PrivacyPod

We start this year of PrivacyPod with a recap of recaps of year 2022. Milla and Hannes Saarinen (from our Finnish podcast) go head-to-head on a quirky quiz drawn up by Panu. I have a bad feeling about this. Milla and Hannes will be scratching their heads on terms like "privacy zuckering" as well as trying to once again remember what was Privacy Shield 2.0 all about. And of course, Panu makes few m...

There's no such thing as too much talk about Schrems II, right? Tune in for our talk with the absolute expert on this topic, Eduardo Ustaran. We discuss the current state of international data transfers and when we can expect the new transfer deal to be finalized.   Eduardo tells us his learnings from assessing third country privacy laws: every country has some sort of surveillance regime in place...

Time for another Case Corner with Joost Gerritsen! What's been cooking in the CJEU, you ask? We're here to tell you! In this extra-long episode we discuss Digi, concerning the use of personal data in testing environments and whether that can be considered compatible use. Also on our list a few upcoming decisions - AG Decision on Österreichische Post regarding data protection damages, the pending l...

In this episode, Milla and Pilvi are pressing play on their inner gamers as today's guest, Jussi Honkasalo, Senior Legal Counsel and DPO at Rovio (the home of the legendary Angry Birds), gives us a let's play tour around the privacy of mobile games. (Ok, did we get any previous gaming sayings right?)  We discuss, for example, how is it possible to build a global mobile game in the jungle of differ...

This week we discuss the latest developments in ad tech privacy with Peter Hense. Peter is a partner at Spirit Legal, where he specializes in data privacy litigation, particularly in the area of advertising technology. In this episode we cover the Danish DPA's guidance on Google Analytics as well as CNIL's guidance on using proxy servers as a supplementary measure to combat Schrems II issues.   Al...

We're back from our summer break! This week on the podcast we discuss privacy and security issues in in-app browsers. Many apps do some tracking, but TikTok seems to win the price this time around on being the most intrusive social media app in this regard. Panu and Milla are disagreeing on what level of concerned one should be about this. We also discuss the Finnish Prime Minister's party scandal...

Dear listeners - technology is not neutral. That's the premise of the book from our this week's guest, Stephanie Hare.   In this episode, Stephanie shares with us her insights on technology ethics. Sure, privacy is an important part of ethical design, but what else does it entail? And who bears the responsibility for raising their voice, when something doesn't seem right?   More on Stephanie and h...

You know what the title means - we have Joost Gerritsen back on board with us! What we intend to be a regular section on the podcast, we delve again into the intricacies of CJEU case law. On the menu this week:   CJEU judgments:   X, Z v Autoriteit Persoonsgegevens – C-245/20 – 24 March 2022 -  https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX:62020CJ0245 G.D. v The Commissioner of the Gar...

In this week's episode, be prepared to experience moral outrage on so many fronts. We cover the Verisure scandal from Sweden with employees snooping on security camera footage, another big fine from the Netherlands and lots more. Also in this episode: should you quit your job, move to Germany, and start filing for privacy damages left and right to make a living? And is EU Courts streaming their ju...

We have a new data transfer deal between the EU and the US! In principle. What does the announcement of an agreement "in principle" mean, when can we expect an actual deal, and what does this mean for transfers of personal data to the US right now? Can we stop doing transfer impact assessments altogether? In other news, we cover Meta's 17MEUR fine from Ireland, and have a quick look at the recent...

This week we discuss the upcoming privacy cases in the highest court of the EU, and have an amazing guest with us for this purpose, Joost Gerritsen! Beware listeners, this episode is probably our nerdiest (and longest, since Milla doesnt understand editors hints) one so far, so even more awesome than our usual content – that's also why we made it extra-long. Joost is an AI, robotics, and data prot...

This week's guest star is Karolina Iwańska, who works as a lawyer and researcher at Panoptykon Foundation, a Polish NGO fighting for freedom and privacy in the digital age. Panoptykon was one of the organizations bringing the IAB TCF case to the Belgian data protection authority, and we had the pleasure of hearing Karolina's insights on litigating the case, and her views on how this will affect th...

This week we discuss the broader implications of online tracking with Arnold Roosendaal, who works as a director at Privacy Company in the Netherlands. Roosendaal showed the world in 2011 how Facebook Like button is used across the internet to track also non-Facebook users. Since then he has done extensive work in highlighting the societal effects of online tracking, and how it impacts our individ...

We hope everyone had relaxing holidays, because the year has not started slow in the world of privacy! In this week's episode we talk about all the development around Google Analytics and the GDPR – the Austrian DPA being the first national data protection authority to indicate that the use of the tool breaches the GDPR and the Schrems II judgment. In other news we look at the European Data Protec...

New episode out! This week we discuss the much awaited decision from the Dutch data protection authority on the lawfulness of the IAB Transparency and Consent Framework – or at least the bits of the draft decision that have reached us so far. Does the DPA's interpretation that IAB would be acting as a joint controller make any sense? Does following the TCF rules result in a lawful consent? And wha...

Ransomware is an ever growing issue in the world of cyber security and privacy. More and more organisations face severe repercussions on malicious attacks by different professional groups. In  this   episode   we   take  a  bit  of a side  step  and  discuss   ransomware   attacks with an absolute legend , Quentyn  Taylor,  Head  of  Information Security at Canon EMEA. Quentyn accounts how ransomw...

You can sigh in relief, the past week was slower on privacy news front and we did our best to keep it short! We continue the discussion on Facebook View glasses as the news came last week from both the Italian as well as the Irish data protection authorities that they are looking into privacy issues related to the glasses. We marvel at AWS delivering early the updates required by the new Standard...

This week we discuss at length Facebook launching "Ray-Ban Stories" – cool-looking sunglasses, but just slightly on the creepy side when it comes to privacy. It was also reported last week that Facebook is able to read your Whatsapp messages, but at closer scrutiny the story isn't as straight-forward as that. And lastly, in the light of the messages coming from the UK on updating their privacy rul...

In this week's episode we discuss a much awaited decision – Irish Data Protection Commissioner's first fine against big tech. In an attempt to at least scrape the surface, we cover what the decision against Whatsapp was all about, and what is to be expected going forward. In other news we are tentatively positive about Cloudflare's updates in their global data processing practices and big fans of...

That time of the week again, a new episode of PrivacyPod is out! This week we discuss UK's confusing messages on their plans to update their privacy legislation and what this means for the UK adequacy. Also in the news the usual suspects: Google bringing privacy updates for Android, Apple being after all not so transparent with regard to how they have been combatting CSAM in the past, and COPPA vi...

In this week's episode we delve deep into a report from the EDPB on data protection authorities' resources. We look behind the numbers and graphs and explain what the report tells us about the state of privacy in the EU. Other than that, it's the usual stuff: Facebook not being transparent, ICO being awesome in providing guidelines to companies and a couple of weird and wonderful decisions from ar...

The trio is back together after a summer break! Can't say fresher than ever, but at least we are back. As per usual, big tech is providing lots to discuss in the field of privacy: we cover Apple's controversial plans to prevent CSAM, Luxembourg DPA's record GDPR fine against Amazon and Google's new child friendly measures in image search. We have a new jingle for NOYB-related news, because it seem...

PrivacyPod awakens from its summer slumber for an episode of the latest news in the privacy-verse. It should be no surprise to anyone that summer usually means big privacy news. This year around we haven't (luckily) received any new ground-breaking, privacy-world-shattering rulings from the highest court in the EU, but that doesn't mean there isn't other important stuff to cover. Listen in for our...

Hot off the press! In this week's episode we go through our very first reactions to EDPB's final recommendations on supplementary measures, the most awaited document of this year. Is it risk based approach now, or not so much? We also chat about UK's adequacy decision and reflect upon how the new standard contractual clauses should be viewed in the current landscape of international data transfers...

Welcome to another episode of PrivacyPod, this week with our resident cookie monster Heikki Tolvanen and Milla Keller. Heikki is excited about ice hockey (Milla is not), Milla is excited about the new SCCs (Heikki is not). We discuss German data protection authorities joint efforts in auditing Schrems II compliance, a class action against TikTok in the Netherlands, and Garante's blocking of the co...