-
Oct 15, 2024 | 
lexology.com | Rhiannon Webster |Alexander Duisberg |Andreas Mauroschat |Nicolas Quoy |Cristina Grande
The last month has seen the ICO continue to focus its activity in two key enforcement areas: (i) unlawful use of cookies; and (ii) use of personal data in AI training models. See below for a summary of the reprimand against Sky Betting and Gaming for unlawfully processing people's data through advertising cookies without their consent.
-
Sep 18, 2024 | 
lexology.com | Rhiannon Webster |Nicolas Quoy |Alexander Duisberg |Andreas Mauroschat |Cristina Grande |Shehana Cameron-Perera | +12 more
Welcome back to a slightly delayed August edition of Data Bytes. This month's edition includes commentary on some large and unusual fines. In the UK, August saw the first intention to fine a data processor, with a proposed fine of over £6 million heading its way towards Advanced Software Group following a ransomware attack on this supplier in 2022 affecting NHS critical services.
-
Aug 6, 2024 | 
lexology.com | Alexander Duisberg |David Plischka |Lisa Kopp
European UnionAugust 6 2024On 11 June 2024, the CJEU (C 757/22) issued a landmark ruling arising from an online service provider's failure to fulfil its information obligations under Articles 13/14 GDPR which were deemed to constitute an infringement of data subject rights.
-
Jun 6, 2024 | 
lexology.com | Rhiannon Webster |Nicolas Quoy |Alexander Duisberg |Andreas Mauroschat |Cristina Grande |Shehana Cameron-Perera | +11 more
A warm welcome to our May edition of Data Bytes. With the headline news in the last month being the upcoming general election on July 4 and the accompanying news that the DPDI Bill has been dropped, the focus on data protection related legislation has passed over to AI. Wil the rumours circulating that a labour government will introduce a similar piece of legislation to the EU AI Act come to fruition? See our byte sized updates on this and more below.
-
Jun 5, 2024 | 
lexology.com | Alexander Duisberg |Andreas Mauroschat
From Data Bytes 47On 6 May 2024, the German Data Protection Conference ("DSK") has published its "Guidance on data protection and artificial intelligence" ("Orientierungshilfe KI und Datenschutz") ("DSK Guidance"). It provides an overview on the various criteria that controllers need to consider from a data protection perspective when using AI applications, with a particular on using large language models ("LLMs").
-
May 15, 2024 | 
lexology.com | Rhiannon Webster |Alexander Duisberg |Andreas Mauroschat |Nicolas Quoy |Cristina Grande |Matthew Worsfold | +14 more
Welcome to our April edition of Data Bytes, where the Ashurst UK and European Data Privacy and Cyber Security Team summarise the key privacy legal and policy developments of the previous month. It's very neat that the month of April has an A and an I in the right order, as April was a month of AI updates a plenty.
-
Apr 3, 2024 | 
lexology.com | Alexander Duisberg |David Plischka
On 7 March 2024, the Court of Justice of the European Union ("CJEU") has issued a preliminary ruling on joint controllership and the definition of personal data. The CJEU held in "IAB Europe" (C-604/22) that IAB Europe and its members are joint controllers with respect to the processing of Transparency and Consent Framework ("TCF") related marketing data. It also considered TC strings as personal data. IAB Europe is an European level association for the digital marketing and advertising ecosystem.
-
Apr 3, 2024 | 
ashurst.com | Alexander Duisberg |David Plischka
On 7 March 2024, the Court of Justice of the European Union ("CJEU") has issued a preliminary ruling on joint controllership and the definition of personal data. The CJEU held in "IAB Europe" (C-604/22) that IAB Europe and its members are joint controllers with respect to the processing of Transparency and Consent Framework ("TCF") related marketing data. It also considered TC strings as personal data. IAB Europe is an European level association for the digital marketing and advertising ecosystem.
-
Mar 21, 2024 | 
lexology.com | Rafael Baena |Gabriele Accardo |Nicolas Quoy |Fiona Garside |Nigel J Parr |Amanda K Ludlow | +4 more
Key themes, incoming reforms and cases to watchDigital platforms, online content providers and other businesses active in the digital economy face an increasingly complex and evolving legal and regulatory landscape in the EU and UK with privacy and data regulation, online safety, competition and consumer issues increasingly intertwined in the digital sphere, and new regulation such as the EU Digital Markets Act (DMA) and Digital Services Act (DSA).
-
Feb 12, 2024 | 
lexology.com | Alexander Duisberg |David Plischka
On 7 December 2023, the Court of Justice of the European Union ("CJEU") issued two landmark judgments in proceedings against the German Credit Reference Agency SCHUFA (C-26/22 and C-64/22) which limit the retention period for credit reporting agencies, confirm the application of erasure in such credit reporting cases and provide more certainty on the scope judicial review of DPA decisions.
