Author

Magalie Dansac Le Clerc

Browsing

In a groundbreaking decision, an Austrian regional court has held that certain provisions of the Collective Redress Directive (Directive (EU) 2020/1828, “CRD”, sometimes also referred to as Representative Actions Directive) are directly applicable given that Austria failed to transpose the directive into national law. As a consequence, the EU’s rules on privacy, AI, and digital products will soon see increased private collective enforcement. The CRD, adopted by the European Union in 2020, aims to facilitate…

On 10 April 2024, the French National Assembly adopted the Bill on Securing and Regulating the Digital Space (known as the “SREN Bill”), following the Senate’s validation a week earlier. The Bill contains a multitude of provisions, regarding a variety of important topics in the digital realm such as the protection of children online and reducing dependence of French companies on cloud service providers. The bill is expected to become law in the coming weeks.…

1. Background of the case and proceedings in Belgium (a) IAB Europe and real-time bidding in a nutshell The CJEU ruling concerns the Transparency and Consent Framework (“TCF”) that was launched by Interactive Advertising Bureau Europe (“IAB Europe”), a European-level association for the digital marketing and advertising ecosystem. The TCF specifically targets the real-time bidding industry, which is active in the provision of online, automated and instantaneous auctions for the sale and purchase of online…

For the first time, France has adopted a law protecting children’s privacy through the lens of right to their image: the Law n°2024-120 of February 19, 2024 (“Children’s Image Rights Law”). Unlike standards or bills related to the sharing of children’s personal data which may exist in other countries (e.g., UK Age Appropriate Design Code, California bill on collection of personal information of a consumer less than 18 years of age), which apply to data…

28 January 2024 is Data Protection Day (or Data Privacy Day outside of Europe), which marks the anniversary of the Council of Europe’s Convention 108. Data Privacy Day encourages the global community to think about the importance of respecting privacy, safeguarding data, and enabling trust. In an increasingly connected and digitized world, where data protection, privacy and cybersecurity regulation are rapidly evolving, the work of the global data community is more vital, and more challenging,…

On December 22, 2023 the EU Regulation on harmonised rules on fair access to and use of data, also known as the Data Act, was published in the Official Journal of the European Union. It shall enter into force on the twentieth day following that of its publication, namely on January 11, 2024, and become applicable on September 12, 2025. The Data Act affects manufacturers of connected products and also providers of related services, including virtual…

A law aimed at establishing a digital majority and combating online hate (the “Digital Majority Law” or “Law”) was enacted on 7 July 2023[1]. 1. The Digital Majority Law creates new obligations for social network service providers operating in France. According to this Law, an online social network service is defined as “any platform enabling end-users to connect and communicate with each other, share content and discover other users and content, across multiple devices, in…

On August 9, India’s Digital Personal Data Protection Bill, 2023 (“DPDP Bill”) passed both houses of the Indian Parliament and now awaits Presidential assent. In 2017, India’s Supreme Court mandated that privacy is a fundamental human right. Since that time, India has been working to pass data protection legislation. The DPDP Bill is India’s fifth draft of the bill. The DPDP Bill only applies to the processing of digital personal data in India, where the personal…

On July 10, 2023, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework (“DPF”). US companies that participate in the DPF will be deemed to provide “adequate protection” under Article 45 of the EU General Data Protection Regulation (“GDPR”) for personal data transfers received from the European Union (“EU”) and European Economic Area (“EEA”). Why did the EC need to adopt the adequacy decision for the DPF? As we have previously written, the…

The US Office of the Director of National Intelligence (“ODNI”) announced today that it has fully implemented new safeguards under Executive Order 14086. See INTEL – ODNI Releases IC Procedures Implementing New Safeguards in Executive Order 14086. These steps clear the path for the European Commission to adopt the draft “adequacy decision” for cross-border data transfers pursuant to the EU-U.S. Data Privacy Framework. By way of brief background, in July 2020, the Court of Justice…