EU/UK Privacy & Cybersecurity News Roundup ' Week Of July 17, 2023

• Published date: 19 July 2023
• Subject Matter: Privacy, Technology, Data Protection, Privacy Protection, Security
• Law Firm: Goodwin Procter LLP
• Author: Lore Leitner, Gretchen Scott and Curtis McCluskey

Data privacy case law and legislation is constantly updated in the United Kingdom and European Union to address key issues. In order to track the latest developments, we have set out a brief overview of case law updates, legislation, guidance and news.

Case Law Updates and Fines

• On 7 July, the Supreme Administrative Court published its decision in Case No. 5515-21, as issued on February 6, 2023, in which it rejected the appeal of the Uppsala Municipality to carry out surveillance under the Camera Surveillance Act, following an appeal by the Swedish Authority for Privacy Protection. Read the decision here.
• On 11 July, the Bavarian data protection authority published a statement addressing the question of whether the Court of Justice of the European Union's preliminary ruling in case C-34/21 Principal Staff Committee for Teachers at the Hessian Ministry of Education v Hessian Ministry of Education, issued on March 30, 2023, has an impact on Bavarian personnel file law. The statement concludes that the ruling has no direct effect on the latter. Read the statement in German here.

Legislation

• On 4 July, in Czech Republic, the National Office for Cyber and Information Security announced that it had extended the deadline for submitting comments on the draft law on cybersecurity in response to requests for additional time. Read the press release in Czech here.
• On 5 July, the Irish Council for Civil Liberties, together with Digital Rights Ireland, submitted a comprehensive list of amendments for the An Garda Síoch'na (Recording Devices) Bill to legislators. Read the press release here.
• On 1 July, in Slovakia, Act No. 189/2019 Coll., which, among others, amends Act No. 54/2019 Coll. on the Protection of Whistleblowers, was passed on May 10, 2023, and came into effect on July 1, 2023, with some postponed provisions effective from September 1, 2023. Read the Amendment Act here and here, both in Slovak.

Guidance & Draft Guidance

• On 7 July, the CNIL published recommendations on personal data sharing by APIs. Read the press release here and the recommendation here, both in French.
• On 11 July, the Spanish data protection authority published an updated guide on the use of cookies to align it with the Guidelines 03/2022 on deceptive design patterns issued by the European Data Protection Board in February 2023. Read the press release here and the updated guide here, both in Spanish.
• On 13 July, Datatilsynet expanded its guidance on the right to erasure from search...