PrivacyPod

That time of the week again, a new episode of PrivacyPod is out! This week we discuss UK's confusing messages on their plans to update their privacy legislation and what this means for the UK adequacy. Also in the news the usual suspects: Google bringing privacy updates for Android, Apple being after all not so transparent with regard to how they have been combatting CSAM in the past, and COPPA violations by Angry Birds.

Google's privacy updates for Android https://mobiledevmemo.com/googles-approach-to-privacy-is-att-lite/ https://cunderwood.dev/2021/07/29/privacy-changes-come-to-the-google-play-store/

Angry Birds sued over COPPA violations https://www.jurist.org/news/2021/08/new-mexico-sues-angry-birds-developer-over-child-privacy-violations/

Apple already scanning for CSAM in iCloud Mail https://9to5mac.com/2021/08/23/apple-scans-icloud-mail-for-csam/

UK's plans for privacy overhaul https://www.theguardian.com/technology/2021/aug/26/uk-to-overhaul-privacy-rules-in-post-brexit-departure-from-gdpr?CMP=fb_a-technology_b-gdntech https://www.gov.uk/government/news/uk-unveils-post-brexit-global-data-plans-to-boost-growth-increase-trade-and-improve-healthcare

Belgian Court rules on use of American cloud https://www.linkedin.com/posts/luisalbertomontezuma_belgian-conseil-detat-aws-schrems-activity-6837178667035111424-2rcw/

European Commission: EU policy does not require localization of data https://www.europarl.europa.eu/doceo/document/E-9-2021-002521-ASW_EN.pdf

In this week's episode we delve deep into a report from the EDPB on data protection authorities' resources. We look behind the numbers and graphs and explain what the report tells us about the state of privacy in the EU.

Other than that, it's the usual stuff: Facebook not being transparent, ICO being awesome in providing guidelines to companies and a couple of weird and wonderful decisions from around Europe.

EDPB report: Overview on resources made available by Member States to the Data Protection Authorities and on enforcement actions by the Data Protection Authorities

https://edpb.europa.eu/system/files/2021-08/edpb_report_2021_overviewsaressourcesandenforcement_v3_en_0.pdf

China's new privacy law

https://www.reuters.com/world/china/china-passes-new-personal-data-privacy-law-take-effect-nov-1-2021-08-20/

ICO approved new certification schemes

https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2021/08/ico-approves-the-first-uk-gdpr-certification-scheme-criteria/

Facebook not being transparent

https://www.theverge.com/2021/8/22/22636508/facebook-releases-shelved-content-transparency-report-content-coronavirus

Clubhouse joining other social media platforms in protecting privacy in Afghanistan

https://www.theverge.com/2021/8/21/22635378/clubhouse-removes-personal-info-user-accounts-afghanistan-taliban-safety

Weird and wonderful collection of decisions

https://gdprhub.eu/index.php?title=OGH_-_6Ob56/21k&mtc=today

https://www.enforcementtracker.com/

We'd love to get feedback – so please tag us, follow us, DM us… or send us traditional email:

Twitter: https://twitter.com/PodPrivacy, #privacypod

Instagram: @privacypod

Email: [email protected]

PrivacyPod is powered by PrivacyAnt, find out more about the privacy solutions here: https://www.privacyant.com/en/

The trio is back together after a summer break! Can't say fresher than ever, but at least we are back. As per usual, big tech is providing lots to discuss in the field of privacy: we cover Apple's controversial plans to prevent CSAM, Luxembourg DPA's record GDPR fine against Amazon and Google's new child friendly measures in image search. We have a new jingle for NOYB-related news, because it seems there is something new coming from their direction on a weekly basis now. Panu tries to launch the concept of correction corner, the others are not huge fans of this idea.

Finnish draft cookie guidelines

https://www.lausuntopalvelu.fi/FI/Proposal/Participation?proposalId=5450870c-1703-49e6-b48c-f89bb6ca3319

746 million euro fine against Amazon

https://techcrunch.com/2021/07/30/eu-hits-amazon-with-record-breaking-887m-gdpr-fine-over-data-misuse/

Apple's new measures to prevent CSAM

https://www.theverge.com/2021/8/10/22613225/apple-csam-scanning-messages-child-safety-features-privacy-controversy-explained

https://www.apple.com/child-safety/pdf/Expanded_Protections_for_Children_Frequently_Asked_Questions.pdf

Google providing minors the possibility to have images removed from Google Image results

https://blog.google/technology/families/giving-kids-and-teens-safer-experience-online/

NOYB's cookie complaints from June proceeding

https://noyb.eu/en/news-sites-readers-need-buy-back-their-own-data-exorbitant-price

NOYB's quest to prevent cookie paywalls

https://noyb.eu/en/news-sites-readers-need-buy-back-their-own-data-exorbitant-price

Hamburg DPA says NO to Zoom

https://datenschutz-hamburg.de/pressemitteilungen/2021/08/2021-08-16-senatskanzlei-zoom

Weird and wonderful collection of decisions from GDPR Enforcement Tracker

https://www.enforcementtracker.com/

We'd love to get feedback – so please tag us, follow us, DM us… or send us traditional email:

Twitter: https://twitter.com/PodPrivacy, #privacypod

Instagram: @privacypod

Email: [email protected]

PrivacyPod awakens from its summer slumber for an episode of the latest news in the privacy-verse. It should be no surprise to anyone that summer usually means big privacy news.

This year around we haven't (luckily) received any new ground-breaking, privacy-world-shattering rulings from the highest court in the EU, but that doesn't mean there isn't other important stuff to cover.

Listen in for our review of a couple of guidelines from supervisory authorities and reactions to Facebook's proceedings on various fronts regarding their use of Whatsapp data. And is there going to be and episode next week? Nobody knows.

Recommended IAPP webinar on one-year post Schrems reflections

https://iapp.org/news/video/linkedin-live-schrems-ii-a-year-on/

EDPB urgent binding decision on Facebook

https://edpb.europa.eu/news/news/2021/edpb-adopts-urgent-binding-decision-irish-sa-not-take-final-measures-carry-out_en

BEUC – European consumer organization's complaint over Whatsapp privacy changes

https://www.reuters.com/technology/whatsapp-targeted-eu-consumer-complaints-over-privacy-changes-2021-07-12/

Cookie guidelines Finland

https://www.lausuntopalvelu.fi/FI/Proposal/Participation?proposalId=5450870c-1703-49e6-b48c-f89bb6ca3319

Decision from Finnish DPA – first cross-border case in Finland

https://tietosuoja.fi/-/tietosuojavaltuutettu-on-antanut-ensimmaisen-paatoksen-johtavana-valvontaviranomaisena-rajatylittavassa-asiassa-oikeutta-saada-paasy-tietoihin-ei-ollut-toteutettu-tietosuojasaannosten-mukaisesti

Finalized controller-processor guidelines from EDPB

https://edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-072020-concepts-controller-and-processor-gdpr_en

We'd love to get feedback – so please tag us, follow us, DM us… or send us traditional email:

Twitter: https://twitter.com/PodPrivacy, #privacypod

Instagram: @privacypod

Email: [email protected]

Hot off the press! In this week's episode we go through our very first reactions to EDPB's final recommendations on supplementary measures, the most awaited document of this year. Is it risk based approach now, or not so much? We also chat about UK's adequacy decision and reflect upon how the new standard contractual clauses should be viewed in the current landscape of international data transfers.

This episode features a very special guest! Panu and Milla are joined by Trevor Hughes, President and CEO of the IAPP. We talk about Trevor's career in privacy, IAPP's role in fostering the privacy profession and IAPP's return to live events this year.

Also included in the episode is a wonderful motivational speech from Trevor on what keeps him going as a privacy professional. And of course, we could not let Trevor go without going through our GDPR Quiz. Listen in for his impressive results!

EDPB's final recommendations on supplementary measures

https://edpb.europa.eu/system/files/2021-06/edpb_recommendations_202001vo.2.0_supplementarymeasurestransferstools_en.pdf

New SCCs

https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_en

We'd love to get feedback – so please tag us, follow us, DM us… or send us traditional email:

Twitter: https://twitter.com/PodPrivacy, #privacypod

Instagram: @privacypod

Email: [email protected]

Welcome to another episode of PrivacyPod, this week with our resident cookie monster Heikki Tolvanen and Milla Keller. Heikki is excited about ice hockey (Milla is not), Milla is excited about the new SCCs (Heikki is not).

We discuss German data protection authorities joint efforts in auditing Schrems II compliance, a class action against TikTok in the Netherlands, and Garante's blocking of the covid app in Italy. Listen in also for our view on the latest decision from the Finnish supervisory authority, which makes us just ask… Why?

In the episode you can also hear the poorest pep talk in human history, and the above mentioned excitement from Heikki… Well, let's just say Finnish guys express emotion in very subtle ways.

German DPAs investigate data transfers:

https://www.datenschutz-berlin.de/fileadmin/user_upload/pdf/pressemitteilungen/2021/20210601-PM-Schrems_II_Pruefung.pdf

Final version of the new Standard Contractual Clauses is ready:

https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_en

TikTok gets sued in the Netherlands:

https://www.dw.com/en/dutch-parents-sue-tiktok-for-14-billion/a-57762350

Garante blocks the Italian covid vaccine app:

https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9592623

Decision from Finnish DPA regarding a small data breach:

https://finlex.fi/fi/viranomaiset/tsv/2021/20210843

We'd love to get feedback – so please tag us, follow us, DM us… or send us traditional email:

Twitter: https://twitter.com/PodPrivacy, #privacypod

Instagram: @privacypod

Email: [email protected]

This week we are back to our regular programming with an episode packed with privacy news. Panu and Milla are reflecting upon how GDPR's birthday celebrations went last week – our baby is three years old already! Where did the time go!

Other than that, we discuss the newest wave of cookie complaints from NOYB and will wait eagerly for our third co-host Heikki's feedback on our coverage of this topic (the feedback will probably be negative). And what about those ECHR judgments on mass surveillance in Europe – puts our Schrems II discussions in a slightly awkward light, no? Listen more in the episode!

New wave of cookie complaints from NOYB

https://noyb.eu/en/noyb-aims-end-cookie-banner-terror-and-issues-more-500-gdpr-complaints

Digital Rights alliance complaint against Clearview AI

https://www.dataguidance.com/news/eu-noyb-and-other-privacy-groups-call-eu-authorities

EDPS investigations following Schrems II

https://edps.europa.eu/press-publications/press-news/press-releases/2021/edps-opens-two-investigations-following-schrems_en

European Court of Human Rights verdicts on state surveillance

https://hudoc.echr.coe.int/eng#{%22itemid%22:[%22002-13278%22]}

We'd love to get feedback – so please tag us, follow us, DM us… or send us traditional email:

Twitter: https://twitter.com/PodPrivacy

Instagram: @privacypod

Email: [email protected]

In our third episode, Panu and Milla dive deeply into the mysteries of the Doctolib case from the French courts. Thankfully, we have Michael Hopp who works as a Partner at the Copenhagen based law firm Plesner to guide us through the murky waters of international transfers.

Michael is one of the original pioneers in Nordic privacy and has extensive experience in multitude of privacy disciplines. He also teaches on the subject a lot and thus this episode is a great listen also purely as a learning experience.

What was the Doctolib case actually about and what have people misunderstood on it? Can we use cloud services again? And how fast can Michael run a half marathon? Listen in and find out!

Read into the Doctolib case here: https://iapp.org/news/a/why-this-french-court-decision-has-far-reaching-consequences-for-many-businesses/

The Norwegian guidance on Schrems II case: https://www.datatilsynet.no/aktuelt/aktuelle-nyheter-2020/sos-om-nye-regler-for-overforing/

We'd love to get feedback – so please tag us, follow us, DM us… or send us traditional email:

Twitter: https://twitter.com/PodPrivacy

Instagram: @privacypod

Email: [email protected]

Welcome to the second episode of PrivacyPod, a show about EU privacy, technology and cookies. Our regular content covers recent privacy related news, and in addition to this we feature interesting guests to hear about their career and their take on current privacy developments. PrivacyPod is hosted by Panu Pökkylä and Milla Keller.

This time we talk to privacy counsel Emina Gaspar-Vrana from Trustly Group. Emina shares her interesting work experience from many sides of privacy: from private practice to the Swedish DPA and lately at one of Europes growing fintech.

And of course Panu and Milla subject their guest to the merciless tutelage of the GDPR Quiz. How did Emina succeed in it?

We also cover some of the latest news in the word of privacy. Such as:

The Bavarian DPA orders a small German company to stop using Mailchimp over Schrems II concerns: https://edpb.europa.eu/news/national-news/2021/bavarian-dpa-baylda-calls-german-company-cease-use-mailchimp-tool_en

The European Union and the United States are pushing for intensified pace in the EU-US data transfer negotiations: https://ec.europa.eu/commission/presscorner/detail/en/statement_21_1443

European Parliament resolution on the Commission evaluation report on the implementation of the General Data Protection Regulation two years after its application: https://www.europarl.europa.eu/doceo/document/TA-9-2021-0111_EN.html

Google to bypass testing FLoC in Europe over GDPR concerns: https://www.adexchanger.com/platforms/google-will-not-run-floc-origin-tests-in-europe-due-to-gdpr-concerns/

We'd love to get feedback – so please tag us, follow us, DM us… or send us traditional email:

Twitter: https://twitter.com/PodPrivacy

Instagram: @privacypod

Email: [email protected]

Drumrolls please, PrivacyPod's first episode is out! This is a podcast about privacy, technology and cookies. Our regular content covers recent privacy related news, and in addition to this we feature interesting guests to hear about their career and their take on current privacy developments. PrivacyPod is hosted by Heikki Tolvanen, Panu Pökkylä and Milla Keller.

In this week's episode we are excited to have Tobias Bräutigam join us for a discussion on how companies are dealing with the Schrems II decision in practice. Tobias currently heads the data protection practice at Bird & Bird Finland and on top of this holds a docentur at the University of Helsinki. You can find Tobias on Twitter with the handle @PrivacyFin.

In addition to our discussion on Schrems II we're diving deep on the Deutsche Wohnen case – a puzzling court decision where the Berlin data protection authority's fine of 14.5 million euros on the company was revoked due to procedural issues.

News on Deutsche Wohnen in German: https://www.berliner-zeitung.de/mensch-metropole/deutsche-wohnen-muss-doch-keine-strafe-in-millionenhoehe-zahlen-li.141971

English news coverage on the case: https://www.dataprotectionreport.com/2021/02/deutsche-wohnen-fine-now-declared-invalid-by-a-german-court/#:~:text=Deutsche%20Wohnen%20fine%20now%20declared%20invalid%20by%20a%20German%20court,-By%20Christoph%20Ritzer&text=The%20Regional%20Court%20(Landgericht)%20of,case%20to%20the%20next%20instance.

Case summary on the original data protection authority's decision: https://edpb.europa.eu/news/national-news/2019/berlin-commissioner-data-protection-imposes-fine-real-estate-company_en

We'd love to get feedback – so please tag us, follow us, DM us… or send us traditional email:

Twitter: https://twitter.com/PodPrivacy

Instagram: @privacypod

Email: [email protected]