69 results found

Following Schrems I case (C-362/14 of 6 October 2015), which invalidated the Safe Harbour Privacy Principles, another legal action filed by Max Schrems challenges the EU to U.S. personal data transfers made by Facebook ...

According to the opinion of the Advocate General Pedro Cruz Villalón, published 12 December 2013, the Directive 2006/24/EC is as a whole incompatible with the requirement, laid down in the Charter of Fundamental Rights, that every limitation on the exercise of a fundamental right must be provided for by law.

De-referencing beyond EU borders is not an obligation or a prohibited practice for search engine operators according to the Court.

NERA Director Dominik Huebler and former colleague Claudia Beckmann published an article on quantum and class certification in privacy disputes in the peer-reviewed Mass Claims Journal. Drawing on NERA's recent work...

On 10 February 2021, the Council of the European Union published a press release according to which the Member States' representatives at the Council have agreed to grant a negotiating mandate to the Council for the revised rules on ...

In this webinar, attendees will learn: - Internal organisation and internal control framework - Requirements related to ICT and security risks  - Data protection requirements

The huge volume of information held about European citizens in the United States, particularly by US tech companies, has been a concern for some time.

The transfer of data outside the European Economic Area may only be done in compliance with Chapiter 5 of the GDPR (for more information, consult our webinar on the topic).

On 21 March 2019, Advocate General Szpunar ("AG") issued some clarifications about consent requirements with regard to cookies in the Planet49 case.

10 April 2020 – As part of the efforts to help curb the spread of the COVID-19 pandemic and mitigate its impact throughout the European Union, on 8th of April 2020...

The Court of Justice declared the directive n° 2006/24/EC on the retention of data invalid.

An employee was dismissed for sending abusive messages via WhatsApp on a work computer.

On 13 December 2022, the European Commission issued a first draft adequacy decision (available here) on a potential upcoming EU-US Data Privacy Framework.

A second exception is the urgent need to act: the SAC may adopt provisional measures on its territory for a maximum period of three months.

On April 14, 2026, the European Data Protection Board (EDPB) published a draft template for conducting data protection impact assessments (DPIAs) under the EU General Data Protection Regulation...

On 10 July 2023, the EU Commission adopted its adequacy decision for the EU-US Data Privacy Framework ("Framework"). After years of negotiations between the EU and the US, the EU...

On 10 January 2017, the EU Commission issued a proposal for a Regulation on the respect for private life and the protection of personal data in electronic communications.