On 12 May 2020,German Data Protection Conference ('DSK') issued guidelines on the use of Google Analytics in the non-public sector ('the Guidelines'). The guidelines have been issued in consequence of the DSK's decision that Google Analytics is not a Data Processor but a Data Controller or Joint Data Controller. Google Analytics contended that the data [...]
On 28th May 2020, Ireland's Revenue Commissioner released a statement confirming a personal data breach. Ireland's taxation authority declared on its website that unidentified fraudsters had accessed personal data of thousands of taxpayers as a result of an SMS text messaging scam. Around 3,000 taxpayers were in receipt of a text message carrying a link [...]
Symmetry Compliance's Data Protection Dashboard The latest data protection news, GDPR fines, supervisory authority and European authority guidance, as well as data protection case law. Latest Fines DATE LOC € ORG REASON 22/05/20 IRE ND Tusla Breach (Art 33-34) 22/05/20 FIN 100k Posti Oy Transparency (Art 12) 22/05/20 FIN 16k Kymen Vesi Oy DPIA [...]
Perhaps coincidental or a mark of intent on the week of the second anniversary of the GDPR, the Irish Data Protection Commission (DPC) released some significant updates on their investigations in to the data protection practices of a number of the "big tech" social media companies. The DPC has been subject to much scrutiny coming [...]
On 19th May, 2020, Easyjet, a budget airline based in UK, published a statement announcing that it had "been the target of an attack from a highly sophisticated source” and had suffered a data breach as a result. The airline company admitted that the data breach affects approximately 9 million customers. Investigation revealed that details [...]
