A decision by Austria’s data protection watchdog upholding a complaint against a website related to its use of Google Analytics does not bode well for use of US cloud services in Europe. The decision raises a big red flag over routine use of tools that require
The European Court of Justice ruled that inbox advertising is subject to the same restrictions as unwanted email advertising and requires the prior consent of the recipient (ECJ judgement made on 25. November 2021 - C-102/20 - press release). Inbox advertising means that within an email
Law students at American law schools take property, torts, and contracts during their first year. It is difficult not to view consumer privacy interests through one or more of those lenses, particularly when U.S. consumer privacy law has been based on a notice and consent,
Email marketing campaigns used to be pretty straightforward: you collect contact information, upload it into a third-party tool like Mailchimp or Constant Contact, and send a message to your customers, prospects, or anyone you wanted to spam. Today, the enactment and enforcement of global data
The GDPR, or General Data Protection and Regulation, is going into effect in May 2018 throughout the European Union (EU) and presents important legal changes and challenges for organizations and consumers alike. Interactions and relationships between customers and businesses are transforming; the GDPR shifts authority over
This note examines the GDPR requirement that marketers conduct data protection impact assessments (DPIAs) when buying digital media using “real-time bidding” advertising. Summary: A 2018 European Court of Justice decision demonstrates that a marketer that buys targeted advertising is a “controller” of the personal data used for that
Change is afoot at the U.K.’s data protection watchdog, responsible for enforcing the General Data Protection Regulation. Top execs from the Information Commissioner’s Office have been on a PR push of late, appearing on stage at industry events, agreeing to interviews with the press to deliver a simple
Dr Johnny Ryan, privacy advocate, and Brave browser thought leader conducted a provocative Dmexcofringe presentation this week exploring what he sees as the increasingly questionable legality of real-time bidding under GDPR. In an outlandish, but plausible presentation, Ryan painted data regulators as the forest guardians of Tolkien lore awakening
Source: EDPB Opinion 5/2019 on the interplay between the ePrivacy Directive and the GDPR, in particular regarding the competence, tasks and powers of data protection authorities, March 2019 Main takeaways Both laws could apply to the same situation where personal data is involved - so organisations should usually comply
There is so much misunderstanding about what the GDPR is and what the GDPR does, that most of what is out there at this point is more mythology than anything else. For example, an article in Axios claimed over the weekend that ‘the notice and consent approach forms
English
French
German
