EDPB and EDPS Issue Joint Opinion on EU Cybersecurity Act 2 and NIS2 Amendments
The EDPB and EDPS jointly support enhanced cybersecurity laws in Europe, emphasizing coordination with data protection rules and simplifying breach notifications.
GDPR News
CJEU Rules on Abuse of GDPR Access Rights and Compensation Claims
The Court ruled GDPR access requests can be refused if made solely to trigger compensation claims rather than to verify lawful data processing.
Court Annuls €746 Million GDPR Fine Against Amazon
Luxembourg’s High Administrative Court annulled Amazon’s €746 million GDPR fine over targeted advertising, requiring fault and proportionality reassessment by the CNPD.
CJEU to Clarify Consent Under GDPR and ePrivacy Directive
The CJEU will clarify if broad consent for data use by “partners” in direct marketing meets GDPR and ePrivacy Directive requirements.
GDPR Fines and Data Breach Survey 2025
European GDPR fines remain high at €1.2 billion in 2025, with a 22% rise in daily data breach notifications and increasing regulatory focus on data security and compensation claims.
EDPB and EDPS Issue Joint Opinion on the European Biotech Act Proposal
The EDPB and EDPS support the European Biotech Act proposal while urging strong data protection measures for clinical trial participants and clear legal roles under GDPR.
EDPB publishes 2025 Report on Coordinated Enforcement Action
The EDPB’s 2025 report reviews GDPR’s right to erasure, highlighting challenges and recommending best practices for effective data deletion across the EU.
Spanish Data Protection Authority Issues Guidance on Agentic AI
The Spanish Data Protection Authority issues detailed GDPR guidance to help organizations manage privacy risks of autonomous agentic AI systems.
Dutch DPA Warns of OpenClaw AI Security Risks
The Dutch Data Protection Authority warns against using OpenClaw AI due to serious security risks and urges compliance with GDPR to protect personal data.
FC Barcelona faces €500,000 GDPR fine over biometric data processing violations
Spain’s data protection authority, the Agencia Española de Protección de Datos (AEPD), has imposed a €500,000 fine on Fútbol Club […]
EU Parliament committee vote stalls temporary CSAM scanning law extension
he EU Parliament committee failed to approve a temporary extension for voluntary CSAM scanning, risking a legal gap before permanent rules are finalized.
EU Council Rejects Changes to GDPR Personal Data Definition
EU countries reject the Commission’s proposal to change the GDPR personal data definition, prioritizing stronger privacy protections and the EDPB’s guidance on pseudonymisation.