New EU rules set deadlines and streamlined procedures for cross-border GDPR enforcement, strengthen complainant rights, and promote early consensus among national data protection authorities.
EDPB supports six-year extension of UK adequacy decisions to 2031 but urges the Commission to address legal changes, monitor risks and ensure robust oversight and remedies.
EDPS updated guidance strengthens data protection rules for generative AI used by EU institutions, adding a practical compliance checklist and clearer controller/processor responsibilities.
The European Commission proposes simplifying cookie consent rules by revising the e-Privacy framework, prompting industry support and privacy-focused opposition ahead of new ad regulation.
Norwegian court upheld a major GDPR fine against Grindr for improper processing and sharing of sensitive and location data, stressing stricter requirements for consent, minimization and safeguards.
The Dutch regulator fined Experian Netherlands €2.7M for unlawfully collecting and processing personal data for credit assessments without proper transparency, lawful basis, or data subject rights.
Privacy groups warned that the appointment of a former Meta executive as a DPC Commissioner risks conflicts of interest and could undermine independent GDPR enforcement.
Criminal complaint in Austria seeks prosecution of Clearview AI for mass biometric data scraping after multiple EU GDPR fines and bans exposed enforcement limitations against a U.S. company.
EU signs PNR data-sharing deals with Norway and Iceland, adding privacy safeguards and awaiting EP consent and Council conclusion to strengthen counterterrorism and serious crime cooperation.
EDPB and European Commission issued joint guidelines clarifying how gatekeepers must apply GDPR obligations when complying with the Digital Markets Act; public consultation open until 4 Dec 2025.
The EDPB will coordinate an EU-wide enforcement action on GDPR transparency and information obligations, with national DPAs participating voluntarily and the action launching in 2026.
Austrian regulator found Microsoft 365 Education illegally tracked students via cookies; Microsoft must grant data access and faces scrutiny over transparency and GDPR compliance.