EDPO (European Data Protection Office)

"A privacy class action against Google that was dismissed in 2022 has been given new life by an appeals court, potentially impacting Chrome users dating back to 2016. The suit was brought by users who say that the Chrome Sync feature collected personal information from those that chose to opt out of it, ignoring their preference to separate their Google accounts from their activity in the Chrome browser.   The privacy class action was initially heard by U.S. District Judge Yvonne Gonzalez Rogers in Oakland, California, who dismissed it in December 2022 on the grounds that Google’s general privacy policy was sufficient to inform users of the possibility that the company might collect their information from any web browser. Judge Milan Smith of the 9th U.S. Circuit Court of Appeals in San Francisco said that the focus of that decision was 'misplaced' and that the ruling should have hinged on whether or not a reasonable user would assume their information was not being shared upon opting out of Chrome Sync." #privacy #GDPR #dataprotection #google #chrome   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/d9B7GFrz

"The subject of the complaint concerns the unlawfulness of processing and publishing the complainants’ personal data in an online telephone directory. The complainant resides in Hungary, and the data controller is registered as a company in Belgium. Based on Article 60.8 of GDPR, the decision to reject the complaint was made by the Belgian Supervisory Authority (SA), and was adopted and notified by the Hungarian SA. (...)   The Belgian SA, after deliberation, decided to dismiss the present complaint based on its discretionary power granted by its procedural rules in its own member state law. One of the reasons for the dismissal was on one hand that the personal data have ceased to be accessible online by the time of the procedure. Moreover, the documents in the file do not sufficiently support that there has actually been a violation as far as the subject of the complaint is concerned." #privacy #GDPR #dataprotection #hungary #belgium   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/eH8qWkDM

"The Dutch Supervisory Authority (SA) started the investigation on Uber after more than 170 French Uber drivers complained to the French human rights interest group the Ligue des droits de l’Homme (LDH), which subsequently submitted a complaint to the French SA. The French SA forwarded the complaints to the Dutch SA, which is the Lead Supervisory Authority for Uber. (...)   The Dutch SA found that Uber collected, among other things, sensitive information of drivers from Europe and retained it on servers in the US. It concerns account details and taxi licences, but also location data, photos, payment details, identity documents, and even in some cases criminal and medical data of the drivers. (...)   The Dutch SA imposed a fine of 290 million euros on Uber." #privacy #GDPR #dataprotection #uber   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/daCZhe8X

"Crypto project Worldcoin is now facing scrutiny in Colombia for alleged breaches of the country’s personal data protection laws, following similar accusations in several other nations.   On Wednesday, Colombian watchdog, the Superintendence of Industry and Commerce (SIC), announced it had filed charges against the project. The aim is to investigate if it contravened laws on safeguarding personal information, particularly in how it handles sensitive data.   [...] Critics contend that exchanging irreplaceable biometric data for cryptocurrency poses substantial privacy risks. They worry that such data might be exploited for surveillance or traded to third parties, even though Worldcoin asserts it maintains user privacy." #Privacy #GDPR #dataprotection #Worldcoin #BiometricData   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/dA4nXFDp

"In early May 2024, the European Parliament informed its staff of a massive data breach in the institution’s recruiting platform (called “PEOPLE”). The breach affected the personal data of more than 8,000 staff. This included ID cards and passports, criminal record extracts, residence documents and even sensitive data such as marriage certificates that reveal a person’s sexual orientation. The Parliament only found out about the breach months after it happened, and still doesn’t seem to know the cause. This is particularly worrying as the Parliament has long been aware of vulnerabilities in its cybersecurity system. EU institutions are naturally high up on the list of hackers and foreign adversaries. noyb has now lodged two complaints with the European Data Protection Supervisor on behalf of four parliament employees." #Privacy #GDPR #dataprotection #Noyb #EuropeanParliament   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/dNkyXgUW

"We have launched a new, quick and easy-to-use tool to help small organisations and sole traders create a bespoke privacy notice and protect people’s information rights. Under data protection law, every organisation that holds people’s information needs to explain why it holds it and what it does with it. This is so their customers, suppliers, staff and volunteers know what will happen to their personal information. [..] In just a few simple steps, the new privacy notice generator can create tailored privacy notices relevant to small organisations in a variety of sectors of the economy. There are sections of the tool specific to the finance, insurance and legal sectors; education and childcare; health and social care and charity and voluntary sectors. There are also sections designed for other small organisations in sectors such as retail and manufacturing." #Privacy #GDPR #dataprotection #ICO   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/dUYmXevF

"Apple today released an updated version of iOS 17.6.1, with the new software coming a week and a half after the launch of the original iOS 17.6.1 update. The new version has a build number of 21G101, up from 21G93.   According to Apple's release notes, the iOS 17.6.1 update addresses an issue that could prevent the enabling or disabling of Advanced Data Protection. It is not clear what is different between the new version of the software and the original version.   This update includes important bug fixes and addresses an issue that prevents enabling or disabling Advanced Data Protection."   #Privacy #GDPR #dataprotection #Apple   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/djuw2ieA

"National Public Data (NPD), a company that resells collected personal data for background checks, has confirmed that a data breach leaked names, Social Security numbers, physical addresses, and more. As reported by Bleeping Computer, dark web forum posters have advertised and shared supposedly stolen data from a breach of the company’s systems for months without a statement or response from NPD.   Finally, this week, it published a Security Incident page confirming a few details but leaving many other questions unanswered."   #Privacy #GDPR #dataprotection #BackgroundChecks #DataBreach   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/dn6uDr6P

"Most Google Pixel phones sold since September 2017 included software that could be used to surveil or remotely control users’ phones, according to a new report from the cybersecurity company iVerify.   The vulnerability was discovered after iVerify’s endpoint detection and response (EDR) scanner flagged an insecure Android device at Palantir Technologies, an iVerify client.   After launching a joint investigation, iVerify, Palantir, and Trail of Bits discovered a hidden Android software package — Showcase.apk — across Google Pixel devices. The data-mining firm Palantir, which sells its surveillance products to governments and private companies, banned Android devices across the company in response." #Privacy #GDPR #dataprotection #Google   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/dx2UDasF

"Google says it is taking a privacy-minded approach to the integration of AI features on Android devices, implementing end-to-end protection to secure data in transit while keeping the most sensitive data locally on the device.   The data that reaches Google's cloud infrastructure for processing is protected by state-of-the-art encryption, access controls, and tight unauthorized access monitoring." #Privacy #GDPR #dataprotection #Google #Android #AI   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/efeqHe8A