[#Dataprotection #Facebook #AGCM #facebookireland #Datafines]

“The Italian Competition Authority (‘AGCM’) announced, on 17 February 2021, that it had fined Facebook Ireland Ltd. and Facebook Inc. €7 million for not complying with an order issued in November 2018 regarding the unlawful processing of consumer data. In particular, the AGCM found that Facebook had been misleading consumers to register on the platform without informing them in a timely and adequate manner about the data that would be collected from them for commercial purposes.”

[#Spypixels #GDPR #cybersecurity #BBC #Emailaccounts #email security #hacking]

“This week, the Hey messaging service analyzed its traffic following a request from the BBC and discovered that roughly two-thirds of emails sent to its users’ private email accounts contained what is known as a “spy pixel.”

[…] when an email is opened, the tracking pixel is automatically downloaded — and this lets a server, owned by a marketer, know that the email has been read. Servers may also record the number of times an email is opened, the IP address linked to a user’s location, and device usage.

[…] GDPR demands that organizations tell recipients of the use of such pixels. However, the water has been muddied surrounding the transparency necessary to implement pixel tracking, as consent is not always required — and when it is, this could be ‘obtained’ automatically when a user signs up to an email service and is asked to read a privacy notice published on a website.”

[#Canada #CPPA #Privacylaw #Dataprivacyregulation #Canadaregulations] Key aspects of the newly proposed Canadian privacy law

“Stricter data privacy regulations and enforcement is no longer a new trend, it’s the known future. ¨[…] If Canada’s CPPA is adopted, it will be one of the strictest privacy laws in the world and is comparable to the GDPR and California’s privacy regulation.

[…] The bill is still in the early phases of development and will likely gain more traction as 2021 ensues. It is important for organizations that would become subject to Canada’s CPPA to monitor all developments going forward, including whether provisions are altered or removed. This is necessary to stay on top of future compliance obligations. While some of these responsibilities may overlap with other laws like the GDPR, there will be variances.”

[#Adequacydecision #EuropeanComission #UKAdequacy] First draft of the UK Adequacy Decision is out

“Today, the Commission launched the process towards the adoption of two adequacy decisions for transfers of personal data to the United Kingdom, one under the General Data Protection Regulation and the other for the Law Enforcement Directive. The publication of the draft decisions is the beginning of a process towards their adoption. This involves obtaining an opinion from the European Data Protection Board (EDPB) and the green light from a committee composed of representatives of the EU Member States. Once this procedure will have been completed, the Commission could proceed to adopt the two adequacy decisions.”