Wedlake Bell DPO Radio

ICO's International data transfer agreement laid before Parliament (link).
CNIL requires website to rectify non-compliance in relation to its use of Google Analytics with data transfers to the United States (link).
German DSK conference seeks opinion on US surveillance from Stephen I. Vladeck of University of Texas (link).
ICO's draft Chapter 3 on Pseudonymisation (link).
ENISA's Data Protection Engineering (link).
Belgian DPA claims to restore order to the online advertising industry by declaring IAB Europe's TCF non-compliant (link).
Google's Topics (link) and the path forward with the privacy sandbox (link).
EPIC's push for the FTC to create a federal data privacy rule (link).
EDPB issues an opinion (link) on the first ever GDPR certification scheme GDPR-CARPA from Luxembourg (link).
Irish DPC to continue prioritising work on children's data (link) in line with its 2022-2027 regulatory strategy (link).
Latest on EU's Data Act (link).
EU Cloud Code of Conduct (link).
EDPB's Guidelines 01/2022 on data subject rights - Right of access (link).
EU Commission's proposal: European Declaration on Digital rights and principles for the Digital Decade (link).

The Independent Human Rights Act Review by the UK Government (link).
Irish DPC's Children Front and Centre Fundamentals for a Child-oriented Approach to Data Processing, December 2021 (link).
Austrian DPA says that The Use of Google Analytics violates the "Schrems II" decision (link). Some facts about Google Analytics data privacy (link).
EDPS research report on Government access to data in third countries including China, India and Russia, November 2021 (link).
EDPS Decision on the retention by Europol of datasets lacking Data Subject Categorisation (link).
EDPB on the law enforcement directive (LED) (link).
European Parliament's research paper on Rethinking biometrics in the era of artificial intelligence (link).
Shinigami Eyes banned in Norway (link).
Chinese Internet Information Service Algorithm Recommendation Management Regulations (link).
Open Rights Group's Adtech Challenge in Killock and Veale & Ors v Information Commissioner (GI/113/2021 and ors) (link).
French CNIL fines Google €150M and Facebook €60M for making refusing cookies not as easy as accepting them (link).
Meta's Threat Report on the Surveillance-for-Hire Industry (link).

ICO fines Cabinet Office £500,000 for disclosing addresses of 2020 the New Year Honours recipients (link).
Draft EU directive on improving working conditions in platform work (link).
UK Government's Roadmap to an effective AI assurance ecosystem (link).
EDPB on the interplay between GDPR's extraterritoriality and data transfer provisions (link).
Wiesbaden court orders university to stop using a cookie consent management platform because of transfers of data to the US due to the use of Akamai Content Delivery Network services (link).
Updated guidance on data transfers and EU SCCs from the Baden-Württemberg authority in Germany (link).
Information Commissioner’s Opinion: Data protection and privacy expectations for online advertising proposals (link).
CJEU's C‑102/20 in StWL v. eprimo GmbH on inbox advertising (link).
Advertising Platform OpenX has been fined $2 Million for breaching Children’s Privacy Law (link).
EDPB statement on the Digital Services Package and Data Strategy (link).
Proposal for a European regulation on the transparency and targeting of political advertising (link).
NHS Business Authority v Information Commissioner & Spivack [2021] UKUT 192 (AAC) (link)
Council of Europe recommendation on automatic processing of personal data in the context of profiling (link).

Belgian authority expected to conclude that the Transparency & Consent Framework or TCF is not compliant with the GDPR and IAB Europe is liable as joint controller (link), the Irish Council for Civil Liberties reports (link).
Lloyd v Google LLC [2021] UKSC 50 (link).
OAIC concluded that Clearview AI breached the privacy of Australians (link) having jointly investigated with the ICO (link).
Chinese Draft Outbound Data Transfer Security Assessment Measures (link).
New standard contractual clauses expected for foreign controllers caught by GDPR’s extraterritorial effect (link).
Global Privacy Assembly’s Principles for Governmental Access to Personal Data held by the Private Sector for National Security and Public Safety Purposes (link).
ICO’s Draft Journalism Code of Practice (link).
ICO’s Draft anonymisation, pseudonymisation and privacy enhancing technologies guidance Chapter 2: How do we ensure anonymisation is effective? (link).
ICO’s Response to DCMS consultation “Data: a new direction” (link).
Chinese Guiding Opinions on Strengthening Overall Governance of Internet Information Service Algorithms (link).
ICO’s opinion on Age Assurance for the Children’s Code (link) and ICO’s Children’s Code Design Guidance (link).
ICO Regulatory Sandbox: Child Privacy Consent Management Platform by Seers (link).
ICO Regulatory Sandbox: Gambling Commission’s duty to monitor users at risk (link).

International data transfers: The ICO’s call for an international solution to data transfers (link), G7 cooperation on data free flow (link), and US Congress paper on transatlantic data flows (link).
Big Tech announced the Trusted Cloud Principles (link).
EDPB opines on the draft Adequacy Decision for South Korea (link).
Norwegian company is fined around £400,000 for non-compliant data transfers to China (link). Irish DPC investigating TikTok’s compliance of data transfers to China (link).
EU Parliament’s research paper on EU health data centre and a common data strategy for public health (link).
We Buy Any Car and Sports Direct are fined £270,000 for misapplying the soft opt-in rule (link).
Cookies: G7 cooperation (link), EDPB’s cookie taskforce (link), and European Digital Rights association’s push for strong ePrivacy (link).
EDPS opinion about the 2021 EU anti-money laundering package (link).
Swiss report on the US CLOUD ACT (link).
Opinion of Advocate Bobek in CJEU Case C‑175/20 SIA ‘SS’ v Valsts ieņēmumu dienests (link).
The right to privacy in the digital age, a report of the United Nations High Commissioner for Human Rights (link).
Navigating the global data privacy landscape: The 2020 Global Privacy Assembly census (link).

Second largest fine of €225M imposed by the Irish Data Protection Commissioner (DPC) on WhatsApp (link) as revised by the European Data Protection Board (link).
UK Government announces a data reform to boost innovation and trade, to improve healthcare and protect the public (link).
Information Commissioner’s Office (ICO) consults on its draft international data transfer tools (link).
Warren v DSG Retail Ltd [2021] EWHC 2168 (QB) (link).
G7 data protection and privacy authorities to tackle the cookie pop-ups challenge (link).
ICO sets out plans for further protection of children online (link).
ICO guidance on Direct marketing in the public sector (link).

Wedlake Bell DPO Radio: Recent Episodes