Another extreme penalty for insufficient personal data protection

1&1 Telecom GmbH, a German mobile service operator, was fined EUR 9.6 million for the failure to implement sufficient technical and organisational measures to protect the personal data of…

Data leaks could cost you dearly

Last year, one of the historically highest penalties for breaches of personal data protection, CZK 1.5 million, was imposed…

Recent CJEU case law on personal data protection

The Court of Justice of the EU (CJEU) has issued several judgements concerning personal data protection. In several aspects,…

Personal Data Protection Office on when to perform a DPIA

When does it become necessary to carry out a data protection impact assessment? The Personal

Deputies pass GDPR-adapting act

In December of last year, the Chamber of Deputies passed a long-awaited bill on personal data processing, designed to replace the existing Act on Personal

Users may be responsible for Facebook’s activity

The recent judgement of the Court of Justice of the EU (CJEU) will not please many administrators of ‘fan pages’ hosted on Facebook: in its ruling in case C 210/16 ULD vs. Wirtschaftsakademie, the CJEU concluded that the administrator is in the…

Cameras or privacy?

The monitoring of premises by CCTV cameras is common enough nowadays. Usually, the reason for installing them is the protection of property against theft or vandalism. Yet, as the…

Schrems versus Facebook, take two

Maximilian Schrems, an Austrian citizen, has become known in connection with the CJEU’s ruling annulling the Commission’s decision that declared the USA a safe country to transfer personal data<…