Two-minute Recap Of Data Protection Law Matters Around The Globe

Spanish Football Club Faces Fine

Spanish football club Osasuna was fined EUR 200,000 by the country's data protection authority for implementing an on-demand facial recognition system at its stadium. The authority stated its use violated the principle of data minimization as there are less intrusive alternatives. Furthermore, the data subject claimed that extensive use of biometric data was disproportionate; that the data controller failed to implement adequate safeguards; and that sole reliance on consent was insufficient to justify processing such data.

Meta Appeals to Overturn Irish Fine

Meta has asked the Irish High Court to overturn a "wholly disproportionate" EUR 91 million fine imposed by the Irish Data Protection Commission ("DPC"). The DPC found that Meta had not sufficiently protected users' personal data, particularly by storing user passwords in easily readable plaintext rather than utilizing encryption.