The privacy authorities for Canada and the United Kingdom (UK) have launched a joint investigation into the data breach that was discovered in October 2023 at the global direct-to-consumer genetic testing company 23andMe. Privacy Commissioner of Canada Philippe Dufresne and UK Information Commissioner John Edwards will investigate the 23andMe breach jointly, leveraging the combined resources and expertise of their two offices. 23andMe is a custodian of highly sensitive personal information including genetic information which does not change over time. It can reveal information…
Read moreDANISH SUPERVISORY AUTHORITY: Copenhagen Municipality severely criticised for lack of security measures
The Danish Data Protection Agency has severely criticised a case in which approximately 37,500 employees of the City of Copenhagen gained unauthorised access to data on up to 3.7 million people – including sensitive information about children. When moving files with a large amount of data (diskswap), due to human error, user access to the drive where the data was stored was too broad. As a result, approximately 37,500 employees in the municipality gained unauthorised access to information about up…
Read morePOLISH SUPERVISORY AUTHORITY: The Voivodeship Administrative Court confirms that data breaches cannot be trivialised
Sharing non-anonymised personal data with a journalist is a personal data breach and should be notified to the President of the Personal Data Protection Office – the Voivodeship Administrative Court in Warsaw has ruled. The Voivodeship Administrative Court in Warsaw dismissed the complaint of the District Public Prosecutor’s Office in Gorlice against the decision of the President of the Personal Data Protection Office, in which the supervisory authority imposed a fine of PLN 20,000 on the controller. The reason for such a sanction was…
Read moreEUROPEAN DATA PROTECTION SUPERVISORY: EDPS Formal Comments on the proposed European Health Union package
The EDPS has issued its Formal Comments on a package of three legislative proposals for a European Health Union. He welcomes a European unified approach to tackle cross-border health threats while respecting the role and competences of EU Member States’ national health systems. In these Formal Comments, he takes note of the positive steps taken by the Commission to further strengthen a coordinated approach on health matters and, in particular, to broaden the European Medicines Agency’s and the European Centre for Disease…
Read more