The September issue of our Data Protection Ticker deals with current case law, legislative changes, measures and statements on data protection.

Topics in this issue are:

Case Law:

• ECJ must decide on the assessment of damages under the GDPR
• Higher Regional Court of Brandenburg: GDPR compensation only in the event of actual damage
• Higher Regional Court of Hamm: Stating of employee's surname on rating platform permissible
• Regional Court of Wuppertal: No right to information under the GDPR if only pursuing objectives unrelated to the purpose of the GDPR

Regulatory Investigations and enforcement Actions:

• Fine of EUR 225 million against Whatsapp
• Consumer organisations warn some 100 companies about cookie banners
• Italian data protection authority imposes fine for unlawful data processing in whistleblowing system
• Hamburg Commissioner for Data Protection: fine for intransparancy on matching bonus-relevant customer data

Opinions:

• HBDI: Fax is not in conformity with GDPR
• BAY LFD: New orientation guide on consent