Data Notes

EDPB publishes opinion on the interplay between GDPR and ePrivacy

ICO and FCA announce new Memorandum of Understanding

On 18 February 2019, the Information Commissioner's Office (the "ICO") and the Financial Conduct Authority (the "FCA") published a new Memorandum of …

Disinformation and 'fake news': Data implications of the Select Committee report

The German FCO/Facebook decision: implications for data privacy regulation

The German competition authority, the Federal Cartel Office ("FCO") last week announced the results of its investigation into Facebook for a novel abuse …

Cyberattack on German Public Figures Leads To One of Germany's Largest Data Breaches

Last week, it was announced that during December 2018 almost one thousand German public figures, including journalists and a number of prominent …

Data Protection Predictions 2019

2018 was a landmark year for data protection and privacy; the EU General Data Protection Regulation ("GDPR") came into effect on 25 May 2018 …

General Data Protection Regulation: first enforcement notice shows extra-territorial reach

The UK data protection regulator, the Information Commissioner’s Office (ICO), has issued its first enforcement notice under the EU’s new strict data …

Court of Appeal confirms Morrisons vicariously liable for employee's deliberate actions in first successful UK class action for data breach

The Court of Appeal has today dismissed an appeal against the High Court's decision that Morrisons was vicariously liable for its employee’s …

Morrisons – the first successful class action in the UK for data breach

On 1 December 2017, the High Court handed down its judgment on the UK's first class action arising from a data breach (Various Claimants v Morrisons). …

Google DeepMind trial failed to comply with data protection law

On 3 July 2017 the Information Commissioner's Office ("ICO") determined that the Royal Free NHS Foundation Trust (the "Trust") had breached the Data …

New mandatory data breach reporting law passed

The Federal Government has today passed the Privacy Amendment (Notifiable Data Breaches) Act 2016 to amend the Privacy Act 1988 to include …

All TalkTalk, no action? UK Information Commissioner issues record fine of £400,000 for TalkTalk's cyber security breach

The fine was the consequence of a cyber security breach in October 2015, which led to the theft of personal data of almost 157,000 customers, including …