According to a press release published by the Italian data protection authority (Garante) at the end of November 2024 and circulated in English at the beginning of January 2025, the media service provider Gedi has been formally warned not to share media content containing personal data with OpenAI, the creator of ChatGPT, for the purpose of training ChatGPT. The reason for the ban is that the media content may contain a significant amount of sensitive and criminal data and that…
Read moreFRENCH SUPERVISORY AUTHORITY: Processing of criminal records: CNIL calls two ministries to order
On October 17, 2024, the CNIL called the Ministry of the Interior and Overseas Territories and the Ministry of Justice to order for their poor management of the criminal record processing file (TAJ). The context The processing of criminal records (TAJ) is a judicial police file that records information relating to victims of offences and persons implicated and charged in the context of criminal investigations. In addition to the offence in question, it contains data relating to the identity of the persons, accused and victims, in…
Read moreITALIAN SUPERVISORY AUTHORITY: Autostrade and Amazon transport fined; Healthcare: training company fined; Condominium: no to video surveillance systems without assembly resolution; Two municipalities fined for unlawful use of interview recordings
15/12/23 No response to employee requests, the Authority fined Autostrade and Amazon transport Data controllers must always allow the exercise of the rights provided for by privacy legislation. The Authority has fined Autostrade per l’Italia and Amazon Italia Transport, respectively 100 thousand and 40 thousand euros, for not having given timely and reasoned feedback, not even denial or deferral, to the requests for access to their personal data presented by some employees and former employees. The first provision originates from…
Read moreIRISH SUPERVISORY AUTHORITY: Failure to share information with a nursing home about a resident’s criminal convictions
The Data Protection Commission (DPC) is aware of media coverage where concerns regarding General Data Protection Regulation (GDPR) compliance have been raised with regard to a failure to share information with a nursing home about a resident’s criminal convictions, and the risk that they presented to other residents. Information about a person’s criminal convictions, or alleged criminal offences, is afforded special protection in data protection law and must be processed carefully, as any inappropriate processing of this type of information…
Read more13 articles found
