Continue Reading Philippines Data Protection Authority: Biometric Data Is Not for Sale: Lessons for U.S. Privacy Law“Biometric data is
Consent
What is Sufficient Consent?
The following is sufficient consent for the Video Privacy Protection Act and the California Invasion of Privacy Act, according to a recent decision in the U.S. District Court for the…
Continue Reading What is Sufficient Consent?Revised California Privacy Rights Act Regulations Are Out: What You Need to Know.
The California Privacy Protection Agency has revised (again) the CPRA regulations.
There are several edits, including some clarifications and removals simplicity of implementation “at this time.” The regulations also double…
Continue Reading Revised California Privacy Rights Act Regulations Are Out: What You Need to Know.Spanish Data Protection Authority: Poster Not Adequate Consent for Photos, Video
“No consent – no photos” is the new “No shirt, no shoes (no mask), no business.”
You need consent under GDPR to take photos or videos in a pub and…
Continue Reading Spanish Data Protection Authority: Poster Not Adequate Consent for Photos, Video
EDPB Issues Guidance on the Issue of User Consent
The European Data Protection Board issues guidance on consent, in reliance upon the Working Party Article 29 Guidelines on Consent.
Key additions/ takeaways.
- Consent relying on an alternative option offered
…
Continue Reading EDPB Issues Guidance on the Issue of User Consent
German Court Ruling has Implications for Consent
“I consent to the Terms of Use and Privacy Policy.”
[Cue “America’s Got Talent” X buzzer sound]
“No,” says the Berlin Superior Court of Justice. “You really don’t.”
- You can’t
…
Continue Reading German Court Ruling has Implications for Consent
Study: Few Consent Management Platforms Meet GDPR Cookie Requirements
A new study has found only 11.8% of the most popular Consent Management Platforms (CMPs) used on UK websites meet the minimal requirements under GDPR and Europe’s eDirective regulations regarding…
Continue Reading Study: Few Consent Management Platforms Meet GDPR Cookie Requirements
Polish Data Protection Authority Fines Website for Overly Complicated Consent Withdrawal Process
The Polish data protection authority has fined ClickQuickNow €47,126.97 for violating the General Data Protection Regulation (GDPR) by requiring too difficult a process for revoking consent.
The process in question…
Continue Reading Polish Data Protection Authority Fines Website for Overly Complicated Consent Withdrawal Process
Court of Justice of the EU: Detailed Consent Needed for Cookies
The Court of Justice of the European Union has issued its Planet 49 decision.
Key takeaways:
- A pre-checked check box is not sufficient consent for the placement of cookies.
- You
…
Continue Reading Court of Justice of the EU: Detailed Consent Needed for Cookies
Belgian DPA: Requiring Customers to Allow Their ID Cards to Be Scanned to Receive Loyalty Cards Violates GDPR
Asking to read an electronic ID card as a condition for the provision of a service (issuing a rewards/loyalty card) is disproportionate and in violation of GDPR, says the Belgian…
Continue Reading Belgian DPA: Requiring Customers to Allow Their ID Cards to Be Scanned to Receive Loyalty Cards Violates GDPR