The episode is an audio version of the GDPRhub newsletter, read by Ria-Alexandra Valle, providing updates on data protection and privacy news from Europe. It begins with a case in Finland where the DPA held that a BMW dealership did not have to disclose the service history of a used vehicle to a new buyer under Article 15, as it contained the previous owner's personal data. However, it notes that disclosure could still occur under other grounds like legitimate interest. Next, it moves to Germany, where the Administrative Court of Munich rejected a request for interim relief against a school's collection and storing of COVID-19 test certificates, citing repealed legal provisions. The focus then shifts to Italy, with multiple enforcement actions. The Italian DPA fined a public waste collection company €200,000 for installing a video surveillance system without prior authorization from the municipality of Taranto and for posting videos of identifiable persons on Facebook without a legal basis. Another case involved a daily newspaper fined €40,000 for negligently publishing the personal details of a homosexual couple and their adopted child in an online article, violating Articles 5 and 9. Finally, the Italian DPA fined a public administration €50,000 for unlawfully disclosing personal health-related data to unauthorized third parties and for adopting inadequate security measures. The episode presents these cases in a straightforward, news-style format without additional commentary, highlighting practical applications of GDPR rules.
