News

We encourage you to familiarize yourself with the latest news and interesting facts from the data protection (GDPR) and information security industry. Here you will find information about GDPR violations, decisions, and penalties imposed by supervisory authorities.•

Stay up-to-date with the latest events and changes in this field.

All the news on our website have links to source materials. This ensures that the information you find here is reliable and valuable.•

Recent posts

19.11.2021

Artificial intelligence in EU regulations

The European Centre for Parliamentary Research and Documentation has published information on the regulation of artificial intelligence. The proposed legal framework focuses on the specific use of AI and the…

19.11.2021

€ 15,000 fine for a personal data breach

The case concerned a customer of the Spanish telecoms operator Telefónica de España, S.A.U. After receiving advertisements without his consent, the customer tried several times, unsuccessfully, to opt out of…

18.11.2021

Federal Office for Information Security (BSI) warns of DDoS attacks

The BSI is expecting strong attacks on online retailer platforms in connection with the Black Friday and Cyber Monday marketing campaigns and over the Christmas period. The authority advises online…

18.11.2021

Datatilsynet does not consider consent to be an adequate legal basis for the use of covid passports

The Norwegian supervisory authority states that the EU COVID Certificate is a proportionate measure, as it allows for relief from the burden on the state when the alternative would be…

18.11.2021

Supervisory authorities will investigate the practices of the Vinted platform

Following numerous complaints received about a clothing sales service operated by the Lithuanian company Vinted UAB, the supervisory authorities of France, Lithuania and Poland have engaged in an investigation into…

18.11.2021

CISA releases manuals on cyber security incidents and vulnerabilities

The Cyber and Infrastructure Security Agency (CISA) has published cyber security incident and vulnerability response manuals. They provide guidance on incident detection and analysis, mitigation and elimination, recovery and post…

18.11.2021

The Finnish supervisory authority (the “Ombudsman”) reminds controllers that IT system log data containing information related to the protection of personal data must be stored under the principle of accountability

Under the GDPR, the controller must document the facts surrounding the personal data breach, its consequences and the remedial measures taken. This documentation must allow the supervisory authority to verify…

18.11.2021

The Spanish supervisory authority (Agencia Española de Protección de Datos – AEPD) has fined DATA 1000 FINCAS S.L., a property administration company, €2,000 for breach of Article 5(1) of the GDPR

The fined company provided a copy of the minutes of the general meeting held in May 2020 to the head of the security company CMM Seguridad S.L., as well as…

17.11.2021

The Personal Data Protection Office imposed a fine of over PLN 363,000 on Bank Millenium S.A. for failing to report a data protection breach and for failing to fully inform affected persons of the incident

The Personal Data Protection Office imposed a fine of over PLN 363,000 on Bank Millenium S.A. for failing to report a data protection breach and for failing to fully inform…

17.11.2021

The Cyprus supervisory authority has fined WS WiSpear Systems Ltd €925,000 for breaching the principles of lawfulness, fairness and transparency by collecting network card addresses (MAC addresses) and SIM card identifiers (IMSI) without users’ knowledge