54 min listen
Episode 8: Third Party Cookies - ECJ lays down new rules in Fashion ID case
FromGDPR Now!
ratings:
Length:
18 minutes
Released:
Sep 17, 2019
Format:
Podcast episode
Description
In the Fashion ID case, the European Court of Justice decides that website owners are now joint controllers with the provider of the third-party cookie, and that website owners are responsible for issuing the privacy notices for third party cookies and for collecting any consents that are required. And, to make things a bit more complicated, the ECJ comes up with a new approach to analysing the data journey and who is the controller! All this and more in this episode of GDPR Now!
GDPR Now! Is brought to you by This Is DPO.
www.thisisdpo.co.uk.
Host
Mark Sherwood-Edwards
info@thisisdpo.co.uk
Materials
You can try ADL Consulting’s "Introduction to Cyber Security" module for free here:
https://adlconsulting.teachable.com/p/an-introduction-to-cyber-security
Fashion ID
ECJ Judgement: http://curia.europa.eu/juris/document/document.jsf;jsessionid=CF6549B82743BAC9782DB7D41AD478DF?text=&docid=216555&pageIndex=0&doclang=en&mode=lst&dir=&occ=first&part=1&cid=14417748
Advocate General’s Opinion:
http://curia.europa.eu/juris/document/document.jsf?text=&docid=209357&pageIndex=0&doclang=en&mode=lst&dir=&occ=first&part=1&cid=14418147
Related documents
Update Report Into Adtech And Real Time Bidding, ICO. https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2019/06/blog-ico-adtech-update-report-published-following-industry-engagement/
Guidance On The Use Of Cookies And Similar Technologies, ICO. https://ico.org.uk/for-organisations/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies/
Délibération N° 2019-093 Du 4 Juillet 2019 Portant Adoption De Lignes Directrices Relatives À L'application De L'article 82 De La Loi Du 6 Janvier 1978 Modifiée Aux Opérations De Lecture Et Écriture Dans Le Terminal D'un Utilisateur (Notamment Aux Cookies Et Autres Traceurs), CNIL. https://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFTEXT000038778053&dateTexte=&categorieLien=id
Opinion 5/2019 On The Interplay Between The Eprivacy Directive And The Gdpr, in particular regarding the competence, tasks and powers of data protection authorities, adopted on 12 March 2019, EDPB.
https://edpb.europa.eu/sites/edpb/files/files/file1/201905edpbopinioneprivacydirgdprinterplayen_0.pdf
Questions, suggestion for improvement, ideas for issues to be covered in future episodes, or if you would like to appear one of our podcasts, please contact us at info@thisisdpo.co.uk
GDPR Now! Is brought to you by This Is DPO.
www.thisisdpo.co.uk.
Host
Mark Sherwood-Edwards
info@thisisdpo.co.uk
Materials
You can try ADL Consulting’s "Introduction to Cyber Security" module for free here:
https://adlconsulting.teachable.com/p/an-introduction-to-cyber-security
Fashion ID
ECJ Judgement: http://curia.europa.eu/juris/document/document.jsf;jsessionid=CF6549B82743BAC9782DB7D41AD478DF?text=&docid=216555&pageIndex=0&doclang=en&mode=lst&dir=&occ=first&part=1&cid=14417748
Advocate General’s Opinion:
http://curia.europa.eu/juris/document/document.jsf?text=&docid=209357&pageIndex=0&doclang=en&mode=lst&dir=&occ=first&part=1&cid=14418147
Related documents
Update Report Into Adtech And Real Time Bidding, ICO. https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2019/06/blog-ico-adtech-update-report-published-following-industry-engagement/
Guidance On The Use Of Cookies And Similar Technologies, ICO. https://ico.org.uk/for-organisations/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies/
Délibération N° 2019-093 Du 4 Juillet 2019 Portant Adoption De Lignes Directrices Relatives À L'application De L'article 82 De La Loi Du 6 Janvier 1978 Modifiée Aux Opérations De Lecture Et Écriture Dans Le Terminal D'un Utilisateur (Notamment Aux Cookies Et Autres Traceurs), CNIL. https://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFTEXT000038778053&dateTexte=&categorieLien=id
Opinion 5/2019 On The Interplay Between The Eprivacy Directive And The Gdpr, in particular regarding the competence, tasks and powers of data protection authorities, adopted on 12 March 2019, EDPB.
https://edpb.europa.eu/sites/edpb/files/files/file1/201905edpbopinioneprivacydirgdprinterplayen_0.pdf
Questions, suggestion for improvement, ideas for issues to be covered in future episodes, or if you would like to appear one of our podcasts, please contact us at info@thisisdpo.co.uk
Released:
Sep 17, 2019
Format:
Podcast episode
Titles in the series (34)
Episode 2: Subject access requests, personal data and the case of Rudd v Bridle with Ashley Winton and Laura Scaife.: Dr Rudd served a subject access request on Mr Bridle, and was not satisfied with the information he received back. Amongst allegations of fraud and conspiracy, the issue went to court. Who was the controller, and did the journalism and regulatory exemptions apply? One of the key issues was – what is personal data? The judge reached a conclusion, but was he right? by GDPR Now!