{"id":72376,"date":"2022-09-01T23:03:46","date_gmt":"2022-09-01T21:03:46","guid":{"rendered":"https:\/\/www.lexxion.eu\/dpi\/data-protection-insider-issue-76\/"},"modified":"2022-09-01T23:03:46","modified_gmt":"2022-09-01T21:03:46","slug":"data-protection-insider-issue-76","status":"publish","type":"dpi","link":"https:\/\/www.lexxion.eu\/en\/dpi\/data-protection-insider-issue-76\/","title":{"rendered":"Data Protection Insider, Issue 76"},"content":{"rendered":"
\n

– <\/span>EDPB Accor SA Dispute Resolution Decision Published –<\/span><\/strong><\/em><\/a><\/p>\n

On 17th August, the EDPB published a dispute resolution decision, concerning a dispute between the French and the Polish DPAs concerning the fine to be imposed on Accor SA.<\/a> The fine was imposed in response to breaches of the provisions on the right of access to one\u2019s data and the right to object to marketing communication. In its decision, the EDPB recommended to the Lead Supervisory Authority \u2013 the French CNIL \u2013 to increase the fine in order to make it more \u2018dissuasive\u2019, taking into consideration Accor SA\u2019s 2021 turnover. It did not agree with the Polish DPA\u2019s request that the decrease in Accor SA\u2019s turnover, or in other words – \u2018the impact of the fine on ACCOR SA\u2019s economic viability\u2019 – has to be taken into account, as the turnover is already a factor in calculating the fine. Following the decision, the CNIL now has to re-calculate the fine. The full text of the decision can be found on EDPB\u2019s website.<\/p>\n<\/div>\n

\n

– <\/span><\/a>Czech Presidency Proposal on Data Act<\/em><\/a><\/strong> –<\/p>\n

According to Euractiv, the Czech presidency of the EU Council has proposed a \u2018partial compromise\u2019 concerning Chapter V of the Data Act \u2013 concerning the conditions under which privately held data might be accessed by public authorities.<\/a> The compromise includes changes to both the scope and substance of the Chapter. According to Euractiv, proposed changes include, amongst others: the name of the Chapter \u2013 which now limits the scope to specific EU Institutions; the clarification of certain concepts \u2013 including the concept of exceptional need; and the conditions relevant to public authority access \u2013 including concerning personal data; According to Euractiv, the proposed compromise will be discussed on 5th September by the Telecom Working Party \u2013 the Council body responsible for the file.<\/p>\n<\/div>\n

 <\/p>\n

\n

– <\/strong><\/span><\/em><\/a>Norwegian DPA Pushes for a Stop on Facebook Data Transfers<\/a> <\/strong><\/em>–<\/strong><\/span><\/em><\/a><\/p>\n

On 22nd August, Politico reported on the Norwegian DPA\u2019s hard stance on blocking the future transfers of personal data by Facebook to the USA by imposing dissuasive fines<\/a>. According to Politico, in essence, the DPA seeks the implementation and enforcement of the Schrems II<\/em> ruling. Their comments come in response to the draft decision adopted by the Irish DPC in July which orders Meta\/Facebook to stop transferring data to the USA on the basis of Standard Contractual Clauses (SCCs). Whereas the Irish DPC seeks to block the data transfers, it does not mention imposing a fine, which the Norwegian DPA pushes for in order to sanction the US giant for its past violations of the GDPR. As Politico mentions, the final decision of the Irish DPC might still take months and in the meantime a new Commission adequacy decision might be adopted in 2023, which might enable the transfers of personal data from the EU to the USA and which may be relied on by Facebook in the future instead of SCCs.<\/span><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

– EDPB Accor SA Dispute Resolution Decision Published – On 17th August, the EDPB published […]<\/p>\n","protected":false},"author":144,"featured_media":0,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","dpi-category":[],"dpi-tag":[],"class_list":["post-72376","dpi","type-dpi","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi\/72376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi"}],"about":[{"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/types\/dpi"}],"author":[{"embeddable":true,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/users\/144"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/comments?post=72376"}],"version-history":[{"count":0,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi\/72376\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/media?parent=72376"}],"wp:term":[{"taxonomy":"dpi-category","embeddable":true,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi-category?post=72376"},{"taxonomy":"dpi-tag","embeddable":true,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi-tag?post=72376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}