Carl Brown reports: A €9.55m fine for a telecommunications service provider for breaching GDPR has been reduced to just €900,000 by a German appeals court. 1&1 Telecom GmbH was handed the original fine last December by the Federal Commissioner for Data Protection and Freedom of Information (BfDI) after it emerged that people calling the company’s…
Category: Laws
EDPB adopts recommendations on international data transfers following Schrems II decision
Dan Cooper, Lisa Peets, Marty Hansen and Sam Jungyun Choi of Covington & Burling write: On 11 November 2020, the European Data Protection Board (“EDPB”) issued two draft recommendations relating to the rules on how organizations may lawfully transfer personal data from the EU to countries outside the EU (“third countries”). These draft recommendations, which…
Telecom Loses Appeal Over Pre-Selected Box on Shared Data
Molly Quell reports: EU law protects consumers from having to opt out of data-sharing agreements in a contract, the European Court of Justice ruled. The dispute stems from cellphone contracts that Orange România, Romania’s largest mobile service provider, rolled out in 2018 where a box that indicated the customer had given consent for the company to…
French Data Protection Authority Rules on Transfers of Health Data
Gaspard Terray of Foley Hoag discusses last month’s ruling in France that was previously mentioned on this site: The French Conseil d’Etat handed down an important decision October, 13th regarding privacy and personal data protection. This decision comes in the wake of the “Schrems II” ruling of the Court of Justice of the European Union (CJEU), which…