The European Data Protection Board (EDPB) adopted a report on the coordinated enforcement framework ( CEF) on the enforcement of the right of access at its plenary session on 16 January 2025. The document, which summarises the experiences of the data protection supervisory authorities participating in the exercise, lists the obstacles, problems and makes recommendations for data controllers to exercise the right of access in accordance with the GDPR. During 2024, 30 data protection supervisory authorities in the European Economic Area (EEA)…
Read moreFRENCH SUPERVISORY AUTHORITY: EDPS adopts guidelines on pseudonymisation and seeks to strengthen cooperation with competition authorities
On 17 January 2025, the European Data Protection Board (EDPB) adopted guidelines on the use of pseudonyms and made proposals to strengthen cooperation with competition authorities. EDPB explains use of pseudonyms to comply with GDPR The GDPR, in its Article 4 , introduces the term “pseudonymisation”. It refers to it as a safeguard that may be appropriate and effective to meet data protection obligations. In its Guidelines, the EDPB clarifies the definition of pseudonymisation and how it applies. The guidelines clarify two…
Read moreFRENCH SUPERVISORY AUTHORITY: Advertisements inserted between emails: 50 million euro fine against ORANGE
On November 14, 2024, the CNIL fined the company ORANGE 50 million euros, in particular for having displayed advertisements between the emails of users of its electronic messaging service, without their consent. The context ORANGE provides its customers with an electronic messaging service (“Orange Mail”). Following several checks, the CNIL found that the company was displaying, between the emails present in users’ inboxes, advertising announcements in the form of emails. Based on these findings, the restricted committee – the CNIL body responsible…
Read moreLIECHTENSTEIN SUPERVISORY AUTHORITY: Relevant case law – Update #1
In future, the Data Protection Authority (DSS) will regularly send out short summaries of relevant court rulings as part of the newsletter. The first decision will be one by the Liechtenstein State Court (StGH) and four by the European Court of Justice (ECJ), which recently provided further clarification of the interpretation of the European General Data Protection Regulation (GDPR) and the Liechtenstein Data Protection Act (DSG). Note: A more comprehensive compilation of relevant case law in the area of data protection…
Read more64 articles found
