Region: Germany

First independent GDPR certification scheme faces final hurdle

EuroPriSe is hoping that a raft of recommendations put forward by the EDPB will only amount to a short delay in the company’s ambitions to be the first EU-wide GDPR certification regime.

23 September 2022

ECJ advocate-general issues first opinion on processing in employment context

A European Court of Justice adviser has said that provisions regulating the processing of employees’ personal data should be specific and provide for certain safeguards to qualify as “specific rules” under the GDPR.

22 September 2022

ECJ maintains conditional block on data retention

The European Court of Justice has confirmed that EU law prevents member states from retaining telecommunications data, except in cases of serious national security threats.

21 September 2022

ECJ adviser draws roadmap for antitrust enforcement into data practices

A European Court of Justice adviser has cleared the German antitrust authority’s ability to investigate Meta for practices that allegedly violate the GDPR, in a wide-ranging opinion that also clarified the law of sensitive personal data processing and large companies’ ability to validly gather consent and avoid its use altogether.

20 September 2022

Berlin e-commerce group fined €525,000 for DPO conflict of interest

The Berlin regulator has penalised the subsidiary of a Berlin-based retail group because of a conflict of interest involving the company's data protection officer.

20 September 2022

German regulator approves first supervisory body for credit referencing industry

A consultancy’s bid to become the first supervisory body in Germany to be accredited under the GDPR has been approved by the state of Nordrhein-Westfalen’s regulator, and it will now supervise a group of German credit agencies’s compliance with its code of conduct.

15 September 2022

Extension of Schrems II to EU subsidiaries overturned

A German court has overturned a previous decision on the compliance with the GDPR of EU subsidiaries of US companies, finding that data protection concerns around the CLOUD Act are not enough to prevent a business entering into a contract with a US entity.

07 September 2022

Berlin university told to stop using Cisco-Webex services

The Berlin regulator has warned the Freie Universität Berlin to stop using the communication services provider by the end of the month or risk facing formal enforcement action.

06 September 2022

German regulator restricts e-prescription rules

The German state of Schleswig-Holstein’s data authority has told a doctors trade organisation that the GDPR prohibits them from issuing prescriptions digitally.

23 August 2022

German regulator casts doubt over court Schrems expansion

The German state of Baden-Württemberg’s authority has attacked a recent court decision from a state court that could expand the impact of Schrems II.

17 August 2022

Unlock unlimited access to all Global Data Review content