Privacy Ticker November 2021

The November issue of our Privacy Ticker deals with changes in Legislation, the current case law, regulatory investigations and enforcement actions, and opinions.

Topics in this issue are:

Case Law

• EU Parlament positions itself with regard to the Digital Markets Act

Case Law

• ECJ reviews SCHUFA-scoring
• Regional Court of Frankfurt: technically defective cookie banners are a breach of competition law
• Regional Court of Krefeld: no GDPR claim in the event of legal abuse
• Regional Court of Munich on the obligation to provide information under the GDPR: electronic information via a link is sufficient
• Administrative Court of Hannover: query of date of birth in order process unlawful
• Administrative Court of Wiesbaden: data subject has right to intervene against Data Protection authority

Regulatory investigations and enforcement actions

• Italian Data Protection Authority launches investigation after hacker attack
• Fine imposed by the Dutch Data Protection Authority for insufficient data security at airline
• Fine imposed by the Polish Data Protection Authority due to inadequate reporting of a data breach

Opinions

• Federal commissioner for data protection and freedom of information: implementation of 3G at the workplace "defective"
• Bavarian Data Protection Authority: collection of FAQs on the processing of 3G/2G data at the workplace 
• Data protection conference: resolution on the processing of the "vaccination status" date at the workplace

The Privacy Ticker is available for download in the section below or here.