Please disable your adblock and script blockers to view this page

European parliament found to have broken EU rules on data transfers and cookie consents


The European Union’s
the European Parliament
The European Data Protection Supervisor’s
Ecolog
EDPS
Google Analytics
Stripe —
EU
CJEU
the EU-US Privacy Shield
the European Data Protection Board
Facebook
NSA
the Irish Data Protection Commission
Facebook Pages
the Court of Justice
the European Union
TechCrunch
OpenStreetMap
Twitter
Vimeo
Youtube
CNIL
the General Data Protection Regulation
DPA’s
no’
Facebook Connect
comingFacebook


Schrems II
Stripe
Ecolog
Max Schrems
Snowden
Forrester —


COVID-19
European
Europeans
French
German


EDPS’
Europe


the Brussels International Airport


US
EU
EDPS’
Google Maps
Instagram
save’
France
UK
Ireland

No matching tags

Positivity     36.00%   
   Negativity   64.00%
The New York Times
SOURCE: https://techcrunch.com/2022/01/10/edps-decision-european-parliament-covid-19-test-website/
Write a review: TechCrunch
Summary

tl;dr: EU banhammers are, gradually, falling.Europe’s top court strikes down flagship EU-US data transfer mechanismIn another finding against the parliament, the EDPS took issue with confusing cookie consent notices shown to visitors to the test booking website — which it found provided inaccurate information; did not always offer clear choices to reject third party tracking; and included deceptive design which could manipulate consent.By contrast, EU law on consent as a legal basis to process people’s data requires is clear that choice must be informed, specific (i.e. purpose limited, rather than bundled) and freely given.The parliament was also found to have failed to respond adequately to complainants requests for information — breaching additional legal requirements law which provide Europeans with a suite of access rights related to their personal data.While the parliament has landed in the embarrassing situation of being reprimanded by the EDPS, it has avoided a fine — as the regulator only has narrow powers to issue financial penalties which it said these infringements did not trigger.But the findings of fault by the bloc’s chief data protection supervisor draw fresh red lines around routine regional use of US-based tools like Google Analytics (or, indeed, Facebook Pages) in the wake of the Schrems II decision by the Court of Justice of the European Union.Copypasting code with standard analytics calls might seem like a quick win to a website builder — but not if the entity responsible for safeguarding visitors’ information fails to properly assess EU-based legal risk.The EDPS’ reprimand for the parliament thus has wider significant as it looks likely to prefigure a wave of aligned decisions by EU regulators, given the scores of similar complaints filed by noyb in August 2020 targeting websites across the bloc.“We expect more rulings on this matter in the next month,” noyb’s honorary chairman, Max Schrems, told TechCrunch.

As said here by Natasha Lomas