Xandr (Microsoft) fined: six years after “Out of Control”, adtech meets the GDPR
Norway fines Xandr (formerly AppNexus, Microsoft) €8.5 million over Grindr data processed without a legal basis. What it means for adtech, and how Swiss law compares.
Norway fines Xandr (formerly AppNexus, Microsoft) €8.5 million over Grindr data processed without a legal basis. What it means for adtech, and how Swiss law compares.
Have you ever heard about dark patterns and deceptive designs in the context of a cookie banner and compliance with the e-Privacy directive? No? Then, this court case might be a good opportunity to learn about it. The Landgericht Rostock ruled on 15 September 2020 that cookie banners / pop-ups designed in a misleading way are against the law. I will comment this ruling in this article.
In this article, we discuss the out-of-control report issued by the Norwegian Consumer Council, alleging serious breaches of the GDPR by the digital advertising industry through dating platforms, such as Grindr. Then we get into more details about data-driven business models and debate around data protection principles and guarantees to protect consumers' privacy.
The revision of the Swiss Federal Data Protection Act (DPA) aims at strengthening the rights of the data subjects, in this case patients, and to align with European data privacy standards. At this conference, I will have the pleasure to present the ongoing revision of the Swiss DPA and its consequences for doctors providing healthcare as private practice. We will assess to what extent the revision of the DPA fulfils this objective of aligning to the GDPR. I will then conclude with situations, practical cases, advice and recommendations. This article reminds the latest fines imposed by data protection authorities in the EU in the healthcare sector.
This 21 January 2019, the French data protection supervisory authority (Commission Nationale de l’Informatique et des Libertés or the “CNIL“) fined Google LLC 50 million Euros for breach of the General Data Protection Regulation (the “GDPR“). This article reminds the background, summarizes the case and a few thoughts.