LAVERY follows the evolution of consumer law closely, its specialized expertise in the fields of retailing and class actions has been confirmed many times by stakeholders in the milieu ...
With businesses now building back up following the pandemic, focus has moved onto ensuring organisations are as efficient, effective and resilient as possible. Key to this is ensuring that managers are fully equipped to handle workplace issues. The session focuses on dealing with DSARS and other practical data protection issues for employers. The key takeaway points are set out below: Brexit and Data Protection The Data Protection Act 2018 continues to apply in the UK ...
A consultation published by the EU Commission on which over-the-counter (OTC) derivatives identifier would best facilitate price transparency closed at the end of last week. While we will need to wait until mid-2024 to hear the Commission’s findings, there are a couple of points of much broader impact and interest to all those interested in operating a multinational business, market structure, technology, digital assets, regulation, cross-border rule harmonisation and data privacy ...
With the Information Commissioner's Office (ICO) grace period for enforcing the new cookies rules almost at an end, companies should work with their website developers at an early stage to ensure compliance. The ICO will soon be confirming that its 12 month ‘lead in’ implementation period has come to an end. Website operators then run the risk of enforcement action and fines if they fail to comply with the new cookies regime ...
In a recent judgement the Court of Justice of the European Union (CJEU) concluded that an administrator of a Facebook fan page has independent obligations under European data protection law, and will be considered joint controller with Facebook for some processing activities ...
Since the European Court of Justice declared the EU-US Privacy Shield as an invalid legal basis for the transfer of personal data to the US, stipulating increased requirements for the use of the EU standard contractual clauses in July 2020 (C-311/18, 'Schrems II'), uncertainty has been rife within many companies: a legally compliant data transfer to the USA on the basis of the Privacy Shield is no longer possible and the new EU standard contractual clauses announced in November 202
One step closer to implementation of the reforms relating to EU data protection regulation, this article looks at some of the implications that the reforms are likely to have for SMEs. Key progress was made in the reform of EU data protection regulation on 12 March 2014 with the European Parliament voting in support of reform and the draft General Data Protection Regulation (the "Regulation"). The Regulation must now be adopted by the Council of Ministers in order to become law ...
Earlier this week, the UK Cryptoassets Taskforce published its Final Report on cryptoassets and distributed ledger technology (DLT). The Taskforce – which includes representatives from HM Treasury, the UK Financial Conduct Authority (FCA) and the Bank of England – was established in March 2018 to analyse and assess the risks and potential benefits of cryptoassets and DLT and “set out the path forward with respect to regulation [of these areas] in the UK” ...
On 15.12.2015 EU Commission, Council and Parliament agreed on the final terms of the General Data Protection Regulation (GDPR) in their trialogue negotiations. It is generally expected that the draft will be adopted soon, in any event not later than summer 2016. This ends the uncertainty about the content of the new European Data Protection law which will be directly applicable in all Member States two years after the adoption by Commission, Council and Parliament ...
The European Parliament gave its final approval to the Markets in Crypto-Assets Regulation (‘MiCA’) on 20 April 2023. The regulation forms part of the EU’s broader digital financial package whose aim is to encourage the use of fintech while ensuring consumer protection and financial stability across the EU. MiCA is the first harmonised EU framework for regulating crypto-assets and is applicable across Member States without national transposition ...
The European Commission has sent a Statement of Objections (SO) to Google over abusive practices in online advertising technology. Uniquely it seems, the Commission has identified in the press release that to remedy the situation the Commission is of the preliminary view that divestment by Google is required. This would be the first example of a proposed break-up of a tech business by the EU under market dominance rules ...
Regulation (EU) 2018/302 of February 28, 2018, on addressing geo-blocking and other forms of discrimination based on customers' nationality, place of residence or place of establishment within the internal market (the "Regulation") came into force, December 3, 2018. The Regulation seeks to increase access for customers in the EU and EEA to goods and services by preventing unjustified geo-discrimination due to the customer's nationality, place of residence or establishment ...
An analyst estimates that the market value in 2023 for digital advertising will be US$701 billion. The EU’s Digital Markets Act (DMA) is a legislative competition law 'key' to 'unlocking' the big-data relating to digital advertising held in the ‘safe’ owned by BigTech. Advertising agencies are potentially one class of beneficiary (see link for article - The Digital Markets Act - Strategy reboot for online advertising) ...
To celebrate the Euro 2024 football tournament kicking-off, we wanted to pay tribute by ranking the data protection authorities from the nations competing in the tournament. Below, we have set out our top ranked data protection authorities and the reasons why they are our top picks. Rank 1: Spain No ...
The European Commission has today adopted the Privacy Shield. The Privacy Shield is intended to provide a framework for EU-US data transfers. What is the Privacy Shield? European data protection law restricts the transfer of personal data outside the European Economic Area (EEA) unless the country to which the data is transferred ensures an adequate level of data protection ...
The European Commission recently issued guidelines on mobile applications supporting the fight against COVID-19 in relation to data protection. Mobile applications commonly installed on smartphones can act as a support mechanism for health authorities at the national and EU level in monitoring and managing the ongoing COVID-19 pandemic and are particularly important in easing measures to reduce the spread of the disease ...
On 26 June 2013, a new Commission Regulation on what telecommunications operators (Telcos) and Internet Service Providers (ISPs) should do if their customers' personal data is lost, stolen or otherwise compromised, was published in the Official Journal of the European Union. The purpose of the new rules is to ensure businesses, operating in more than one EU country, can take a pan-EU approach in the event of a data breach ...
On 21 April 2021, the European Commission (EC) published a proposal (Proposed Regulations) which is described as the “first-ever legal framework on [Artificial Intelligence]”, aiming to turn Europe into the global hub for trustworthy Artificial Intelligence (AI). The Proposed Regulations are of general interest because they constitute a first attempt to “regulate” AI properly and, if implemented, may become influential worldwide ...
Platform work entails the use of an online platform, serving as an intermediary between the clients and the workers for the performance of particular services or to carry out particular jobs in return for payment. In this way, division of work into specific jobs is favoured over a long-standing employment relationship ...
On November 12, 2020, just one day after the European Data Protection Board (“EDPB”) published its recommendations on additional measures for data transfers to third countries (Recommendation 01/2020), the European Commission published a draft of the long-awaited updated Standard Contractual Clauses (“SCCs”). Under Art. 46 GDPR, these can serve as the basis for data transfers to third countries without an adequacy decision ...
