Data Protection Insider Blog

Data Protection Insider

Welcome to Data Protection Insider, your biweekly digest of the latest developments in EU data protection law. Each issue brings you insightful analysis of recent court rulings, legislative updates and regulatory changes that impact data protection across the European Union. Stay informed and deepen your understanding of the evolving data protection legal landscape with our biweekly updates.

Subscribe now!

Data Protection Insider, Issue 112

– ECtHR: North Macedonia Overstepped Margin of Appreciation in Adoption Secrecy – On 14th May, the ECtHR ruled that North Macedonia had not struck an appropriate balance between the interests of adopted persons to know their origins and the interests of their parents to remain anonymous in Mitrevska v. North Macedonia. As to the facts of the case, the applicant was adopted as […]

Data Protection Insider, Issue 111

– CJEU rules on Access to Internet Data in relation to Copyright – On 30th April, the CJEU ruled in the case of La Quadrature du Net and Others. The case essentially concerned French legislation which the applicants alleged ‘permit access to’ internet ‘connection data in a disproportionate manner for non-serious copyright offences committed on the internet, without prior review by a judge […]

Data Protection Insider, Issue 110

– CJEU Rules on Non-Material Damages – On 11th April 2024, the CJEU delivered its judgment in the case of GP v juris GmbH. The case concerned a self-employed lawyer, who was a client of the legal database company juris. The plaintiff revoked all consents, and objected to the processing of their data for the purposes of marketing. Despite this, […]

Data Protection Insider, Issue 109

– CJEU: Fingerprints in EU National Cards Not Contrary to Fundamental Rights to Privacy and Data Protection – On 21st March, the CJEU ruled in RL v Landeshauptstadt Wiesbaden that EU Regulation 2019/1157, which requires EU national identity cards to include two fingerprints of the owners of the card, is not incompatible with the EU fundamental rights to privacy and data […]

Data Protection Insider, Issue 108

– CJEU: Court on Personal Data and Controllership in Online Advertising – On 7th March, the CJEU ruled in the case of IAB Europe v Gegevensbeschermingsautoriteit. In terms of the facts, the case concerned IAB Europe’s Transparency & Consent Framework (TCF). The TCF provides a set of rules and technical specifications aimed at allowing online advertisers to process users’ personal data […]

Data Protection Insider, Issue 107

– ECtHR Rules on Publication and Destruction of Information Obtained via Covert Surveillance – On 22nd February, the ECtHR ruled in the case of Kaczmarek v. Poland. In terms of the facts, the applicant is the wife of a Polish politician. In 2007, an anti-corruption investigation was launched in relation to the Ministry of Agriculture. The investigation failed, and the […]

Data Protection Insider, Issue 106

– CJEU: Parliamentary Committees Supervising National Security Authorities Are Subject to the GDPR – On 16th January, the CJEU ruled in Österrreichische Datenschutzbehörde v WK that parliamentary committees which supervise national security authorities should comply with the GDPR. As to the facts of the case, the applicant in the main proceedings, WK, was heard as a witness by a Parliamentary Committee […]

Data Protection Insider, Issue 105

– CJEU: Official Journal Acts as a Controller When Publishing Data – On 11th January, the CJEU ruled that the Belgian Official Journal should bear the responsibilities of a controller when publishing personal data, as the data processing is regulated by Belgian law in Etat belge v Autorite de protection des donnees. As to the facts of the case, the Belgian […]

Data Protection Insider, Issue 104

– CJEU: Credit Scoring Constitutes Automated Decision-Making – On 7th December, the CJEU ruled that credit scoring constitutes automated decision-making in the sense of Article 22 (1) GDPR in OQ v Land Hessen. As to the facts of the case, the applicant in the main proceedings, OQ, was refused a loan by a credit institute because of a negative credit rating […]

Data Protection Insider, Issue 103

– Council Adopts Data Act – On 27th November, the Council announced it had ‘adopted a new Regulation on harmonised rules on fair access to and use of data (Data Act)’. According to the Council, the law aims to establish ‘new rules on who can access and use data generated in the EU across all economic sectors’. More specifically, amongst […]
DPI Editorial Team

Dara Hallinan, Editor: Legal academic working at FIZ Karlsruhe. His specific focus is on the interaction between law, new technologies – particularly ICT and biotech – and society. He studied law in the UK and Germany, completed a Master’s in Human Rights and Democracy in Italy and Estonia and wrote his PhD at the Vrije Universiteit Brussel on the better regulation of genetic privacy in biobanks and genomic research through data protection law. He is also programme director for the annual Computers, Privacy and Data Protection conference.

Diana Dimitrova, Editor: Researcher at FIZ Karlsruhe. Focus on privacy and data protection, especially on rights of data subjects in the Area of Freedom, Security and Justice. Completed her PhD at the VUB on the topic of ‘Data Subject Rights: The rights of access and rectification in the AFSJ’. Previously, legal researcher at KU Leuven and trainee at EDPS. Holds LL.M. in European Law from Leiden University.

Subscribe to our newsletter for updates on legal developments, upcoming conferences, workshops, and publications in your areas of interest.

Newsletter: Subscribe now