CJEU confirms that competitors can sue each other for GDPR infringements
A German pharmacy sued another pharmacy for failing to guarantee explicit consent when processing the health data of the clients as prescribed under GDPR. The German Court held that such activity does amount to unfair and unlawful practice. However, the Court was unsure whether the national legislation, which allows a competitor to bring legal proceedings against the person allegedly responsible for infringements of the GDPR on the basis of the prohibition of unfair commercial practices, is consistent with that regulation.
In its opinion, the CJEU expresses that the GDPR does allow competitors of the person allegedly responsible for an infringement of the laws protecting personal data to bring legal proceedings against that person, for infringements of that regulation, on the basis of the prohibition of unfair commercial practices.
Access via link: https://www.linkedin.com/posts/vietnam-data-protection_cjeu-press-release-no-15924-activity-7252867879895740418-g4A4?utm_source=share&utm_medium=member_desktop
PrivacyCompliance prides itself on its team of experts having achieved numerous internationally recognized certifications such as CIPM, CIPP/E, CISA, CISM, CRISC®, ISO27001 Lead Auditor, etc. With tried-and-tested knowledge and capacity, PrivacyCompliance is confident in being able to provide in-depth and comprehensive solutions on personal data compliance and protection.
EDPB’s Guidelines on Legitimate Intesrest
EDPB’s Guidelines on Legitimate Intesrest Recently, the European Data Protection Board (“EDPB”) adopted Guidelines 01/2024 on processing of personal data based on Article 6(1)(f) GDPR (processing based on legitimate interest). Legitimate interest is one of the lawful grounds on which personal data can be processed. Its flexible nature makes it quite hard to actually apply […]
Learn more
Can data subjects be data controllers?
Can data subjects be data controllers? With the rise of AI trained on user data, the question of whether data subjects be considered data controllers for the personal data in their AI prompts and outputs has once again taken the spotlight. This is not a new issue, the possibility of the data subjects acting as […]
Learn more
The draft Personal Data Protection Law has officially been released for public consultation
HOT NEWS The draft Personal Data Protection Law has officially been released for public consultation! The draft Personal Data Protection Law has proposed regulations on the protection of personal data and the responsibilities of relevant agencies, organizations, and individuals in protecting personal data. Additionally, the draft Personal Data Protection Law is expected to apply to: […]
Learn more