Advisor to EU top court issues opinion on data processing for targeted advertising
05 May 24
Miljana Todorovic
Processing personal data for targeted advertising must be restricted both in terms of the duration of data retention and the type of data that can be lawfully processed, to be in line with the principle of data minimisation. Additionally, sensitive data publicly disclosed by a user of a social network outside of the platform cannot be used for targeted advertising.
US: Net neutrality returns in 3Q 2024 but for how long?
03 May 24
Jose Jehuda Garcia
The US Federal Communications Commission voted by a narrow majority to reinstate net neutrality rules repealed in 2017. The new rules will become effective during Q3 2024 but are likely to face court challenges and could be repealed again in the future.
EU cybersecurity agency event focuses on challenges related to implementing EU cybersecurity laws
29 April 24
Visiola Pula
The event touched upon concerns around compliance with the EU Cyber Resilience Act (CRA) and reporting security incidents to multiple authorities under the various pieces of EU cybersecurity legislation. Stakeholders identified as the main challenges the timely availability of EU harmonised standards and the need for sufficient notified bodies (i.e. conformity assessment bodies) to facilitate compliance with the CRA. Related to reporting obligations, they highlighted the need for efficient reporting that does not hinder incident management and recovery.
Update on EU cybersecurity certification schemes
28 April 24
Sebastian Naste
At a conference organised by the EU cybersecurity agency (ENISA), stakeholders discussed the state of play of the first EU cybersecurity certification scheme on common criteria (EUCC) recently adopted. The voluntary scheme will enter into force in February 2025. A senior representative of the European Commission gave no clear timeline for the adoption of the two other cybersecurity schemes on cloud services and 5G, where legislative negotiations are ongoing. Moreover, the Commission will formally request ENISA to start work on two new schemes for managed security services and digital wallets.
EU Digital & Media Weekly Report
28 April 24
Javier Huerta Bravo
This report gathers policy and regulatory developments at EU level covered by Cullen International’s Digital Economy and Media services during the last week. The last plenary session of the 2019-2024 European Parliament took place on 22-25 April 2024. No notable events were identified this week.
Have member states transposed the EU collective redress rules?
24 April 24
Olha Hruba
A new benchmark shows the status of transposition of the Collective Redress Directive in 17 EU countries. The research also includes information on recent collective redress actions against digital companies and telecoms providers.