GDPR
China has passed a personal data protection law, state media Xinhua reports (via Reuters). The law, called the Personal Information Protection Law (PIPL), is set to take effect on November…
Ireland must ‘swiftly’ investigate legality of Facebook-WhatsApp data sharing, says EDPB
Facebook’s lead regulator in the European Union must “swiftly” investigate the legality of data sharing related to a controversial WhatsApp policy update, following an order by the European Data Protection…
Controversial WhatsApp policy change hit with consumer law complaint in Europe
Facebook has been accused of multiple breaches of European Union consumer protection law as a result of its attempts to force WhatsApp users to accept controversial changes to the messaging…
French startup Didomi has raised a $40 million Series B funding round led by Elephant and Breega. The company manages consent flows for web publishers and app developers. Didomi is…
Italy’s DPA fines Glovo-owned Foodinho $3M, orders changes to algorithmic management of riders
Algorithmic management of gig workers has landed Glovo-owned, on-demand delivery firm Foodinho in trouble in Italy where the country’s data protection authority issued a €2.6 million penalty (~$3M) yesterday after…
Cookie pop-ups getting you down? Complaints that the web is “unusable” in Europe because of frustrating and confusing “data choice” notifications that get in the way of what you’re trying…
Facebook ordered not to apply controversial WhatsApp T&Cs in Germany
The Hamburg data protection agency has banned Facebook from processing the additional WhatsApp user data that the tech giant is granting itself access to under a mandatory update to WhatsApp’s…
Disqus facing $3M fine in Norway for tracking users without consent
Disqus, a commenting plug-in that’s used by a number of news websites and which can share user data for ad targeting purposes, is in hot water in Norway for tracking…
Facebook faces ‘mass action’ lawsuit in Europe over 2019 breach
Facebook is to be sued in Europe over the major leak of user data that dates back to 2019 but which only came to light recently after information on more…
Uber hit with default ‘robo-firing’ ruling after another EU labor rights GDPR challenge
Labor activists challenging Uber over what they allege are ‘robo-firings’ of drivers in Europe have trumpeted winning a default judgement in the Netherlands — where the Court of Amsterdam ordered…
Facebook’s lead data supervisor in the European Union has opened an investigation into whether the tech giant violated data protection rules vis-a-vis the leak of data reported earlier this month.…
Facebook’s tardy disclosure of breach timing raises GDPR compliance questions
The question of whether Facebook will face any regulatory sanction over the latest massive historical platform privacy fail to come to light remains unclear. But the timeline of the incident…
Facebook’s lead data protection regulator in the European Union is seeking answers from the tech giant over a major data breach reported over the weekend. The breach was reported by…
Competition challenge to Facebook’s ‘superprofiling’ of users sparks referral to Europe’s top court
A German court that’s considering Facebook’s appeal against a pioneering pro-privacy order by the country’s competition authority to stop combining user data without consent has said it will refer questions…
Early this month Google quietly began trials of “Privacy Sandbox”: Its planned replacement adtech for tracking cookies, as it works toward phasing out support for third-party cookies in the Chrome…
France’s privacy watchdog probes Clubhouse after complaint and petition
Clubhouse, the buzzy but still invite-only social audio app that’s popular with the Silicon Valley technorati, is being investigated by France’s privacy watchdog. The CNIL announced today it’s opened an…
Dutch court rejects Uber drivers’ ‘robo-firing’ charge but tells Ola to explain algo-deductions
Uber has had a good result against litigation in the Netherlands, where its European business is headquartered, that had alleged it uses algorithms to terminate drivers — but which the…
DataGrail snares $30M Series B to help deal with privacy regulations
DataGrail, a startup that helps customers understand where their data lives in order to help comply with a growing body of privacy regulations, announced a $30 million Series B today.…
Sweden’s data watchdog slaps police for unlawful use of Clearview AI
Sweden’s data protection authority, the IMY, has fined the local police authority €250,000 ($300,000+) for unlawful use of the controversial facial recognition software Clearview AI, in breach of the country’s…
EU’s lead data supervisor for most of big tech is still using Lotus Notes
The lead data supervisor for a slew of tech giants in the European Union, including Apple, Facebook, Google, LinkedIn, TikTok and Twitter, is still relying on Lotus Notes to manage…
TikTok will recheck the age of every user in Italy after DPA order
TikTok has agreed to re-verify the age of every user in Italy and block access to users who state they are younger than 13, the country’s data protection agency said…
Apple’s Tim Cook warns of adtech fuelling a ‘social catastrophe’ as he defends app tracker opt-in
Apple’s CEO Tim Cook has urged Europe to step up privacy enforcement in a keynote speech to the CPDP conference today — echoing many of the points he made in…
Grindr, a gay, bi, trans and queer hook-up app, is on the hook for a penalty of NOK100,000,000 (aka €10M or ~$12.1M) in Europe. Norway’s data protection agency has announced…
UK resumes privacy oversight of adtech, warns platform audits are coming
The U.K.’s data watchdog has restarted an investigation of adtech practices that, since 2018, have been subject to scores of complaints across Europe under the bloc’s General Data Protection Regulation…
WhatsApp-Facebook data-sharing transparency under review by EU DPAs after Ireland sends draft decision
A long-running investigation in the European Union focused on the transparency of data-sharing between Facebook and WhatsApp has taken the first major step toward a resolution. Ireland’s Data Protection Commission…
Confusion over WhatsApp’s new T&Cs triggers privacy warning from Italy
Confusion over an update to Facebook-owned chat platform WhatsApp’s terms and conditions has triggered an intervention by Italy’s data protection agency. The Italian GPDP said today it has contacted the…
OneTrust nabs $300M Series C on $5.1B valuation to expand privacy platform
OneTrust, the four-year-old privacy platform startup from the folks who brought you AirWatch (which was acquired by VMmare for $1.5 billion in 2014), announced a $300 million Series C on an…
BigID has been on the investment fast track, raising $94 million over three rounds that started in January 2018. Today, that investment train kept rolling as the company announced a…
Facebook to move UK users out of EU’s privacy jurisdiction next year, post-brexit
Facebook is to follow Google’s lead and move millions of UK users out of the jurisdiction of EU privacy laws to the US (which has no such comprehensive data protection…
Twitter fined ~$550K over a data breach in Ireland’s first major GDPR decision
Ireland’s Data Protection Commission (DPC) has issued Twitter with a fine of €450,000 (~$547,000) for failing to promptly declare and properly document a data breach under Europe’s General Data Protection…