Testers, those who seek privacy violations with the goal of filing lawsuits, lack Article III standing to sue for pen register and wiretapping infractions under the California Invasion of Privacy Act (CIPA), according to a decision from the U.S. District Court for Central California Friday.
GDPR
The General Data Protection Regulation (GDPR) is the European Union’s landmark privacy law governing how organizations collect, process and protect personal data. In effect since 2018 it applies to any entity handling EU residents’ information regardless of where the company is based and imposes strict requirements around consent, transparency, data minimization and user rights. GDPR enforcement has led to billions in fines against global companies setting a high bar for compliance frameworks worldwide and influencing privacy legislation in the U.S. and other regions.
Several Massachusetts lawmakers supported passing privacy legislation Wednesday. However, at a lengthy livestreamed hearing, members of the legislature’s Joint Committee on Advanced Information Technology said little about how they might coalesce around a plethora of comprehensive and narrower privacy bills that came up for discussion.
Compliance with EU data protection principles is the first step toward ensuring that minors aren't exposed to harmful content online, European Data Protection Supervisor Wojciech Wiewiorowski said Monday. Age assurance or verification is also important, but it shouldn't entirely block children from accessing some content, speakers said at the European Parliament Internal Market and Consumer Protection Committee (IMCO) meeting.
Websites based in the U.S. should be aware of an upcoming Microsoft Advertising requirement on user consent even if they don't target users in Europe, law firm Frankfurt Kurnit blogged Thursday.
A European Data Protection Board (EDPB) study on the secondary use of personal data in scientific research found "no uniform approach or interpretation" among EU countries.
A French lawmaker who challenged the EU-U.S. Data Privacy Framework in 2023 had his first hearing in the EU General Court Monday. Member of Parliament Philippe Latombe is seeking annulment of the DPF (see 2309120030) (Latombe v. Commission, Case T-533/23).
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching on the title or by clicking on the hyperlinked reference number.
Until recently, there was no real political appetite to reopen the General Data Protection Regulation, though it was becoming increasingly necessary to align GDPR with other data-related EU laws such as the Data Act and to streamline it, Linklaters IT, data and cyber attorney Tanguy Van Overstraeten said in an interview Friday.
The French privacy authority CNIL Thursday listed its 2025 projects which aim at helping privacy professionals comply with the General Data Protection Regulation.
The Luxembourg Administrative Tribunal Wednesday upheld a July 2021 decision by the National Data Protection Commission that slapped Amazon with a fine of 746 million euros ($808 million) for General Data Protection Regulation (GDPR) breaches. The court also ordered the platform to take corrective measures or face a daily penalty of 746,000 euros.