In this newsletter you will find three essential briefing notes: from the Data Act and its practical implications, the new AEPD report on biometrics in access control, to the judicial validation of the EU-US Data Privacy Framework.
Three key legal issues in data and privacy: the impact of the Data Act, the new AEPD guidelines on biometrics and the judicial validation of the EU-US Data Privacy Framework.
The General Court of the European Union has upheld the EU-US Data Privacy Framework, consolidating its use as a legal basis for international transfers. However, warnings from European authorities and institutional fragility in the US keep doubts about its future alive.
The Data Act marks a turning point in Europe's digital economy by ensuring fair access to data generated by connected devices, prohibiting unfair terms, facilitating cloud portability and protecting information from illegitimate requests from third countries.
The Spanish Data Protection Agency has published a report that marks a turning point in its criteria, recognising that biometrics can be valid for access control in certain contexts, as long as enhanced security measures are applied and the principle of proportionality is respected.