SypherPrivacyTalks - October 2024 - Week 42

Welcome to #SypherPrivacyTalks — Your news and article roundup. Bringing you the top privacy & compliance stories of the week.

EUR 143.000 issued in fines to two companies for predatory marketing campaigns

ico.org.uk • 2 min read

💶 Two companies have been fined in the UK for making nearly 50,000 unsolicited marketing calls to people already registered with the Telephone Preference Service (TPS). The companies have been fined a total of £120,000 (€143,000) for targeting vulnerable people with predatory marketing campaigns.
In total, more than £1.5 million has been fined by the UK ICO to companies involved in such unlawful practices… read more

News agency AFP notifies French authorities of potential data breach

techcrunch.com • 2 min read

💥Agence France-Presse (AFP), one of the world's largest news organisations, has notified French regulators of a possible data breach following a cyber attack.

AFP, which has an editorial presence in 260 cities in 150 countries, said in a statement that it had detected an "attack on its systems" that affected part of its news delivery service to clients... read more

Public consultation: EDPB welcomes comments on guidelines on legitimate interests

natlawreview.com • 4 min read

📢 The European Data Protection Board ("EDPB") has recently adopted for public consultation Opinion 22/2024 on certain obligations arising from the use of processors and sub-processors and Guidelines 1/2024 on the processing of personal data based on legitimate interest.

The opinion concerns situations where data controllers rely on one or more processors and sub-processors. In particular, it addresses eight questions concerning the interpretation of certain obligations of controllers who rely on processors and sub-processors, and the drafting of contracts between controllers and processors… read more

Feedback is requested by 20 November 2024 at the latest, using the form provided.

💡More on legitimate interest in this article on CJEU: Commercial interests of controller can serve as a legitimate interest.

First review of EU-US Data Privacy Framework concludes that US authorities have put in place the constitutive elements of the framework

pubaffairsbruxelles.eu  • 2  min read

📜 The European Commission has completed its first review of the operation of the adequacy decision on the EU-US Privacy Framework (DPF), which governs the transfer of personal data between the EU and the US. 

The report confirms that the US has implemented the necessary safeguards, including limiting access to personal data by intelligence agencies and establishing an independent redress mechanism. The review also makes recommendations to improve the effectiveness of the framework, such as better cooperation between US and EU authorities on key requirements of the DPF. The European Commission will closely monitor developments in this area in the coming months and years… read more

Europe’s privacy patrol is spoiling Big Tech’s AI party

politico.eu • 6 min read

🤖 Europe's General Data Protection Regulation (GDPR) is creating significant hurdles for Big Tech's AI development plans. In recent months, companies such as Google, Meta, X and LinkedIn have paused AI projects in the EU, citing complex regulatory obstacles. Ireland's Data Protection Commission (DPC) has led the charge, blocking AI deployments and reflecting a tougher enforcement stance after years of criticism.

Tech companies argue that Europe's strict regulations threaten innovation and global competitiveness, sparking lobbying efforts to relax the rules. Meanwhile, regulators are focusing on protecting personal data and ensuring compliance with the GDPR… read more

--

Get connected with us on LinkedIn or by subscribing to our weekly newsletter. We do our best to select the most interesting and relevant content in our field and deliver it to you in a bite-sized format, so you can stay up to date on topics such as Privacy Management & Compliance.

Photo by Petr Macháček on Unsplash