Weekly Privacy News Update – Episode 06

privacy news weekly update november 8 2021 featured image

European Commission to be the enforcer of DMA

Delegates of European Union (EU) countries grant the European Commission the “sole authority empowered to enforce” the planned Digital Markets Act (DMA). As included in the bloc’s mutual stance, the arrangement will be sanctioned by November 25, before the DMA passes as a law. EU antitrust chief Margrethe Vestager proposed the DMA in 2020, hoping to restrain Google, Facebook, Apple, and Amazon’s growing power with do’s-and-don’ts guidelines.

Sources: IAPPReuters

WhatsApp Ireland allowed by judge to protest EUR 225 million penalty

WhatsApp Ireland gets approval from a High Court judge to protest the EUR 225 million penalty issued by Ireland’s Data Protection Commission (DPC). This is because the messaging platform violated the transparency principles of the EU GDPR. WhatsApp disputes that the charges are invalid and unconstitutional and contradict the European Convention on Human Rights. The company contends that the hefty fine violates its constitutional property rights, and it requested the dismissal of the DPC’s ruling.

Sources: IAPPIrish Times

A Rundown from the Virginia Consumer Data Protection Workgroup

Gov. Ralph Northam (D-Va) signed into law last March 2; the Virginia Consumer Data Protection Act is expected to be enforced on January 1, 2023. A provision included in the law is the requirement of a workgroup that will review different provisions since it is expected to have amendments before it is implemented. Last November 1, the workgroup submitted its final report, which gave insight into possible amendments before the law takes effect.

Sources: IAPP, Virginia’s Legislative Information SystemVirginia.gov

Details of New Online Breach Notification Form announced by Irish DPC

Ireland’s Data Protection Commission (DPC) announce an outline of requirements for their new online breach notification form. Included in the new form are additional questions and precise options for the nature of the breach. It will direct users through a series of questions on whether the breach affects cross-border processing. Users will be able to add further details on security measures that cover those implemented before a breach, identified flaws, and actions to lessen the impact on data subjects.

Sources: IAPPData Protection Commission

500% Increase in Data Breaches in Washington State

The state of Washington encountered an increase of data breaches in 2021, based on the latest 2021 Data Breach Report from the attorney general’s office. 6.3 million data breach notices have been sent out by organizations to individuals in the state, overtaking the 3.5 million from 2018. From 60 data breaches reported to the attorney general’s office in 2021, it jumped to 280.

Sources: IAPPWashington State – Office of the Attorney General



Masha Komnenic CIPP/E, CIPM, CIPT, FIP
More about the author

Written by Masha Komnenic CIPP/E, CIPM, CIPT, FIP

Masha is an Information Security and Data Privacy Specialist and a Certified Data Protection Officer. She has been a Data Protection Officer for the past six years, helping small and medium-sized enterprises achieve legal compliance. She has also been a privacy compliance mentor to many international business accelerators. She specializes in implementing, monitoring, and auditing business compliance with privacy regulations (HIPAA, PIPEDA, ePrivacy Directive, GDPR, CCPA, POPIA, LGPD). Masha studied Law at Belgrade University, and she passed the Bar examination in 2016. More about the author

Related Articles

Explore more resources