EDPB Launches DPIA Template to Enhance GDPR Consistency Across Europe
The EDPB has released a DPIA template to help organizations comply with GDPR by structuring and simplifying risk assessments, now open for public feedback until 9 June.
GDPR News
EDPB publishes annual report 2025
The EDPB’s 2025 Annual Report highlights increased GDPR enforcement, cross-border cooperation, guidance on new technologies, and €300 million in fines for data protection violations.
EDPB Adopts Guidelines on Personal Data Processing for Scientific Research
The EDPB issued guidelines to clarify GDPR compliance for scientific research, covering consent, data subject rights, responsibilities, and technical safeguards.
Commission Confirms Data Breach in Public Web Infrastructure
The European Commission suffered a cyberattack on its public websites, potentially exposing data, while investigations continue with limited details disclosed.
EU Moves Forward with Single Entry Point for GDPR and Security Incident Reports
The EU plans a centralized Single Entry Point platform for security incident reporting, extending GDPR breach notification to 96 hours, to simplify compliance across multiple laws.
EDPB announces 2026 Coordinated Enforcement Framework on GDPR transparency
The EDPB’s 2026 Coordinated Enforcement Framework targets GDPR transparency obligations, with 25 DPAs assessing compliance and sharing findings for EU-wide improvements.
EDPB and EDPS Issue Joint Opinion on EU Cybersecurity Act 2 and NIS2 Amendments
The EDPB and EDPS jointly support enhanced cybersecurity laws in Europe, emphasizing coordination with data protection rules and simplifying breach notifications.
CJEU Rules on Abuse of GDPR Access Rights and Compensation Claims
The Court ruled GDPR access requests can be refused if made solely to trigger compensation claims rather than to verify lawful data processing.
Court Annuls €746 Million GDPR Fine Against Amazon
Luxembourg’s High Administrative Court annulled Amazon’s €746 million GDPR fine over targeted advertising, requiring fault and proportionality reassessment by the CNPD.
CJEU to Clarify Consent Under GDPR and ePrivacy Directive
The CJEU will clarify if broad consent for data use by “partners” in direct marketing meets GDPR and ePrivacy Directive requirements.
GDPR Fines and Data Breach Survey 2025
European GDPR fines remain high at €1.2 billion in 2025, with a 22% rise in daily data breach notifications and increasing regulatory focus on data security and compensation claims.
EDPB and EDPS Issue Joint Opinion on the European Biotech Act Proposal
The EDPB and EDPS support the European Biotech Act proposal while urging strong data protection measures for clinical trial participants and clear legal roles under GDPR.