Articles from Around the Web

Discover the latest industry insights and developments with our News from Around the Web page. We curate feeds from a variety of reputable organizations, bringing you a comprehensive overview of relevant news and trends. Stay informed and connected with the most current updates from across the web.

CJEU requires companies to disclose personal data buyers; rules GDPR decisions can run concurrently with domestic courts

The Court of Justice of the European Union issued a decision forcing data controllers to identify entities they sold personal data to when requested under the EU General Data Protection Regulation. The decision came after an Austrian man sought the companies his personal data was sold to by logistics and postal company Österreichische Post.

NZ privacy commissioner addresses data breach uptick

The Office of the Privacy Commissioner of New Zealand published an advisory regarding increased data breaches across the country. The regulator reported a 41% increase in data breach notifications in the first half of the current financial year versus the same period last year. Privacy Commissioner Michael Webster said companies should "report the breach as early as possible" within the mandated 72-hour reporting window under the Privacy Act.

NOYB publishes Irish DPC's decisions on Meta's legal basis for personalized ads

EU-based advocacy group NOYB published the Irish Data Protection Commission's final decisions invalidating Meta's contract basis for seeking user permission to collect data for personalized advertising on Facebook and Instagram. NOYB said the decisions — which followed complaints the group made in May 2018 on the day the EU General Data Protection Regulation took effect — "clearly shows massive disagreement" between the DPC and the European Data Protection Board.

FTC finalizes Drizly enforcement action

The U.S. Federal Trade Commission finalized enforcement action against online alcohol marketplace Drizly and CEO James Cory Rellas related to its 2020 data breach. The agency voted 4-0 on finalization after no further comments were submitted. The order calls on Drizly to destroy unnecessary data and implement data minimization and information security programs, while holding Rellas to individual requirements.

A pitch for harmonizing BCRs in the EU, UK

Hogan Lovells published a memorandum on a potential shared EU-U.K. framework for binding corporate rules to facilitate cross-border data transfers. The note, sent to relevant data protection authorities in the EU and the U.K., reflects stakeholder opinions presented at a joint workshop December 2022. The memorandum proposes implementation of "a system of mutual recognition of authorisations with minimal or reduced scrutiny, which would be complemented by a regulatory cooperation" between EU DPAs and the U.K.