FC Barcelona faces €500,000 GDPR fine over biometric data processing violations
Spain’s data protection authority, the Agencia Española de Protección de Datos (AEPD), has imposed a €500,000 fine on Fútbol Club […]
GDPR News
EU Parliament committee vote stalls temporary CSAM scanning law extension
he EU Parliament committee failed to approve a temporary extension for voluntary CSAM scanning, risking a legal gap before permanent rules are finalized.
EU Council Rejects Changes to GDPR Personal Data Definition
EU countries reject the Commission’s proposal to change the GDPR personal data definition, prioritizing stronger privacy protections and the EDPB’s guidance on pseudonymisation.
EDPB Supports Global Privacy Efforts on AI-Generated Images
The EDPB and 60+ global authorities call for strong safeguards and transparency to protect privacy from harmful AI-generated images of real individuals.
EDPS issues Opinion on extension of CSAM rules
The EDPS calls for improved safeguards and legal clarity in extending EU interim rules to combat child sexual abuse online, emphasizing privacy and targeted data scanning.
EDPS Introduces Binding Rules to Safeguard DPO Independence in EU Bodies
The EDPS has introduced new guidance and binding rules to protect the independence and role of Data Protection Officers across all EU institutions.
EDPB Adopts 2026-2027 Work Programme
The EDPB’s 2026-2027 work programme focuses on GDPR compliance, enforcement cooperation, emerging tech guidance, and global data protection collaboration.
EDPB and EDPS Issue Joint Opinion on Digital Omnibus
The EDPB and EDPS provide a Joint Opinion on the Digital Omnibus Regulation, urging caution on GDPR changes while supporting simplification and stronger oversight.
Court Confirms WhatsApp’s Right to Contest EDPB GDPR Fine Decision
The Court of Justice ruled WhatsApp can challenge the EDPB binding decision on GDPR violations, sending the case back for a full review.
Austrian DPA Finds Microsoft’s Tracking of Students Breaches GDPR
Austrian data authority ruled Microsoft illegally tracked a minor via Microsoft 365 Education cookies without consent, ordering the company to stop within four weeks.
EU and Brazil Agree on Mutual Data Protection Adequacy
The EU and Brazil recognize each other’s data protection laws as equivalent, enabling secure cross-border data flows and boosting digital trade for 670 million consumers.
Ireland to expand police powers over encrypted data and spyware
Ireland plans new laws to expand police powers for intercepting encrypted communications and using spyware, with legal safeguards aligned to EU standards.