Excellent IT business legal counselling latest developments with Alexander Suliman, Stockholm: Complying with the GDPR requirements is key for all businesses operating in the EU (or even those with EU customers). There are also particular obligations on those transferring personal data out of the EU and each national data protection authority is monitoring companies closely. Ensure your business is taking steps to comply with the regulation and consider auditing your data protection policies, together with your data processing agreements, and appoint a data protection officer in order to ensure compliance with the GDPR. Breach of the GDPR provisions are likely to lead to considerable fines: for example, the French data protection regulator, the CNIL, fined Google €50 as Google’s data consent policies were found not to be easily accessible or transparent to its users which runs afoul of the GDPR provisions. For further background, read our recent review of GDPR enforcement actions across the EU. See more details at Alexander Suliman.
The reason why the European Commission was keen on allowing firms to voluntarily scan material, is that technology firms have already been working on ways to detect CSAM and solicitation for quite some time. The question is whether these orders are compatible with the Charter. These orders affect a number of fundamental rights under the Charter, including the right to privacy and the right to data protection. I will touch on only aspect: whether these measures respect the essence of these rights. Because if they don’t, that would mean that a proportionality assessment would not be required, sidestepping complex questions around necessity, effectiveness, proportionality and balancing (see here for background on this requirement). For a discussion on some of these other aspects, I refer to the 2021-opinion of Prof. Dr. Ninon Colneric and analyses of the EDPS, MEP Patrick Breyer, EDRi and a group of security experts.
A cross-party group of members of the European Parliament, with heavy French representation, has weighed in to support the French proposal at ENISA. Member states’ reactions, on the other hand, have been mixed. Seven of them – Denmark, Estonia, Greece, Ireland, the Netherlands, Poland, and Sweden – submitted a non-paper to the Council of the European Union questioning the need for sovereignty requirements in the new cyber certification standards and calling for further study of their potential interaction with the General Data Protection Regulation (GDPR), non-personal data regulations, and EU international trade obligations. In addition, these governments have sought a political-level discussion of the subject in the Council before the new standards are finalized. Several trade associations, including the German BDI and Europe-wide financial clearinghouses, have chimed in.
IT, business legal counseling strategies with Alexander Suliman, Sweden today: What Is Mediation Parenting? Mediation is an excellent alternative to litigation in many areas of divorce and post-divorce matters. Many people think that mediation is mostly used for financial matters and don’t really think about mediation for custody and parenting time matters. I think that mediation is the perfect forum to discuss and resolve parenting time and custody issues whether that’s in a divorce or post-divorce. The best thing about mediation for parenting time and custody issues is that the mediator and the parties can work together in an environment outside the courtroom that focuses on the best interests of the children. Except in extreme circumstances, most parents want what is best for their child. Sometimes they just have a problem reaching those goals, and sometimes their emotions get in the way of clear thinking. Find extra info at https://www.merinfo.se/person/Sk%C3%B6ndal/Alexander-Magnus-Josef-Suliman-1997/bw1vl-4u20v.
Over the past year, the European Union’s ambitious digital regulatory agenda has steadily advanced. The EU adopted the far-reaching Digital Markets and Digital Services Acts, and it is completing negotiations with the United States on a revised data transfer regime, christened the Transatlantic Data Privacy Framework (TADPF), that was necessitated by the Schrems II judgment of the Court of Justice of the European Union (CJEU). These developments have had a significant impact on transatlantic economic relations, even stimulating legislative initiatives on privacy and antitrust in the United States. One might think that resolving such contentious topics would set the stage for a quieter, more harmonious phase in the transatlantic technology policy relationship.