The guidelines aim to clarify how the GDPR applies to the processing of personal data when using video devices and to ensure the consistent application of the GDPR in this regard. The guidelines cover both traditional video devices and smart video devices. The guidelines address, among others, the lawfulness of processing, including the processing of…
Processing of personal data – be it collection, storage, use or disclosure – constitutes a limitation on the right to the protection of personal data and must comply with EU law. This requires ensuring that it is both necessary and proportional. The 8 steps outlined in “The EDPS quick-guide to necessity and proportionality” will help…
Asylum applicants and migrants apprehended at the external border have a duty to give their fingerprints. When their fingerprints are taken, persons have the right to understand who is processing their personal data and why. They have the right to know what data are stored and for how long. They should know how to access…
The use of body worn cameras and similar devices has been growing in both scale and variety over the last number of years. They have numerous potential applications including recreation, security, and journalism, to name a few. Wearable technologies such as body worn cameras pose a particular challenge from a data protection perspective due to…
France’s Constitutional Court has ruled the government can use social media to detect tax avoidance, BBC News reports. Customs and tax officials can search online profiles, posts and pictures for evidence of undisclosed income. The court said password-protected content cannot be collected and authorities can only use public information pertaining to the individual divulging it…
he Norwegian Data Protection Authority has issued an administrative fine of EUR 49 300 to the City of Oslo for having stored patient data outside the electronic health record system at the city’s nursing homes/health centres from 2007 to November 2018. “This is a serious violation, given the extended time period and considerable scope of…
Following the EDPB opinion (July 2019) on the draft standard contractual clauses (SCCs) for contracts between controller and processor submitted to the Board by the Danish Supervisory Authority (SA), the final text of the Danish SCCs, as adopted by the Danish SA, has been published in the EDPB’s Register for Decisions taken by supervisory authorities…
On December 2nd and 3rd, the EEA Data Protection Authorities and the European Data Protection Supervisor, assembled in the European Data Protection Board, met for their sixteenth plenary session. During the plenary, several topics were discussed. Art. 64 GDPR Opinion on Accreditation Requirements for Codes of Conduct monitoring bodies by UK SA The EDPB adopted…
Brussels, 14 November – On November 12th and 13th, the EEA Data Protection Authorities and the European Data Protection Supervisor, assembled in the European Data Protection Board, met for their fifteenth plenary session. During the plenary a wide range of topics was discussed. Third Annual Privacy Shield Review The EDPB adopted its report on the…
he Federal Service for Supervision in the Sphere of Telecom, Information Technologies and Mass Communications (ROSKOMNADZOR) has been established in accordance with Russian President’s Decree No. 1715 of 03 December 2008. ROSKOMNADZOR is a federal executive authority entitled to carry out permitting and licensing activities, validation and supervision in the spheres of telecommunications, information technologies…