Introduction to Thailand’s Personal Data Protection Act (PDPA)
by Norravich Limpanukorn*// A rapid development of information technology has raised concerns in society across the globe, especially regarding data, as things in the current era are data-driven. The European regional interaction to this issue resulted in a landmark regulation…
CJEU: a “Controller” does not need to have legal personality and legal capacity
by Dr. Gerald Trieb and Viktoria Kovacs// The European Court of Justice (CJEU) recently ruled on a case relating to Austria: The CJEU had to decide on the question referred by the Austrian Supreme Administrative Court (“VwGH”) as to whether or not a Tyrolian State Law designating the…
CJEU lost in translation: the Right to Information on Automated Decision-Making (Dun & Bradstreet Case)
by Dr. Gerald Trieb and Theodor Paul Mach-Walter// In the proceedings submitted from Austria, the CJEU had to decide how the right to obtain information by a data subject whose data has been processed using automated decision-making must be fulfilled…
New EDPB guidelines on legitimate interest
by Jan Horstmann// On 8 October 2024, the European Data Protection Board (EDPB) issued guidelines on the processing of personal data on the basis of a legitimate interest in accordance with Art. GDPR Article 6(1)(f) GDPR for public consultation (the…
CJEU and the Powers of EDPB
/by Christina Etteldorf/ It is not only due to its beautiful landscapes but also because of its attractive legal framework for businesses compared to other EU Member States that Ireland has become the location of choice for some of the…
What is AI? According to EU AI Act
by Tea Mustac// Since the 2nd of February was set as the deadline for the applicability of the first provisions of the AI Act, it might be useful to take a look at one of the Act’s most essential provisions.…
Conflicts of interest for Data Protection Officers (DPO)
by Dr. Patrick Grosmann, M.A.// I. Introduction In the data protection organization, the DPO plays a central role as an internal control body. At the same time, this central figure faces various potential conflicts of interest. Some conflicts (regarding the…
CJEU again confronted with Meta – Permissible extent of data use for advertising
by Dr. Gerald Trieb and Jennifer Salomon// The CJEU once again had to deal with questions concerning details on the processing of personal data on the social media platform Facebook. Meta collects data either on or outside the social media…
Instagram’s new Measures – preventive or pre-emptive?
by Sarah von Hoyningen-Huene, Jutta Oberlin// 1. Introduction Instagram, one of the world’s most popular social media platforms and part of the social media giant Meta, is constantly evolving to meet the changing needs of its users and adapt to…
Ireland’s Data Protection Commission Launches Inquiry into Google’s AI Model
by Matthias Horn// The rapid advancement of artificial intelligence products has brought with it a host of legal and ethical challenges. In a significant development, Ireland’s Data Protection Commission (DPC) has launched an inquiry into Google’s AI model, focusing on…