What happened in the legal world whilst I was on maternity leave? That’s what I’ve been catching up on. Whilst I was cuddling and playing over the past 10 months, some exciting legal stuff went on. In a series of 12 articles, I will discuss my top 10 things that happened, and my top two things that didn’t happen.
Up first: The GDPR had its first birthday.
On 25th May 2019, the General Data Protection Regulation (GDPR) had applied for a full year. According to the European Data Protection Board, EU-wide there have been over 144,000 queries and complaints, and over 89,000 personal data breaches logged by the national supervisory authorities.
Enforcement action has included the following:
Of particular interest was the application of the extra-territorial scope of the GDPR. AIQ is not established within the European Union, and originally claimed that it was not subject to the jurisdiction of the ICO. However, the original enforcement notice indicates that Article 3(2)(b) of the GDPR (and section 207(3) of the Data Protection 2018) applied. Organisations outside the EU are subject to the GDPR if they monitor the behaviour of individuals within the EU (in this case, in the context of political campaigning). Note that non-EU organisations which offer goods or services to individuals within the EU are also subject to the rules.
The ICO has published a report "GDPR: One year on". This outlines its ongoing work in supporting the public, DPOs and organisations, taking action and enforcing the GDPR, enabling innovation, and growing the ICO. Of particular note in the first year of the GDPR:
The Irish supervisory authority (the Data Protection Commission) has recently launched statutory enquiries into a number of big technology and online advertising companies, including Facebook, Twitter, Quantcast and Google Ireland Limited.
Olivia Whitcroft, principal of OBEP, 6 June 2019
This article provides general information on the subject matter and is not intended to be relied upon as legal advice. If you would like to discuss this topic, please contact Olivia Whitcroft using the contact details set out here: Contact Details