EDPB Issues New Guidance on GDPR Administrative Fines and the DSA
The EDPB adopted new guidance on GDPR fines, corrective powers, and the interaction between the GDPR and the Digital Services Act.
GDPR News
Norway Fines Microsoft-Owned Xandr Over Grindr User Data
Norway’s DPA fined Xandr €8.6 million for unlawfully processing Grindr users’ personal data and sexual-orientation data in real-time advertising without valid consent.
EDPB publishes statement on smart glasses
The EDPB explains how GDPR rules apply to smart glasses, focusing on recording, transparency, lawful processing, AI, biometric data, and privacy safeguards.
Dutch Retailers Suspend Meta Smart Glass Sales Over Privacy Concerns
Dutch retailers paused sales of Meta’s Ray-Ban smart glasses amid GDPR concerns over covert recording, while regulators and consumer groups consider possible legal action.
Connected Cars May Be Sending Driver Data to Tech Companies
Connected cars and their apps may share VINs, locations, and driver data with tech and advertising companies, raising major GDPR concerns about consent, transparency, and data control.
Spanish DPA Fines Securitas Direct €100,000 for Chargeable GDPR Hotline
The Spanish DPA fined Securitas Direct €100,000 for directing people to a chargeable phone number to exercise GDPR rights and ordered the company to replace its notices.
€2.59 Million Fine for Excessive Fingerprint Collection and Invalid Consent
The Croatian data protection authority (the Agency for the Protection of Personal Data) imposed an administrative fine of €2,590,000 on […]
Irish DPC publishes report on AI insights
The DPC’s 2021–2025 AI supervision report highlights GDPR priorities including lawful basis, transparency, data minimization, children’s protection, and early regulatory engagement.
Dutch AP Publishes GDPR Guidance for Generative AI
The Dutch DPA’s new tool helps organizations assess GDPR compliance across generative AI selection, deployment, and ongoing governance.
EU Governments Push Broad Surveillance of Private Messages
Leaked EU documents suggest that Member States may support broad private-message scanning, raising serious GDPR, privacy, and EU fundamental-rights concerns.
Ireland’s DPC Calls for Greater Transparency in AI Development
Ireland’s DPC says AI developers must improve GDPR transparency, clarify lawful training practices, and protect individuals’ rights as agentic AI expands.
Irish DPC Fines Google €403 Million Over Location Tracking
Ireland’s DPC fined Google €403 million for GDPR breaches involving location data transparency, lawfulness, accountability, and retention.