Resources

Decision by German Federal Court of Justice (BGH) on case against Facebook for data scraping incident (german)

Data scraping

OH Digitale Dienste version 1.2 by German data protection authority

Cookies

UK’s New Data Use Bill: Easier Access and Enhanced Privacy for All

Local Laws

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

Statement 2/2024 on the financial data access and payments package by EDPB

Finance and Fintech

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

Case C 683-2021

Data Controller, Data Processors, Joint Controllers

A Guide to Cookies and Compliance by DMA

Consent, Cookies, Lawfulness of Processing

[Press release] Commission opens formal proceedings against X under the Digital Services Act

Digital Services Act

Study on the appropriate safeguards under Article 89(1) GDPR for the processing of personal data for scientific research

Material scope, Scientific Research, Specific processing situations

C-272/19

Access Requests (DSAR), Data Controller, Data Subjects Rights, Definitions

Office of the Privacy Commissioner of Canada Sweep Report 2024

Consent, Cookies, Lawfulness of Processing

Case C‑461/22 CURIA

Data Controller, Definitions

Guideline on the massive collection of personal data from the web for the training of generative artificial intelligence (GenAI) models by the Italian Data Protection Authority (Garante)

AI, Data scraping, Specific processing situations

Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject |EPDB

Data Controller, Data Subjects Rights, Definitions

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

Fashion ID, 29 July 2019, C-40/17, ECLI:EU:C:2019:629

Data Controller, Data Processors

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH, in the presence of Facebook Ireland Ltd (Case C-210/16).

Data Controller

Prokuratuur (Conditions of access to data relating to electronic communications) (C-746/18, EU:C:2021:152)

Law Enforcement, Local Laws

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Data Controller, Data Processors, Definitions

Guidance on the rules on use of cookies and similar technologies [pdf] [Official Guidelines]

Consent, Cookies

Cookies Instructions Kit by DMA Italy, FedoWEB et al.

Consent, Cookies

Report of the work undertaken by the Cookie Banner Taskforce [Official EDPB Guidelines] [pdf]

Consent, Cookies

Statement 2/2024 on the financial data access and payments package bg EDPB

Finance and Fintech