Israeli Privacy Regulator Published Final Paper on Privacy Protection Officers

Following the draft paper published in October 2020, the Israeli Privacy Protection Authority published its final paper on the advisable appointment of Chief Privacy Officers (CPOs, sometimes referred to as Data Protection Officers – DPOs) in Israeli organizations. The paper explains that although Israeli law does not mandate the appointment of CPO/DPO (other than in one isolated instance related to ...

Israel Police Accused of Systematic Warrantless Surveillance of Smartphones; Attorney General Investigates

An investigative journalism report published by the “Calcalist” daily newspaper accuses the Israel National Police of spying on innocent individuals by using NSO’s “Pegasus” surreptitious surveillance software on their mobile phones, without warrants authorizing the Police to do so.

The Police reportedly use Pegasus to surveil protesters, intelligence targets, politicians, and other public officials, as part of preliminary but warrantless ...

Google Overhauls its Cookie Replacement Plan

Alphabet, Google’s parent company, revealed that it is working on a new user tracking system to replace the use of third-party advertisement cookies. The announcement arrives after Google faced harsh criticism for its previous cookie replacement plan.

Google’s first plan aimed to replace the use of cookies by allowing advertisers to target ads based on tens of thousands of small ...

European Court Finds Bulgarian Gov’t Electronic Surveillance Violates Human Rights

The European Court of Human Rights (ECHR) has ruled that Bulgaria’s Special Surveillance Means Act, which authorizes the government to surveil citizens in certain circumstances, violates the European Convention for the Protection of Human Rights and Fundamental Freedoms. The decision was delivered on a petition filed by Bulgarian citizens and European human rights groups.

Bulgaria’s surveillance act, along with several ...

EU Data Protection Agencies Find that Google Analytics’ Data Transfers to the US Violate the GDPR

Two separate enforcement proceedings, by the European Data Protection Supervisor (EDPS) and the Austrian Data Protection Authority (DPA), have found that the use of Google Analytics for the processing of data of EU data subjects violates the GDPR because it leads to the unlawful transfer of data to the United States.

The EDPS’s investigation into Google Analytics was prompted ...

China: New Rules on Algorithm-Based Recommendation Services

A new set of rules published by the Cyberspace Administration of China (CAC) requires companies to allow users to control how their information is used in algorithmic-based recommendations. The rules are set to take effect on March 1, 2022.

The rules require companies that use algorithm-based recommendations on their social media feeds to inform their users about the purpose and ...

Israeli Civil Service Regulations Forbid Wiretapping of Civil Servants

The Israeli Civil Service Regulations, which apply to civil servants employed by the Israeli government, were amended to prohibit the recording of one civil servant by another absent full consent, regardless of whether one party is subordinate to the other. This prohibition does not apply if the recording party has reasonable grounds to believe that the recording is necessary for ...