Romain Robert

🚀#CPDP Data Protection Day Join #EDPS, @coe, @CPDPconferences on 28 January 2025 to hear and discuss about the role of #dataprotection in the light of new #EU political mandates ✒️Register for in-person & online participation: cpdp-dataprotectionday.eu

Découvrez mon dernier article : Interesting opinion of the AG in the Mousse case regarding the necessity for french train company to process the gender of the users linkedin.com/pulse/interest… via @LinkedIn

Congrats to Sophia Hassel and @mikarv for winning the first ever Ultimate Data protection quizz at the @CPDPconferences this week !

Join us tomorrow Wednesday in Brussels at the @CPDPconferences for the Ultimate Data protection quizz at 17.20 in the Machine Room, and win a privacy umbrella (or a data protection trempolin) cpdpconferences.org/cpdp-panels/th…

At last! It took 6 years (we filed our complaints against IAB Europe and Google in Jan 2019, as soon as #GDPR came into force!) to confirm that invasive tracking and profiling of internet users by #adtech industry is NOT LEGAL and cannot be legalised with silly "consent" pop-ups:

@gabrielazanfir I leave my thoughts as messy as possible not to be subject to GDPR

I will not be providing an Article 13 notice for my thoughts, that’s for sure. 👀

@mikarv I really think information should be the basis principle and only the legal exceptions (household, freedom of expression, difficulties to inform but with mitigating measures) should be applicable. I dont like the 'people should have known their data could be reused'

@mikarv Yes, in this case it would be an article 14.5 b situation IMO. But scrapping is another stories

@mikarv even though I still fail to see scrapping companies informing the data subjects ( they could do so, and they dont, and this has been beautirfully ignored in the Google debate as well). I guess it is all about the reasonable expectations and freedom of expression

@mikarv you're right, the statement is quite blunt: in this case there was not even any prior contact with the controller and no way to know data was processed

Are test questions and answers personal data that needs to be provided pursuant to an access request? (German court VG Karlsruhe weighs in but equally interesting for US state data privacy laws) 🔹️Answers given by a student in a test could be considered personal data, however... test questions cannot be considered personal data. 🔹️The argument the test questions are strictly linked to the answers given by the plaintiff was also not accepted by the court which held that the questions do not reveal anything about the level of knowledge of the plaintiff and thus do not constitute personal data 🔹️Access requests under Article 15 GDPR serve the purpose of making data subjects aware of the processing of their personal data and to verify the legality of processing. Hence...it is irrelevant that the plaintiff needed access to the test questions for the purpose of interpreting the test result because he does not have a right to access under the GDPR for such purpose. 🔹️Test questions may constitute trade secrets Image by upklyak on Freepik #dataprivacy #dataprotection #privacyFOMO gdprhub.eu/index.php?titl…

Super interesting article on extraterritorial enforcement of the GDPR

The European Commission is asking people to contribute their views on the application of the General Data Protection Regulation (GDPR) for their current 2024 review round. ec.europa.eu/info/law/bette…

New decision from the Belgian DPA: reminder that legitimate interest cannot fly if the data subjects were never informed in the first place. autoriteprotectiondonnees.be/citoyen/lapd-s…

May the best woman (best who, man?) win

For those interested in the pay-or-consent debate Interesting discussion on DP as a fundemental right and the legislative process surrounding GDPR, Digital Content Directive (@TetsuwanAstro helped draft the EDPS opinion and is ex-noyb) and others. mastersofprivacy.com/romain-robert-…

@airavn Très particulier en effet...

Pay us or we share personal data with our 756 partners! You literally can't reject ad tracking unless you pay.

🎙 noyb's @maxschrems joined @EURACTIV s Tech Brief podcast to talk about the new EU-US Data Privacy Framework last week. Listen here 👇 euractiv.com/section/data-p…

@gateklons @RobertJBateman I am just a detail of the whole picture ;-) (well I hope not actually, deep inside... ;-) )

@RobertJBateman @TetsuwanAstro I'm sorry 😭😭😭 I probably saw but then forgot about it

My 2 former employers met today in Strasbourg to discuss GDPR enforcement and cooperation. Nice to see a dialogue between civil society and the EDPS.

@gateklons No I dont since July. Best time to leave discretely ;-)

@TetsuwanAstro Do you no longer work at noyb?