France introduces data security breach notification requirement for electronic communication service providers *

France - August 26 2011
On August 24, 2011, France’s new law concerning electronic communications (Ordonnance n° 2011-1012 du 24 août 2011 relative aux communications électroniques, or the “Ordinance”) came into force. 

---

French court rules investigation by Competition Authority did not breach employee privacy rights *

France - March 23 2010
On February 19, 2010, the Court of Appeals of Versailles (the "Court") upheld the unlimited seizure and review of a company's emails by several agents of the French Competition Authority (Autorité de la Concurrence).

Co-authors: Mathieu Guillaumond, Ray V. Hartwell, Paul McGeown.

---

ICO issues RAND report on strengths and weaknesses of EU Data Protection Directive *

European Union, United Kingdom - June 4 2009
On May 12, 2009, the UK Information Commissioner’s Office published a study commissioned from RAND Europe, setting out the strengths and weaknesses of the European Data Protection Directive (Directive 95/46/EC).

Co-authors: Cédric Burton, Christopher Kuner, Dr. Jörg Hladjk.

---

Commission issues recommendation on RFID, privacy and data protection *

European Union - June 4 2009
On May 12, 2009, the European Commission issued a non-binding recommendation on the implementation of privacy and data protection principles in applications supported by radio-frequency identification (RFID).

Co-authors: Cédric Burton, Christopher Kuner, Dr. Jörg Hladjk.

---

Spanish DPA issues internet user privacy recommendations *

Spain - June 4 2009
On May 13, 2009, the Spanish Data Protection Authority (AEPD) issued extensive guidance with online privacy and security recommendations.

Co-authors: Cédric Burton, Christopher Kuner, Dr. Jörg Hladjk.

---