German Authorities Oppose Chat Control to Protect Privacy
German data protection authorities urge the EU to stop chat control plans, citing privacy risks, technical flaws, and advocating for child safety by design.
GDPR News
Instagram Ends End-to-End Encryption for Direct Messages
Meta ends Instagram’s optional end-to-end encryption for direct messages, reverting to standard encryption that allows message access by the company.
Yango Faces €100 Million GDPR Fine for Sharing Personal Data Outside EU
The Dutch Data Protection Authority fined Yango’s parent company €100 million for inadequate protection of European users’ data transferred to Russia.
Irish DPC Investigates Shein for Potential GDPR Breaches
Ireland’s Data Protection Commission investigates Shein over possible GDPR breaches involving customer data transfers to China.
LinkedIn Faces GDPR Investigation Over Profile Viewer Information Access
LinkedIn faces an Austrian GDPR complaint over restricting profile viewer data to paying users, challenging the platform’s compliance with data access rights.
EU-US Deal Could Grant US Access to Sensitive European Police Data
The EU-US deal may grant US authorities access to sensitive European police data, raising serious privacy and data protection concerns under GDPR.
EDPB Launches DPIA Template to Enhance GDPR Consistency Across Europe
The EDPB has released a DPIA template to help organizations comply with GDPR by structuring and simplifying risk assessments, now open for public feedback until 9 June.
EDPB publishes annual report 2025
The EDPB’s 2025 Annual Report highlights increased GDPR enforcement, cross-border cooperation, guidance on new technologies, and €300 million in fines for data protection violations.
EDPB Adopts Guidelines on Personal Data Processing for Scientific Research
The EDPB issued guidelines to clarify GDPR compliance for scientific research, covering consent, data subject rights, responsibilities, and technical safeguards.
Commission Confirms Data Breach in Public Web Infrastructure
The European Commission suffered a cyberattack on its public websites, potentially exposing data, while investigations continue with limited details disclosed.
EU Moves Forward with Single Entry Point for GDPR and Security Incident Reports
The EU plans a centralized Single Entry Point platform for security incident reporting, extending GDPR breach notification to 96 hours, to simplify compliance across multiple laws.
EDPB announces 2026 Coordinated Enforcement Framework on GDPR transparency
The EDPB’s 2026 Coordinated Enforcement Framework targets GDPR transparency obligations, with 25 DPAs assessing compliance and sharing findings for EU-wide improvements.