Using children’s fingerprints to speed up a lunch queue? 🍽️🔍 Special-category data shouldn’t be processed for trivial purposes. Biometric identifiers are unique and irreversible — convenience can’t override GDPR safeguards. #privacy #GDPR #biometrics www.prawoiwiez.edu.pl/index.php/pi...

⚖️🔍 Classrooms are going digital — but also into the realm of #surveillance. My new chapter explores why the #AIAct bans schools from using #AI to infer students’ emotions. The ban reflects a simple truth: students should never be reduced to machine signals. #edtech #privacy

‼️ After C-203/22, #CJEU faces new Art.22 #GDPR case. Austrian Supreme Court asks if limiting payment methods via credit scoring = automated decision w/ legal effect, and how to read the “necessity” exception. Key test for e-commerce & consumer rights. #adm #privacy

🇺🇸🤖I’m looking for someone with CIPP/US certification. They don’t have to be 6’5” or have blue eyes, but they should be willing to answer a few questions about the exam. Asking for a friend 😉 #privacy #law #iapp

Polish Supreme Administrative Court: Publishing personal data on public social media isn’t “personal activity” under #GDPR. Lower’s court ruling upheld, the DPA’s view rejected. Public disclosures, even by private individuals, fall under GDPR.

Hot off the press! Three GPAI reports of the Algorithmic Transparency in the Public Sector project that Alison Gillwald and I co-led. 🧵with links of reports: 1️⃣ A state-of-the-art report of algorithmic transparency instruments. wp.oecd.ai/app/uploads/...

Can Journalistic Freedom Justify Exposing Children’s Private Lives? The Norwegian DPA says No. Familiekanalen must anonymize videos revealing sensitive info about kids, balancing freedom of speech with GDPR rules protecting vulnerable individuals. Privacy matters, even online.

📍 A Düsseldorf court ruled that #GDPR #enforcement needs a clear culprit. A complaint about leaked legal files was dismissed since no responsible party could be identified.The court clarified: authorities handle their own data breaches; higher bodies aren’t automatically liable controllers

🔎 The Lübeck court fined a streaming giant €350 for a #GDPR breach after user data ended up on the #darkweb. Even fears of misuse count as damages! Controllers stay liable for subcontractors’ mistakes. GDPR compliance isn’t optional—it’s essential.

📍The CJEU ruled that GDPR’s Article 14(5)(c) exception applies to data not collected directly from individuals, including data generated by authorities. The DPAs must ensure laws protect rights but don’t review security under Article 32. #Transparency remains key! #GDPR #privacy

💡 Spain’s new law brings #transparency to #AI in legal services. Individuals now have the right to know how AI systems influence decisions in legal processes, ensuring fairness and #accountability. A bold step toward protecting rights in the #digital age!

⚖️💡The Austrian BVwG ruled that #profiling results, like assigning political preferences for targeted #ads, can fall under Article 9 #GDPR if they indirectly reveal sensitive data (e.g., worldview). Even probabilistic or aggregated info carries discrimination risks and is protected. #Privacy

💡🤖 French DPA: #AI cameras in freight vehicles can boost road safety by detecting fatigue/distractions but must avoid constant #surveillance. Employers can rely on legitimate interest, not consent. Data use must be limited, with DPIAs required to mitigate privacy risks. #GDPR #Privacy

🔒📱 The Bundesgerichtshof ruled that losing control over personal data, even briefly, can qualify for #GDPR damages. In a #Facebook scraping case, it suggested €100 for basic harm but left room for more if distress is proven. A key step for privacy rights and corporate accountability. #privacy

The OH Digitale Dienste 📜 explains how cookies 🍪 & tracking tech must respect your privacy 🔒. Consent is key—clear, fair, and easy to revoke. No shady tricks allowed! Transparency rules ✨. Your device, your data, your choice 💻.

🚨⚖️ Is GDPR’s “household exemption” a loophole for #surveillance? 🇦🇹 The Austrian court ruled a mom tracking her kid’s location w/ “Pingo!” isn’t covered by GDPR—it’s “family business.” Valid? Maybe. But does this open the door for unchecked surveillance? #privacy #GDPR

I may be a data privacy lawyer and scholar but I feel the same 🫣

🇭🇺Hungarian DPA fined Aldi Hungary €204K for #GDPR breaches, citing lack of transparency, unlawful recording of birthdates, inadequate privacy protections, and inconsistent age checks. Ordered to revise practices, ensure privacy, and display GDPR-compliant notices.

🚨 My article in the European Judicial Review analyses the CJEU ruling in case C-634/21 on automated decision-making under Art. 22 #GDPR. The judgment impacts credit scoring and AI supported decision-making. Read on LEX (Wolters Kluwer). Let’s discuss! #privacy #AI #dataprotection

Normalizing Trump is a bad idea. Period.

🦋 My article "Femtech and Data Protection" has recently been published in the ABI Expert magazine (3/2024)! #Femtech brings significant benefits to women, but it also processes sensitive personal data. From AI to health tracking, it raises serious questions about #privacy and user awareness.

⚖️🚗 How does #GDPR apply to automated license plate recognition in parking lots? LfDI MV says it’s permissible under strict conditions: process only the plate number, inform users before they enter, and delete data after exit. Balancing security and privacy! #Privacy #DataProtection

Reposty mile widziane bo próbuję zrobić listę kont, które zajmują się analizą dezinformacji i fact-checkingiem w Polsce. Kogo brakuje - palec pod budkę. Wiem, że dopiero część osób zaczęła się przenosić więc mogłem ominąć/nie znaleźć w gąszczu kont. go.bsky.app/GmDJe4j

‼️ German Federal Court of Justice: Loss of control over personal data can constitute non-material damage under Art. 82 #GDPR, even without misuse or tangible harm. Interest in future damages confirmed. Appeals court to review data minimization and consent. #privacy #scraping

📞 Can you use a CEO’s work number for #marketing under #GDPR? Warsaw court says yes! A business number tied to a company isn’t personal data. GDPR protects individuals, not legal entities. Polish DPA’s reprimand overturned. #privacy #law #dataprotection #law

Dutch DPA found 8 holiday parks violating GDPR by using facial recognition for pool/playground access without informed consent or alternatives. 7 fixed issues, 1 risks fines by Dec. Biometric data use must be voluntary, with clear options. #privacy #GDPR

⚖️Is banning targeted ads for minors under the #DSA really in their best interest? In my chapter for Proportionality in EU Digital Law, I argue for a nuanced, child-rights-based approach to privacy. Blanket bans may limit access to valuable content—let’s balance protection and autonomy! #ChildRights

@bsky.app, what’s the official verb for posting here? On TT we had “tweeting.” Is it “skying”? Asking for a friend… and my vocabulary! ;)

‼️⚖️Debiutuję na łamach „Orzecznictwa Sądów Polskich” glosą do wyroku NSA z 20.02.2024 r. (III OSK 2700/22), który potwierdza dopuszczalność przetwarzania danych odrzuconych kandydatów przez 3 lata w celu obrony przed roszczeniami. #RODO #privacy #gdpr #hr #jobs

💭💡 Feeling nostalgic for the days when social media built real communities. Now, Facebook feels like a ghost town, LinkedIn’s turning personal, and X is losing steam. Are we trading depth for fleeting entertainment with this “TikTokization”? Where’s #socialmedia heading? #TheTimesTheyAreAChangin

Latvian DPA releases #cookies banner guidelines to tackle misleading designs and lack of consent options. Websites must offer clear, non-misleading banners in the site’s language without pressuring users. #privacy #darkpatterns Link (shortened URL): shorturl.at/aZWl1

🇪🇺⚖️ #EU Court suspends Amazon's ad repository mandate under #DSA's Article 39, pending review of its #VLOP status. 🔹 My KCLB’s blog post analyzes the decision's limited impact on DSA enforcement and the use of competition law terms by the Court and Amazon. tinyurl.com/KCL-Blog

‼️🚨 #EDPB has banned behaviour-driven ads on Facebook and Instagram permanently across the #EEA #privacy #gdpr #rodo #ads #profiling #dataprotection www.datatilsynet.no/aktuelt/aktu...

EU AI Act: How to Revolutionise Regulation?

🤖🇺🇸President Biden has issued a comprehensive #ExecutiveOrder aimed at positioning the U.S. at the forefront of #AI innovation while ensuring #AI safety and #security www.whitehouse.gov/briefing-roo...