Presumably now there is no DPDI Bill, the Information Commissioner's Office can continue with its anonymisation guidance and 'unpause' it? https://ico.org.uk/about-the-ico/ico-and-stakeholder-consultations/ico-call-for-views-anonymisation-pseudonymisation-and-privacy-enhancing-technologies-guidance/ #eudp

New #EDPB opinion says that companies can't just establish a #GDPR main establishment with a plaque on a door — it has to be where decisions on processing are taken, and if decisions are taken overseas, *there can be no main establishment* and thus the one-stop-shop does not apply. https://edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-042024-notion-main-establishment_en #eudp #dataprotection @ggf

Interesting that #Google has choosen to disable image generation in their multi-modal #Gemini image model in countries with strong #dataProtection law. Concerned it might be full of identifiable imagery? #eudp

'Database Retrieval Technology and Subject Access Principles' by Graham Greenleaf and Roger Clarke in 1984 is one of the most precient and under-referenced pieces in the data protection literature and is and more more relevant by the day. https://rogerclarke.com/DV/DRT-84.pdf #GDPR #DataProtection #eudp

Unsurprising but the #CJEU clarify that you can't retain communications data under the limited #dataRetention powers associated with serious crime and then decide to use it to prosecute something else. fedi post: https://social.network.europa.eu/@Curia/111022918723074019 press release: https://curia.europa.eu/jcms/upload/docs/application/pdf/2023-09/cp230135en.pdf #eudp

Dutch DPA publishes damning advice about the government’s attempt to require skin perspiration alcohol meters for those subject to an alcohol ban. Objects to data being transferred to the United States and the high-level of false positives in the system. https://autoriteitpersoonsgegevens.nl/uploads/2023-08/Advies%20alcoholmeter.pdf #eudp #gdpr #LawEnforcementDirective

The #CNIL fines an e-scooter firm for tracking the #geolocation of its #escooters every 30 seconds without purpose limitation. Challenges also on informing them or establishing a legal basis for tracking. Even if in a separate database as easily cross referenced to users. While not special category data, CNIL calls location ‘highly personal’. Company could also not demonstrate effectiveness of this geolocation for finding lost scooters. https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047346903?isSuggest=true #GDPR #RGPD #eudp #dataprotection

Incredible to see Dutch privacy legend @sjoera Nas profiled in the New York Times for her and colleagues' groundbreaking work on public sector #dataProtection, slowly transforming giants like Microsoft, Zoom and Google and forcing significant changes. #edTech #eudp #gdpr https://www.nytimes.com/2023/01/18/technology/dutch-school-privacy-google-microsoft-zoom.html

Full judgment to come, but @Curia CJEU rules today that controllers cannot get away with providing just "categories" of data recipients when they hold the actual data on who they transferred to. Important for strengthening the #RightOfAccess to ensure forward provenance is as a strong as backward provenance, to track complex data chains. Ruling in C-154/21 Österreichische Post (Informations relatives aux destinataires de données personnelles), press release https://curia.europa.eu/jcms/jcms/p1_3869656/en/ #GDPR #eudp