Sign in Subscribe

Latest

Wirtschaftsakademie: When a Facebook Page Creates Joint Control

Wirtschaftsakademie: When a Facebook Page Creates Joint Control

Receiving anonymous audience statistics does not put a page administrator outside data protection law. In Wirtschaftsakademie, the CJEU explained why helping shape the processing behind Facebook Insights could make an administrator a joint controller—even without access to visitors’ personal data.

Can Laboratories of Democracy Innovate the Way to Privacy Protection?

Can Laboratories of Democracy Innovate the Way to Privacy Protection?

Written months before California voters qualified the initiative that became the CCPA, Joanne McNabb's prescient essay anticipated the debates that would reshape U.S. privacy law. Today, it offers a remarkable window into the thinking that helped launch the modern privacy movement.

Nowak: When an Exam Answer Becomes Personal Data

Nowak: When an Exam Answer Becomes Personal Data

Nowak explains when information “relates to” a person under EU data protection law. The CJEU held that exam answers and examiner comments can be personal data and established the influential content, purpose, or effect test for determining when information is linked to an individual.

Breyer: When an IP Address Becomes Personal Data

Breyer: When an IP Address Becomes Personal Data

Breyer asks when information becomes personal data even though the controller cannot identify the person on its own. The CJEU held that a dynamic IP address may be personal data where the controller has legal means reasonably likely to be used to identify the individual.