A Look Back at Data Breaches and Security Incidents in 2019

2019 was an eventful year marked by numerous data breaches, cyberattacks, and security incidents. Facebook alone—including Instagram and WhatsApp—was linked to eight data breaches. We’ve summarized the biggest and most sensational cases in a two-part overview.

A Look Back at GDPR Administrative Penalty Proceedings in 2019

In 2019, German data protection authorities issued 185 fines for violations of the GDPR. With the exception of Mecklenburg-Western Pomerania, all authorities provided information to the *Handelsblatt*.

Second Data Protection Amendment and Implementation Act

On November 26, 2019, amendments to the Federal Data Protection Act will take effect. We examine whether the requirement to appoint data protection officers will make things easier for German companies or whether it will actually do them a disservice.

Opposition to Google Analytics

Several German regulatory agencies issued coordinated warnings regarding the use of Google Analytics and other tracking tools on websites.

Data Breach at Conrad Electronic

Unknown individuals gained access to 14 million customer records from an Elasticsearch instance belonging to the Conrad Electronic Group. The records include mailing addresses, some email addresses, fax numbers, and phone numbers; approximately 20% of the affected records also contain IBANs.

Flood of complaints about Google Analytics

German supervisory authorities have received 200,000 complaints about the inadmissible use of Google Analytics.

Third review of EU-US Privacy Shield

The EU Commission has reviewed the EU-US Privacy Shield for the third time.

Preset consent is unlawful

The ECJ has issued a far-reaching ruling on the use of cookies stipulating that no effective consent to the storage of cookies has been given by the internet user if the website operator employs a checkbox with preset checkmarks.

Facebook’s „Like“ button - website operator liable

The European Court of Justice has imposed stricter requirements on website operators for „Like“ buttons. The integration of social plug-ins can establish a joint responsibility of the website operator and Facebook.