Hackers exploit 7-Eleven’s poorly designed password reset function to make unwanted charges on 900 customers’ accounts. https://www.zdnet.com/article/7-eleven-japanese-customers-lose-500000-due-to-mobile-app-flaw/#ftag=RSSbaffb68
Hamburg Data Protection Authority: Requirements for the representative in accordance with Art. 27 GDPR
ICO: Intention to fine British Airways £183.39m under GDPR for data breach
Background on British Airways breach (Magecart, malicious javascript)
Background on British Airways breach in 2018
https://www.riskiq.com/blog/labs/magecart-british-airways-breach/
Stellungnahme des Hessischen Beauftragten für Datenschutz und Informationsfreiheit zum Einsatz von Microsoft Office 365 in hessischen Schulen
Zulässigkeit der Transkribierung und Auswertung von Mitschnitten der Sprachsoftware “Alexa” durch Amazon
Wissenschaftliche Dienste, Deutscher Bundestag
https://www.bundestag.de/resource/blob/650728/3f72e6abc1c524961e5809002fe20f21/WD-10-032-19-pdf-data.pdf
Research Service of the German Bundestag reviews the lawfulness of transcribing and evaluating recordings of Amazon’s Smart Assistant Alexa.
Summary in English by Dr. Piltz https://www.linkedin.com/pulse/opinion-research-service-german-parliament-amazon-alexa-piltz/
Report: A Day in the Life of Data
highlights how technology enables online and offline tracking of consumers with greater precision, volume and velocity than ever before.
From this data companies can infer everything from personality, health status, and political affiliations, through to even our mood.
https://cprc.org.au/publication/research-report-a-day-in-the-life-of-data/
Austrian Supreme Court grants model law suits against Facebook
https://noyb.eu/news-update-3/
” Before doing so, Facebook tried to raise questions whether it is possible to bring GDPR rights before the courts. The company argued that only the Irish Data Protection Commissioner has jurisdiction in this case. The Vienna Regional Court (“Landesgericht”) had previously joined Facebook’s view and declared that it did not have jurisdiction. The Appellate Court and the Austrian Supreme Court have made it clear now that – to the contrary – everyone has a right to file a lawsuit based on GDPR. “
Data quality and artificial intelligence (AI) – mitigating bias and error to protect fundamental rights
Zulässige Speicherfrist bei Bewerberdaten nach Abschluss des Bewerbungsverfahrens
Sieben Monate nach Abschluss des Verfahrens
https://www.dataprotect.at/2019/06/10/zul%C3%A4ssige-speicherfrist-bei-bewerberdaten-nach-abschluss-des-bewerbungsverfahrens/