations

After having received the favorable opinion of the European Data Protection Board, the Spanish Data Protection Agency ("AEPD") released last 6th May a list of processing operations for which it is necessary to carry out ...

14 December 2020
Brexit deal agreed: The need to appoint an EU and/or UK representative for #GDPR or UK data protection law purposes remains
www.twobirds.com/en/news/articles/2019/uk/article-27-representative--do-you-need-to-appoint-an-eu-representative-a-uk-representative-or-both

With a Brexit trade deal now having been agreed, a number of data protection compliance actions must be considered by organisations, including whether the appointment of an article 27 representative in the UK and/or the ...