Dutch Privacy Regulator Imposes a €750,000 Fine on TikTok

The Data Protection Authority of the Netherlands has hit TikTok with three-quarters of a million Euro fine for failing to abide by the GDPR’s transparency obligations toward data subject in that TikTok did not provide a privacy statement in Dutch for its younger users.

According to the Dutch regulator, TikTok is a popular app among children in the Netherlands and ...

President Biden Issues Far-Reaching Order on Promoting Competition

U.S. President Joe Biden signed a comprehensive executive order on promoting competition in the American economy. The order aims to implement a policy of decentralization and prevention of monopoly in the market in a manner that will benefit American workers, farmers, small businesses, startups, and consumers.

The order seeks to prevent the exploitation of market power by dominant companies who ...

Israeli Privacy Protection Authority Publishes Its Biennial Report

The Israeli Privacy Protection Authority (PPA) published its biennial activity report for the years 2019-2020. The report explains that 2020 was a record-breaking year in terms of the scope of PPA’s activity, mainly due to the increase in the number of enforcement proceedings it initiated and the number of guidelines, recommendations, and policy documents it published.

The report indicates that ...

Italian Food Delivery Company Fined for Automated Decision-Making

The Italian privacy regulator has hit Foodinho, an Italian food delivery company, with a €2.6 million fine for infringing the GDPR by using an automated algorithm to rate its delivery personnel and increase or decrease food orders assigned to them. Foodinho’s algorithm used a variety of data to assess the performance of its delivery personnel. This included chats, emails and ...

U.S. Supreme Court Says Schools May Not Limit Students’ Freedom of Speech Off-Campus

The U.S. Supreme Court has held that a Pennsylvania high school violated the First Amendment of the Constitution in suspending a 14-year-old student after she posted two messages on Snapchat containing vulgar language directed at the school and school officials. The student posted the messages when she was off school grounds.

The Supreme Court considered whether a 1969 ruling, holding ...

California Attorney General Releases Information about Its CCPA Enforcement Efforts

The Attorney General of California (CAG), tasked with the exclusive power to enforce the California Consumer Privacy Act (CCPA), has published a rundown of its enforcement effort in the past year, to raise awareness of the importance of compliance with the CCPA.

Although the CAG does not usually release information about its investigations, it recently provided a list of illustrative ...

The EDPB Issues Final Guidelines on Controllers and Processors

The European Data Protection Board (EDPB) has issued the final version of its guidelines on the concept of controllers and processors under the GDPR, following the draft it published for public comments in September 2020. The guidelines are intended to clarify the concepts of controllers, joint controllers, and processors, which play a crucial part in the application and implementation of ...

EU Commission Recognizes the UK as Adequate

The EU Commission formally recognized the United Kingdom as an adequate jurisdiction for cross-border transfers of data governed by the GDPR. The UK now joins about a dozen other countries already recognized under an EU Commission adequacy decision, including Israel, Canada, New Zealand, Japan, and Switzerland.

The adequacy recognition allows for a more seamless flow of personal data from the ...