During this 37th plenary session, the Board adopted Guidelines on the concepts of controller and processor and Guidelines on the targeting of social media users. The EDPB also created a taskforce focusing complaints following the CJEU Schrems II judgement and
By decision of 28 July 2020, the CNIL imposed a fine of €250,000 and an obligation to comply with the GDPR within 3 months of the decision, on SPARTOO, an online shoe retailer operating in 13 European countries. This is
By a decision of 23 June 2020, the German Federal Supreme Court provisionally confirms the allegation of abuse of a dominant position by Facebook because its users were not given the choice over the level of personalisation of their Facebook experience, which entails the collection of data from sources outside the Facebook network (e.g. Instragram, internet browsing etc.).
The Court considered that Facebook practice may hinder the competition in the social network and online advertising market due to its dominant position and provisionally upheld the decision of the German Federal Cartel Office (“Bundeskartellamt”) prohibiting Facebook from processing personal data collected outside the Facebook environment without the users’ additional consent.
This decision is interesting as it shows that in certain cases a breach of GDPR provisions may also have consequences on competition law matters.
The Conseil d’État (i.e. The French Supreme Administrative Court) upholds, by a decision of 19 June 2020, the €50 million sanction imposed on Google by a decision of the CNIL of 21 January 2019. The Supreme Court confirms that: the
On May 14, 2020, the Belgian Data Protection Authority imposed a €50,000 fine on an international dating website (“dating platform” or the “company”) for lack of legal basis of the data processing operations carried out to provide an “invite a