EDPB Issues Recommendations on Legal Basis for User Accounts on E-commerce Sites
The EDPB recommends e-commerce sites offer guest checkout to protect user privacy, allowing mandatory accounts only for specific services under GDPR rules.
GDPR News
EFTA Court Judgment on GDPR Article 38(3) and DPO Dismissal Case
The EFTA Court ruled that dismissing a data protection officer without just cause is allowed under GDPR if unrelated to their duties and national law remedies unlawful dismissal.
Slovenia’s officials use GDPR to threaten investigative journalism
Slovenian investigative newsroom Oštro faces legal pressure using GDPR complaints by officials to silence scrutiny of public officials’ asset transparency.
EU Court Holds Websites Responsible for GDPR Compliance with User Content
The EU court ruled that websites hosting user content must actively protect user privacy and comply with GDPR, including for anonymous users, or face heavy fines.
EDPB meets with DPAs from EU adequacy countries to strengthen GDPR cooperation
The EDPB and DPAs from countries with EU adequacy decisions strengthened cooperation in data protection enforcement and advisory priorities during their second joint meeting.
EU justice chief says GDPR reforms push limits
The EU Commission proposes GDPR reforms to ease business rules and simplify cookie consent while maintaining strong privacy protections for European citizens.
EU Publishers Criticize Digital Omnibus for GDPR Consent Challenges
The EU Digital Omnibus complicates consent management for publishers, risking lower consent rates and favoring big tech with closed ecosystems.
Regulation (EU) 2025/2518 on Additional GDPR Enforcement Procedures Published
Regulation (EU) 2025/2518 sets new procedural rules to enhance cooperation and efficiency in enforcing GDPR across EU member states in cross-border cases.
Commission Investigates Irish Data Protection Commissioner Appointment
The European Commission seeks more information from Ireland on the appointment of Niamh Sweeney as Data Protection Commissioner amid concerns over independence and conflicts of interest.
Spanish Media Win 481 Million Euro Damages Against Meta over GDPR breach
A Madrid court orders Meta to pay 481 million euros for GDPR violations harming Spanish media by exploiting user data for advertising.
Commission publishes Digital Omnibus proposal
The EU’s new digital package simplifies AI, data, and cybersecurity rules and introduces a European Business Wallet to reduce administrative costs and boost business innovation.
EU Court Clarifies Direct Marketing and Soft Opt-In for Email Newsletters
The Court confirmed unsolicited newsletters promoting paid services fall under e-Privacy Directive’s direct marketing rules, overriding GDPR’s general lawfulness conditions.