EDPS issues Opinion on EU proposal for direct VAT data access to fight fraud
The EDPS supports limited direct access to VAT data for fraud investigations but stresses strict safeguards to protect personal data and ensure compliance with EU laws.
GDPR News
ECHR Finds Italy Violated Privacy Rights by Allowing Tax Access to Bank Data
The ECHR ruled Italy violated privacy rights by allowing tax authorities unchecked access to banking data without judicial oversight or effective remedies.
EU Extends UK GDPR Adequacy Decision for Six More Years
The EU extended the UK’s GDPR adequacy decision for six years, ensuring continued free and safe data transfers until 2031 with a review in four years.
EDPB Issues Recommendations on Legal Basis for User Accounts on E-commerce Sites
The EDPB recommends e-commerce sites offer guest checkout to protect user privacy, allowing mandatory accounts only for specific services under GDPR rules.
EFTA Court Judgment on GDPR Article 38(3) and DPO Dismissal Case
The EFTA Court ruled that dismissing a data protection officer without just cause is allowed under GDPR if unrelated to their duties and national law remedies unlawful dismissal.
Slovenia’s officials use GDPR to threaten investigative journalism
Slovenian investigative newsroom Oštro faces legal pressure using GDPR complaints by officials to silence scrutiny of public officials’ asset transparency.
EU Court Holds Websites Responsible for GDPR Compliance with User Content
The EU court ruled that websites hosting user content must actively protect user privacy and comply with GDPR, including for anonymous users, or face heavy fines.
EDPB meets with DPAs from EU adequacy countries to strengthen GDPR cooperation
The EDPB and DPAs from countries with EU adequacy decisions strengthened cooperation in data protection enforcement and advisory priorities during their second joint meeting.
EU justice chief says GDPR reforms push limits
The EU Commission proposes GDPR reforms to ease business rules and simplify cookie consent while maintaining strong privacy protections for European citizens.
EU Publishers Criticize Digital Omnibus for GDPR Consent Challenges
The EU Digital Omnibus complicates consent management for publishers, risking lower consent rates and favoring big tech with closed ecosystems.
Regulation (EU) 2025/2518 on Additional GDPR Enforcement Procedures Published
Regulation (EU) 2025/2518 sets new procedural rules to enhance cooperation and efficiency in enforcing GDPR across EU member states in cross-border cases.
Commission Investigates Irish Data Protection Commissioner Appointment
The European Commission seeks more information from Ireland on the appointment of Niamh Sweeney as Data Protection Commissioner amid concerns over independence and conflicts of interest.