Remove 2022 Remove Data protection Remove Time-tracking
article thumbnail

European Data Protection Roundup – December 2022 and January 2023

Debevoise Data Blog

On 29 December 2022, the CNIL fined TikTok UK and Ireland as joint controllers €5 million for failing to: offer users the ability to refuse cookies as easily as accepting them (several clicks were required to refuse all cookies, as opposed to just one to accept them); and inform users in a sufficiently precise manner about cookie purposes.

article thumbnail

GDPR vs. Meta Platforms: is it time to change the business model?

Legal IT Group

And it was only in 2022 that Meta Platforms’ earnings report recognized the first year-over-year decline in advertising revenue in the company’s history, a trend that is expected to continue due to global economic issues affecting the digital advertising market as well. Why is this important, and what does GDPR have to do with it?

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

European Data Protection Roundup – November 2023

Debevoise Data Blog

With the Act still yet finalised and with lead in times of six or more months for key obligations once it is, several authorities in the EU, the UK and the U.S. For example, the Garante notes the need to incorporate data protection by design and by default principles within any AI systems used in the healthcare space.

article thumbnail

GDPR vs Meta Platforms: The Rest of the Story. User Consent Must Be Provided

Legal IT Group

Contract as a legal basis for data processing It is worth recalling that during the consideration of the dispute by the EDPB in 2022, which imposed a fine of about $390 million on Meta Platforms, its position was that Facebook publicly positions itself not just as a social network but as a provider of personalized advertising services.

article thumbnail

European Data Protection Roundup – January 2024

Debevoise Data Blog

GDPR one-stop-shop: Businesses wishing to take advantage of the GDPR one-stop-shop system should take note of a new digest, published by the European Data Protection Board, which analyses the decisions made by so-called Lead Supervisory Authorities in this context.

article thumbnail

Russian Data Protection Updates: Key Points for International Businesses

Debevoise Data Blog

Russia has enacted amendments to its Personal Data Law (the “ Amendments ”) that may have a significant impact on companies operating in Russia. The Amendments became effective on September 1, 2022, save for certain provisions that will become effective on March 1, 2023.

article thumbnail

European Data Protection Roundup – June & July 2023

Debevoise Data Blog

. : Business may want to revisit their cross-border data transfer arrangements following the new adequacy decision for the EU-U.S. Data Privacy Framework, assess whether they are eligible to self-certify and, if they are, whether it makes sense to. Data Privacy Framework (the “DPF”). Data Privacy Framework (the “DPF”).