Topic: Enforcement

A European Court of Justice adviser has said in two separate opinions that automated loan scoring constitutes profiling under the GDPR, regulators’ decisions are subject to judicial review, and limits apply to the retention of data from public registers by credit agencies.

16 March 2023

The UK privacy regulator has reached an agreement with retailer Easylife, cutting a £1.35 million penalty (€1.54 million) over the company’s data processing conduct to £250,000 (€285,000).

16 March 2023

Austria’s data regulator has found that a website’s use of Facebook trackers illegally transferred personal data to the US, but refused to enforce against Meta directly.

16 March 2023

The Belgian data protection authority has put IAB Europe’s implementation of its action plan on hold on the eve of a court hearing.

15 March 2023

An activist has asked the ICO to force YouTube to delete algorithms trained on children’s data – but while the regulator has said it could theoretically force algorithmic deletion, such an order might exceed its powers.

15 March 2023

Singapore’s data regulator has issued a strongly-worded decision criticising Eatigo’s conduct during a data breach investigation.

14 March 2023

An education software provider has agreed to pay the US securities regulator $3 million to end claims it made misleading disclosures following a 2020 ransomware attack that compromised the data of over 13,000 customers.

13 March 2023

A Polish court has ruled that a company fined over a late ePrivacy data breach report could not use an employee’ error to justify the delayed notification.

09 March 2023

John Edwards has confirmed that the ICO will challenge its recent defeat in the Experian case.

08 March 2023

A Georgia federal judge has dismissed LabMD’s lawsuit that alleged the FTC was negligent and acted improperly during its civil enforcement action, finding the complaint was time-barred and the FTC’s alleged actions were protected.

07 March 2023