In Section 3.5 of Article 29 Working Party (WP29)’s Guidelines on Data Protection Officer (“DPOs”) (“Opinion”), the WP29 discusses the issue of conflict of interest for DPO. See here for more information on this opinion. The WP29 points out that while Article 38(6) GDPR allows a DPO to perform “other tasks and duties”, the organization […]
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR). Regulation (EU) 2016/679, repeals Directive 95/46/EC and expands on […]
On March 28, 2016 the French DPA (CNIL) imposed a fine of EUR 100,000 on Google for inadequate implementation of the “right to be forgotten” – Google is appealing it. The appeal should take two years. The sanction was imposed for failing to comply with users’ requests to have links to personal information about them […]
What is this all about? The EU is in the process of reforming its existing data protection rules. These reforms have been moving slowly through the EU legislative pipeline but we seem now to be getting closer to a final agreement. Even though the expected implementation date of these rules is still likely to be […]