The opinion no. 477 issued on 2 August 2024 by the Italian Data Protection Authority (DPA) expresses its opinion on the Italian AI Bill “Schema di disegno di legge recante disposizione e deleghe in materiale di intelligenza artificiale” (Bill outline stating orders and authorizations on AI). Having examined the individual rules proposed in the bill […]
Category Archives: Privacy & identity
Court of Justice of the European Union: yes to damage compensation for theft of personal data from an app
On June 20, 2024, the Court of Justice of the European Union (CJEU) issued a significative decision on the right to compensation of damages caused by the breach of the General Data Protection Regulation (EU Reg. 2016/679 GDPR). The decision came from the preliminary ruling requests proposed by the Court of Munich (Amtsgericht München) in […]
Data Breach: the EU Court of Justice affirms the refundability of a non-pecuniary damage
On December 14 2023, the EU Court delivered a preliminarily judgement on case C-340/21 upon request of the Bulgarian Supreme Court, stating that the infringement of the principles established by the GDPR entails the compensation for the damages, also non-material ones, suffered by the interested party. Therefore, in case of data breach, the controller of […]
Italian DPA’s fines: the Supreme Court of Italy clarifies the highest limits
With decision of September 22nd 2023, no. 27189, the Italian Supreme Court of Cassation stated that quantifying the pecuniary administrative fine based on the average percentage applied in similar cases it’s a violation of the GDPR, which, on the contrary, imposes to quantify the amount of the fine based on the circumstances of the specific […]