On October 1, 2019 the Court of Justice of the European Union (“CJEU”) decided that a pre-ticked checkbox does not constitute valid consent for cookies – irrespective of whether the information stored in the cookie contains personal data or not. The CJEU further ruled that the information on cookies must…
In light of the implementation of the General Data Protection Regulation, the German data protection authorities have changed their position on how employees submit whistleblowing reports anonymously. The German data protection authorities have issued guidelines in this regard.
Information obtained via a keylogger software secretly installed on an employee’s computer cannot be used as evidence in court – some exceptions apply.
Germany is one step closer to new data protection rules as the German Parliament and the Federal Council have both approved the draft of a new Federal Data Protection Act (Bundestag printing matter 18/11325). The purpose of the draft is to align German data protection law to the European General Data Protection Regulation which will be applicable as of May 25, 2018.
The European Commission has proposed a new Regulation on Privacy and Electronic Communications that is intended to supplement the General Data Protection Regulation.
On February 29, 2016, the European Commission published a draft adequacy decision and related documents that are intended to implement the EU-U.S. Privacy Shield.