Dutch Regulator Issues Opinion on Prohibition of “Cookie Walls”

The Dutch Data Protection Authority issued an opinion stating that websites that block the access of users that do not consent to install cookies, violate European data protection regulations. The opinion was published after receiving many complaints and explained that tracking behavior on the web using a cookies or similar technology is currently the most extensive personal data processing activity.  ...

EU Court Clarifies Boundaries of Journalism and Household Exceptions in Data Protection Law

The Court of Justice of the EU (CJEU) has delivered a decision on data protection issues regarding a Latvian individual who published a video he filmed on YouTube, which shows police officers going about their duties in a police station. The Latvian privacy regulator found that he had infringed data protection laws for failing to inform the police officers of ...

UK Legislator Prepares for Brexit

Two regulations readying UK data protection law for a post-Brexit world have been promulgated in recent weeks. These regulations will only come into force upon the UK’s withdrawal from the EU. The regulations are intended to preserve the status quo post-Brexit by amending certain provisions of the GDPR to allow it to become UK domestic law and by gradually adopting ...

EU Regulators Clarify GDPR Data Transfers in the Event of a No-Deal Brexit

The European Data Protection Board (EDPB) – the panel of EU privacy regulators – has published an information note on data transfers under the GDPR in the event of a no-deal Brexit. The note explains that in the absence of an agreement between Europe and the UK, the UK will be deemed an inadequate “third country” after the Brexit on ...

Israeli Court Rules Police May Forcibly Take A Fingerprint from a Suspect to Unlock His Smartphone

The Tel Aviv District Court has permitted the Israeli police to forcibly take a fingerprint from a suspect in order to unlock his smartphone, in an unprecedented decision that reverses a lower court’s decision. The suspect in this case was arrested for possessing 37 grams of marijuana, but refused to unlock his smartphone, arguing that compelling him to provide his ...

FTC Imposes Unprecedented Fine for Violations of Children’s Online Privacy Rules

Operators of the video social networking app Musical.ly have agreed to pay a record penalty of $5.7 million to settle an enforcement lawsuit brought by U.S. Federal Trade Commission (FTC). The lawsuit alleged that Musical.ly violated the U.S. federal Children’s Online Privacy Protection Act (COPPA) by failing to notify parents about the app’s collection and use of personal information from ...

Stakeholders in The U.S. Advocating for a Federal Privacy Law

The United States Congress is considering the opinions of various stakeholders on the question of a federal privacy law. In a hearing held at the U.S. House of Representatives, industry stakeholders like the Internet Advertising Bureau (IAB) urged Congress to enact a federal privacy law that would preempt state laws, arguing that state laws are not only complicated to navigate ...

Illinois Supreme Court Finds Unconsented Processing of Biometric Data Actionable For Liquidated Damages

In a landmark decision, the Supreme Court of Illinois unanimously held that unlawful collection and processing of biometric data, in violation of the Illinois Biometric Information Privacy Act of 2008 (BIPA) is actionable per se for liquidated damages of up to 5,000 dollars and can be asserted in a class action suit. 

Illinois is one of only three states in ...