The November issue of our Privacy Ticker deals with changes in Legislation, the current case law, regulatory investigations and enforcement actions, and opinions.

Topics in this issue are:

Case Law

• EU Parlament positions itself with regard to the Digital Markets Act

Case Law

• ECJ reviews SCHUFA-scoring
• Regional Court of Frankfurt: technically defective cookie banners are a breach of competition law
• Regional Court of Krefeld: no GDPR claim in the event of legal abuse
• Regional Court of Munich on the obligation to provide information under the GDPR: electronic information via a link is sufficient
• Administrative Court of Hannover: query of date of birth in order process unlawful
• Administrative Court of Wiesbaden: data subject has right to intervene against Data Protection authority

Regulatory investigations and enforcement actions

• Italian Data Protection Authority launches investigation after hacker attack
• Fine imposed by the Dutch Data Protection Authority for insufficient data security at airline
• Fine imposed by the Polish Data Protection Authority due to inadequate reporting of a data breach

Opinions

• Federal commissioner for data protection and freedom of information: implementation of 3G at the workplace "defective"
• Bavarian Data Protection Authority: collection of FAQs on the processing of 3G/2G data at the workplace 
• Data protection conference: resolution on the processing of the "vaccination status" date at the workplace

The Privacy Ticker is available for download in the section below or here.