Data Retention Directive declared invalid by European Court of Justice

On April 8, 2014 the European Court of Justice declared invalid Directive 2006/24/EC (“Data Retention Directive”) on the retention of data generated or processed in connection with the provision of publicly available electronic communications or public communications networks. The directive establishes that providers must retain traffic and location data as well as related data necessary […]

CCBE, second guidance on “Corporate Social Responsibility for the Legal Profession”

The social responsibility for businesses is an increasingly important topic. Lawyers and law firms are interested in this field under at least three perspectives: (i) as counselors for their clients on these issues; (ii) as suppliers of services to their clients, when they are asked to adhere to their clients’ code of conduct; and (iii) […]

In Re Matter of a Warrant, F.Supp. (S.D.N.Y. 2014)

On April 25, 2014 James Francis, Magistrate Judge of the Southern District of New York, held that all U.S.-based Internet, email, and on-line storage providers can be forced to hand over overseas data, if so requested by a U.S. government search warrant. The case itself addressed a search warrant issued to Microsoft for a customer’s […]

European data protection reform is imminent

On March 12, 2014, the European Parliament approved in its plenary section the Commission’s data protection reform proposal. The reform consists of two bills: a Regulation setting out a general EU framework for data protection and a Directive on protecting personal data processed for the purposes of prevention, detection, investigation or prosecution of criminal offences […]

World Wide Web Consortium, Tracking Preference Expression (DNT)

The page describes the W3C work on Tracking Preferences and a Do Not Track Button. According to W3C “users need a mechanism to express their own preferences regarding tracking that is both simple to configure and efficient when implemented”.   Abstract “This specification defines the DNT request header field as an HTTP mechanism for expressing […]

The European Court of Justice held that national data protection authorities must be independent – Commission v Hungary (case C-288/12)

European Court of Justice (“ECJ”) held that Data Protection Directive 95/46/EC requires national supervisory authorities for the protection of personal data to operate with complete independence in the exercise of their duties. Hungary failed to fulfill such obligations by prematurely ending the term served by its national supervisory authority. Mr. András Jóri had been appointed […]

Federal Trade Commission v. Wyndham Worldwide Corporation, U.S. District Court for the District of New Jersey, case no. 13-cv-1887

On April 7, 2014, the District Court held that the Federal Trade Commission (“FTC”) has authority to bring an unfair trade practice claim involving data security without formally issuing regulations before bringing such claim. Defendants used a computer system that handled reservations and payment card transactions while storing consumers’ personal information, “including names, addresses, email […]