DPA guidance

EDPB publishes Standardised Messenger Audit

EDPB publishes Standardised Messenger Audit

audit, DPA guidance, EDPB, EU law, GDPR, messaging apps |

The EDPB initiated the Standardised Messenger Audit project within the Support Pool of Experts program, prompted by the German Federal Data Protection Authority (DPA). Completed in November 2023 by Prof. Mathieu Cunche, the project developed a detailed test catalogue for GDPR-compliant messenger services. This catalogue, structured around GDPR requirements, assists data protection authorities and companies in evaluating and enhancing data privacy measures in messaging applications used for both personal and business communication.

EDPB publishes Standardised Messenger Audit Read More »

The Nordic Data Protection Authorities, led by Denmark's Datatilsynet, released guidelines to protect children's data in online gaming. This document emphasizes four key GDPR principles: fairness, transparency, data minimization, and accountability. It aims to guide game developers in ensuring responsible data practices, highlighting the special protections required for children's personal data. These guidelines were formulated in response to the growing digital gaming industry and the need for enhanced privacy measures for young players.

Nordic DPAs Publish Guidance to Strengthen Children’s Data Protection in Online Gaming

children, DPA guidance, EU law, GDPR, Guideline |

The Nordic Data Protection Authorities, led by Denmark’s Datatilsynet, released guidelines to protect children’s data in online gaming. This document emphasizes four key GDPR principles: fairness, transparency, data minimization, and accountability. It aims to guide game developers in ensuring responsible data practices, highlighting the special protections required for children’s personal data. These guidelines were formulated in response to the growing digital gaming industry and the need for enhanced privacy measures for young players.

Nordic DPAs Publish Guidance to Strengthen Children’s Data Protection in Online Gaming Read More »

CNIL launches new public consultation on practical guidelines for developing AI systems

CNIL launches new public consultation on practical guidelines for developing AI systems

AI, CNIL, DPA guidance, EU law, GDPR |

The CNIL launched a second public consultation on developing AI systems, releasing new practical guides and a questionnaire to help professionals balance innovation with privacy rights. These “AI how to sheets”, available for consultation until 1 September 2024, cover key issues like web scraping, open-source models, and data subjects’ rights. This follows initial recommendations published in April 2024, aiming to clarify GDPR application to AI.

CNIL launches new public consultation on practical guidelines for developing AI systems Read More »

CNIL’s Recommendations on GDPR Compliance for AI Systems

CNIL’s Recommendations on GDPR Compliance for AI Systems

AI, CNIL, DPA guidance, EU law, GDPR |

On 7 June 2024 CNIL released the English translation of its recommendations for applying GDPR to AI system development (published in April), addressing the misconception that GDPR hinders AI innovation. These guidelines – “AI how-to Sheets” 1 to 7 – emphasize responsible handling of personal data, essential for model training. Key aspects include defining a clear objective for AI systems, determining responsibilities, establishing a legal basis for data processing, ensuring lawful data reuse, minimizing data usage, setting data retention periods, and conducting Data Protection Impact Assessments (DPIAs).

CNIL’s Recommendations on GDPR Compliance for AI Systems Read More »

Netherlands DPA Issues Guidance on Social Media Use in Education

Netherlands DPA Issues Guidance on Social Media Use in Education

DPA guidance, GDPR, Netherlands, social media |

Dutch Data Protection Authority (AP) has advised educational institutions to use social media only if clear agreements are made with social media companies regarding the handling of student and teacher data. The AP highlighted significant risks associated with social media, emphasizing the need for transparent data handling and consent procedures. Institutions must ensure compliance with GDPR and prioritize data protection.

Netherlands DPA Issues Guidance on Social Media Use in Education Read More »

Scroll to Top