EU and Brazil Agree on Mutual Data Protection Adequacy
The EU and Brazil recognize each other’s data protection laws as equivalent, enabling secure cross-border data flows and boosting digital trade for 670 million consumers.
GDPR News
Ireland to expand police powers over encrypted data and spyware
Ireland plans new laws to expand police powers for intercepting encrypted communications and using spyware, with legal safeguards aligned to EU standards.
EDPB and EDPS Issues Joint Opinion on European Commission’s Digital Omnibus on AI Proposal
The EDPB and EDPS support AI Act simplification but stress protecting fundamental rights, maintaining DPA roles, and limiting delays in high-risk AI system rules.
EDPB Adopts Updated Recommendations for Processor Binding Corporate Rules
The EDPB updated recommendations for Processor Binding Corporate Rules to clarify GDPR compliance and streamline intra-group data transfers outside the EEA.
EDPB Submits Input for Law Enforcement Directive Evaluation
The EDPB advises the European Commission on improving the Law Enforcement Directive, emphasizing legal clarity, technology compliance, and resource needs for data protection authorities.
EU to Share Biometric Data with US for Visa-Free Travel
EU countries plan to grant the U.S. access to biometric data under a new framework to maintain visa-free travel, raising GDPR compliance and data protection concerns.
EDPS issues Opinion on EU proposal for direct VAT data access to fight fraud
The EDPS supports limited direct access to VAT data for fraud investigations but stresses strict safeguards to protect personal data and ensure compliance with EU laws.
ECHR Finds Italy Violated Privacy Rights by Allowing Tax Access to Bank Data
The ECHR ruled Italy violated privacy rights by allowing tax authorities unchecked access to banking data without judicial oversight or effective remedies.
EU Extends UK GDPR Adequacy Decision for Six More Years
The EU extended the UK’s GDPR adequacy decision for six years, ensuring continued free and safe data transfers until 2031 with a review in four years.
EDPB Issues Recommendations on Legal Basis for User Accounts on E-commerce Sites
The EDPB recommends e-commerce sites offer guest checkout to protect user privacy, allowing mandatory accounts only for specific services under GDPR rules.
EFTA Court Judgment on GDPR Article 38(3) and DPO Dismissal Case
The EFTA Court ruled that dismissing a data protection officer without just cause is allowed under GDPR if unrelated to their duties and national law remedies unlawful dismissal.
Slovenia’s officials use GDPR to threaten investigative journalism
Slovenian investigative newsroom Oštro faces legal pressure using GDPR complaints by officials to silence scrutiny of public officials’ asset transparency.