Irish DPA Publishes 2025 Case Studies
The Irish Data Protection Commission’s 2025 case studies reveal key trends in GDPR enforcement, with fines up to €1.2 million for breaches involving access requests, security failures, and transparency issues.
The Irish Data Protection Commission’s 2025 case studies reveal key trends in GDPR enforcement, with fines up to €1.2 million for breaches involving access requests, security failures, and transparency issues.
GDPR has significantly reduced cyber damages in the EU by encouraging better cybersecurity investments and lowering identity theft losses by up to €1.4 billion.
Germany’s data watchdog accuses DeepSeek of unlawful data transfers to China, prompting potential EU-wide app bans under GDPR rules.
The EU’s new Draft Regulation aims to speed up GDPR enforcement by improving cooperation between data protection authorities and setting clear investigation deadlines.
The EU Commission extended data adequacy decisions with the UK by six months to assess the new UK Data Bill while ensuring uninterrupted cross-border data flow.
Norway proposes a law banning social media use for children under 15, raising GDPR consent age, and enhancing protections against online harm.
The DPC fined the Department of Social Protection €550,000 for GDPR violations related to biometric data processing in Public Services Card registration.
Meta’s AI app exposes users’ private conversations publicly without clear consent, raising serious GDPR privacy and data protection concerns.
Court upheld Spotify AB’s 5.2 million euros fine for failing to provide clear GDPR information and safeguards for personal data processing and transfers.
EU experts warn that weakening encryption under ProtectEU risks privacy, security, and human rights, urging the Commission to protect strong encryption standards.
The High Court granted TikTok a stay on the DPC’s data transfer suspension to China until October while the full legal challenge, including a €530 million fine, is considered.
The BfDI found Vodafone €45 million for data protection failures linked to partner fraud and security flaws, prompting the company to enhance its compliance and security measures.