AllNet Law

😊 Bringing you a round-up of privacy news this week: https://lnkd.in/e9tMaZJJ ---   ➡ European Data Protection Board to Change Data Protection Authorities into Market Surveillance Authorities in Response to #EU #AIAct   ➡ Court of Justice of the European Union Re-establishes #TikTok as a #Gatekeeper Under the #DMA by Rejecting Its Appeal   ➡ Information Commissioner's Office #Reprimands London Borough of Hackney for Lax #Security, Leading to #Data #Leak   ➡ #Netherlands Autoriteit Persoonsgegevens (Dutch DPA) #Fines Drugstore #Kruidvat Over #Default-#Enabled #Cookies   ➡ Information Commissioner's Office Calls on Water Companies to #Release #Information About #Emissions   Read more: https://lnkd.in/e9tMaZJJ

The #EU #AI #Act: at a Glance 💡 We love our IAPP - International Association of Privacy Professionals infographics! See all the #basics of the EU AI Act in one place! Download and save for later 😊

#EDPB to Change #DPAs into #MSAs ---   On 16th July 2024, the European Data Protection Board released a statement, establishing that since Data Protection Authorities (DPAs) already have experience dealing with the impact of #AI on #human #rights, in particular the right to protection of #personal #data, they should therefore be designated as #Market #Surveillance #Authorities (MSAs). According to the #AIAct, Members States shall appoint MSAs at national level before 2 August 2025, for the purpose of supervising the application and implementation of the AI Act.   This would ensure better #coordination among different regulatory authorities, enhance legal certainty for all stakeholders and strengthen the supervision and enforcement of both the AI Act and #EU #data #protection #law.   Read more: https://lnkd.in/e25c74y4

#CJEU Re-establishes #TikTok as a #Gatekeeper ---   On 5 September 2023, the European Commission designated #Bytedance Ltd (of which #TikTok is a subsidiary) as a #gatekeeper under the Digital Markets Act (#DMA). In November 2023, Bytedance applied for an #annulment of that decision. The Court of Justice of the European Union, at Bytedance's request, decided to look into that decision.   As of today, 17th July 2024, the judgment is that Bytedance is indeed a gatekeeper under the DMA, based on the fact that Bytedance met the #quantitative #thresholds laid down in the DMA regarding its global market value, the number of TikTok users within the #European #Union.   Read more: https://lnkd.in/eyjvswF4

#ICO #Reprimands London Borough of Hackney ---   The #London #Borough of #Hackney was issued a #reprimand from the Information Commissioner's Office following a #cyber-#attack in 2020 which affected at least 280,000 residents.   The hackers attacked the local government's systems - accessing, #encrypting, and in some instances exfiltrating records containing #personal #data. The records revealed racial or ethnic origin, religious beliefs, sexual orientation, health data, economic data, criminal offence data, and other data. The hackers encrypted the data and then deleted 10% of the council’s backup before the council managed to intervene.   In the #investigation of the #databreach, the Information Commissioner's Office found lack of proper #security, which included the failure to change an insecure #password on a dormant account still connected to Hackney council servers which was exploited by the attackers.   Read more: https://lnkd.in/eQD96ruy  

#Netherlands #Fines Drugstore Over #Cookies ---   The Autoriteit Persoonsgegevens (Dutch DPA) has imposed a #fine of 600,000 euros on the company behind the drugstore Kruidvat. The company #collected #data from website visitors and was able to use this to create personal #profiles of these people. This is very #sensitive #information due to the specific nature of drugstore products. Items such as pregnancy tests, contraceptives or #medication for all kinds of ailments, when linked to #locationdata (which can be traced via the #IPaddress) of the unique visitor, can create a very specific and invasive profile of the person.   In the #cookie #banner on Kruidvat.nl, the boxes 'agree' to the placement of #tracking #software were checked by default, which is not permissible. Visitors who still wanted to refuse the cookies had to go through many steps to achieve this. The AP has found that personal data of website visitors to Kruidvat.nl had been #processed #unlawfully.   Read more: https://lnkd.in/eQSB38cH

#ICO Calls on Water Companies to Release Information ---   On the 15th of July, the Information Commissioner's Office has written to 12 #water companies, calling on them to proactively #disclose #information relating to sewage discharges on a monthly basis.     In May 2024, they issued six water companies - Anglian Water, Severn Trent Water, South West Water, Northumbrian Water, United Utilities and Yorkshire Water - with decision notices requiring them to disclose the start and stop time of sewage discharges. The Information Commissioner's Office noted that information about ‘#emissions’, which includes sewage discharges, as a #special #category of information, has no grounds to be omitted from public knowledge in most cases.     Read more: https://lnkd.in/erRt69fg

😊 Bringing you a round-up of privacy news this week: https://lnkd.in/e9tMaZJJ ---   ➡ Submit Your Views on Protecting Your #Neurodata to a UNESCO Global Consultation   ➡ Information Commissioner's Office Releases Set of How-To Videos on Navigating #App #Privacy Notices   ➡ Ticketmaster Warns Customers to be Vigilant 2 Months After #Hack #Attack   ➡ #EU AI Act Becomes #Officially #Published   ➡ Guidance on #AI and #GDPR Within the #UK From the Information Commissioner's Office   ➡ noyb.eu Releases #Cookie #Banner Report   Read more 👉 https://lnkd.in/e9tMaZJJ

#NOYB Releases #Cookie #Banner Report 💡 ---   noyb.eu is partially responsible for the fact that we have the option to '#reject' #cookies, and that most of the non-necessary cookies are #unticked by default. The European Data Protection Board established a "cookie banner taskforce" in September 2021 largely due to #cookiebanner #complaints from noyb.eu.   On July 11, 2024 noyb.eu released a #report providing a comparison of #EDPB recommendations with national #DPA positions.   Read the report 👉 https://lnkd.in/dRiyyaHG  

Guidance on #AI Within the #UK ---   The #EU #AI #Act is published in the #EU #Official #Journal today, enabling lots of #businesses to re-examine how they approach #AI and #personaldata. What about the UK?   While the UK has no #legislation that would regulate AI completely as of yet, there are certain standards to uphold. The Information Commissioner's Office has published a #guide on how to use AI and personal data #appropriately and #lawfully. It covers such basics as:   ➡ AI-made #decisions ➡ Collecting #data for #developing AI systems ➡ Addressing AI #bias ➡ How to carry out #DPIAs with AI ➡ #Data #minimisation Read more: https://lnkd.in/ervrDyKT