SearchSearch results for: “”

The Grand Chamber of the CJEU confirms that EU law precludes national legislative measures which provide for the general and indiscriminate retention of traffic and location data relating to e-communications, for the purpose of combating serious crime.

On 22 March, the EU published two new proposals of regulation on 'cybersecurity at the institutions, bodies, offices and agencies of the Union' and on 'information security in the institutions, bodies, offices and agencies of the Union'.

De Nederlandsche Bank (DNB) heeft op 21 januari 2026 de resultaten gepubliceerd van haar onderzoek naar het gebruik van Artificial Intelligence (AI) door verzekeraars. Deze publicatie is relevant omdat zij inzicht geeft in de huidige stand van AI-adoptie

In this blog, we present two interesting matters in the field of digital law: (1) The supply of a copy of software together with a licence to use it can constitute a "sale of goods”; and (2) WhatsApp in turmoil for its privacy policy and terms of use.

In this blog, we briefly present three interesting matters in the field of digital law: (1) Parliamentary initiatives to tackle cyber attacks; (2) 'Zero tariff' options and open internet access do not mix; (3) Council of State, GDPR and encryption.

On 5 January 2022, the EDPS issued a reprimand to the European Parliament for non-compliance with several provisions of the GDPR for EU Institutions and ordered it to update its data protection notices of an internal corona testing website.

On 17 December 2021, the European Commission published its final version of the implementing decision on the adequate protection of personal data in the Republic of Korea.

On 6 December 2021, the European Commission published the results of the public consultation on its Data Act. This legislative initiative aims at facilitating data access and use, and reviews the rules on the legal protection of databases.

On 25 March 2021, the European Parliament adopted a resolution on the Commission evaluation report on the implementation of the General Data Protection Regulation two years after its application.

On 6 December 2021, the Belgian Data Protection Authority published a recommendation on the processing of biometric data.
 

The Datenschutzbehörde, the Austrian Data Protection Authority (DPA), found that the use of the free version of Google Analytics violated some provisions of the GDPR, and specifically the rules on international data transfers.

The Litigation Chamber of the Belgian DPA confirms that, in the absence of an existing legal basis, it is not possible for an employer, in this case a hospital, to make the recruitment of a person conditional on the fact that he/she has been vaccinated.

The Belgian DPA fined an NGO and a researcher both active in the fight against disinformation for violating GDPR provisions.

The Belgian Data Protection Authority published an interesting decision of its Litigation chamber. The content of the decision is not completely new, but it provides (or recalls) some relevant elements for personal data practitioners.

On 15 February 2022, the European Data Protection Supervisor published Preliminary Remarks on Modern Spyware. In fact, this document directly targets the Pegasus spyware developed by an Israeli company. 

On 2 February 2022, the Belgian Data Protection Authority considered that the Transparency and Consent Framework (TCF) developed by Interactive Advertising Bureau Europe (IAB) violates the GDPR.