Cookies: ten things to consider

Nowadays in Italy there is a big debate on “cookies”. Starting on June 3, 2015, data controllers shall implement the requirements issued by the Italian Data Protection Authority (Garante) with  Decision no. 229 of 8 May 2014 “Simplified Arrangements to Provide Information and Obtain Consent Regarding Cookies” (Published in the Official Journal no. 126 of […]

UK Court of Appeal holds UK data subjects can sue Google in the UK for cookies violations even if there was no pecuniary loss

On March 27, 2015, the Court of Appeal issued its final judgment on ‘Safari workaround’: it dismissed Google’s appeal and gave the leeway for UK data subjects to sue Google in England for cookies violations. At the beginning of 2013 several claimants alleged that Google used cookies to track their browsing activity “Browser Generated Information” without […]

Tags: ,

Stefano Cancarini, An update on cookies in Italy

On 16 January 2015, The Italian Data Protection Authority (the “Authority”) published a “video tutorial”, a guideline document and a “frequently answered questions list (FAQ)” on its website about information policies and consent requirements for the use of cookies, that further explains the rational for its decision no. 229: “Individualization of simplified modalities for the […]

Tags: ,

Google challenges decision allowing UK data subjects to sue it in England for cookies violations

On December 8, 2014, the UK Court of Appeal began hearing Google’s appeal against the High Court’s decision which allowed UK data subjects to sue Google Inc. in England for misuse of private information. In brief, at the beginning of 2013, several claimants alleged that Google used cookies to track their browsing activity without their consent. […]

Tags: , ,

Italian Data Protection Authority’s Decision on information and consent requirements for the use of cookies — doc. web n. 3118884

Published on June 3, 2014 on the Italian Official Gazette no. 126, the May 8, 2014 Italian Data Protection Authority (GPD)’s decision on the use of cookies by websites. Individuazione delle modalità semplificate per l’informativa e l’acquisizione del consenso per l’uso dei cookie. The GPD orders that pursuant to Articles 122(1) and 154(1)(h) of the Privacy Code, websites […]

Tags: ,

Alessandro Mantelero, Si Rafforza la Tutela Dei Dati Personali: Data Breach Notification e Limiti Alla Profilazione Mediante Cookies (Strengthening Data Protection in Italy: Data Breach Notification and Regulation of Cookie-Based User Profiling)

Il Diritto dell’informazione e dell’informatica 09/2012; 2012(4-5) ABSTRACT: This Article provides the first analysis of the Italian transposition of Directives 2009/136/EC and 2009/140/EC on cookies and data breaches. The full article is available at: http://www.researchgate…

Tags: ,

Important question about the GDPR “one –stop shop” mechanism referred to the ECJ

On May 8, 2019, the Brussel’s Court of Appeal referred certain questions to the Court of Justice of the European Union (CJEU) to ensure that the Belgian Data Protection Authority (DPA) can pursue the case against Facebook also after the GDPR entered into force. In particular, the questions is whether the one-stop shop mechanism (which […]

Tags: ,

EDPB opinion on ePrivace Directive and GDPR respective scope of application

On March 12, 2019, the European Data Protection Board (EDPB) published an opinion defining the GDPR’s scope of application and providing an interpretation on data protection authorities’ competences, tasks and powers. The Belgian Data Protection Authority (DPA) requested the EDPB to examine and issue an opinion on the interplay between the ePrivacy Directive (2002/58/EC) and […]

Tags: ,

Spanish DPA publishes survey on device fingerprinting

On February 2, 2019, the Spanish Data Protection Agency (AEPD) published a Survey on Device Fingerprinting. (“Survey“) “Device fingerprinting is the systematic gathering of information on a specific remote device with the aim of identifying, singling out and, thus being able to monitor its user’s activity for the purpose of profiling.” The data set extracted […]

Tags: ,

ECJ’s preliminary ruling on case of German DPA against Facebook

  On June 5, 2018, the European Court of Justice (CJEU), issued its preliminary ruling in C‑210/16, opining on the definition of data controller, applicable national law, and jurisdiction under EU data protection law according to Directive 95/46/EC. According to the CJEU’s judgement, EU companies that have been advertising through Facebook can be considered data […]

Tags: ,

1 2 3 4 6