IDPC issues FAQs on Management of Employee Email Accounts (Post-Departure) 11 April 2025 The IDPC has published a set of FAQs on the management of employee email Accounts once an employee leaves an organisation. When this happens, questions often arise regarding the appropriate management of their work email account. While employers have a legitimate interest […]
Commission sets course for Europe’s AI leadership with an ambitious AI Continent Action Plan 09 April 2025 The European Commission has presented an AI Continent Action Plan to make Europe a global leader in AI, boost its innovation capabilities and encourage adoption. As set out by President von der Leyen at the AI Action Summit […]
The Commissioner imposed an administrative fine of €20,000 on a private clinic 07 April 2025 The Commissioner received a complaint regarding the unlawful processing and disclosure of personal data by the controller. The complainant alleged that the controller failed to update her residential address, resulting in the disclosure of her sensitive health data to third […]
IDPC official delivers educational talk on Personal Data Breaches 24 March 2025 The Office of the Information and Data Protection Commissioner was recently invited by ISACA Malta Chapter to deliver an educational talk. The topic selected for this session was ‘Navigating Security Incidents that lead to Personal Data Breaches from a GDPR perspective’. As the […]
IDPC official addresses Employment 360 Conference 17 March 2025 The Office of the Information and Data Protection Commissioner took part in a panel discussion as part of the Employment 360 conference organised by Fenech and Fenech Advocates and Shireburn Software. Moderated by Dr Paul Gonzi and Ms Mikela Fenech Pace, this panel explored invaluable insights […]
EDPB adopts statement on the implementation of the PNR directive 14 March 2025 During its March Plenary, the EDPB has adopted a statement on the on the implementation of the passenger name record (PNR) directive.In its statement, the Board:- gives further guidance to the passenger information units on the necessary adaptions and limitations to the […]
Launch of Coordinated Enforcement Action on the Right to Erasure 11 March 2025 The Information and Data Protection Commissioner (IDPC) is pleased to announce its participation in the European Data Protection Board’s (EDPB) 2025 Coordinated Enforcement Framework (CEF). Following the CEF action on the right of access carried out in 2024, the CEF’s focus […]
IDPC as FRA and MSA under the AI Act 07 March 2025 The coming into force of the Artificial Intelligence Act[1] ushers in a new era for legal certainty and for regulation in the field of innovative technology such as Artificial Intelligence (AI). The AI Act seeks to protect the fundamental rights and freedoms of […]
EDPB launches CEF 205 focusing on the right to erasure 05 March 2025 The European Data Protection Board (EDPB) has launched its Coordinated Enforcement Framework (CEF) action for 2025. Following a year-long coordinated action on the right of access in 2024, the CEF’s focus this year will shift to the implementation of another data protection right, […]
European Court rules that a data subject is entitled to an explanation as to how the decision was taken in respect of him or her 27 February 2025 According to a judgement delivered on 27 February 2025 by the European Court of Justice, a data subject is entitled to an explanation as to how the […]