Bytesize Legal News Today

In this episode of Fieldfisher's Bytesize Legal Updates podcast, Pardeep Dhanoya and Andrea Ortega discuss the recent guidance issued by the Spanish Data Protection Authority (DPA) on cookies and its implications for businesses. Under the EU and UK cookie rules, only strictly necessary cookies are exempt from the requirement to obtain prior consent from users. Analytics cookies are not considered strictly necessary; thus, companies must provide information and obtain consent from users.

The French data protection authority, the CNIL, has fined Amazon France Logistique €32 million for its use of excessively intrusive employee monitoring systems and failing to provide transparency and adequate security to personal data in relation to the use of video surveillance systems, in breach of the GDPR.