EDPB Adopts Statement on PNR Directive Implementation
The EDPB adopted a statement on the PNR Directive, urging EU countries to implement changes in line with the CJEU’s judgment to enhance passenger data protection.
CJEU
EU Court Upholds EDPB’s Authority Over Irish DPC
The European General Court supports the EDPB’s authority, requiring Ireland’s DPC to conduct separate investigations into Meta’s data processing, reinforcing GDPR enforcement.
Train Companies Cannot Require Gender Information, Says EU Court
The European Court of Justice ruled that train companies cannot require gender identification for ticket purchases, promoting inclusivity and privacy rights.
EU Court Orders Commission to Pay Damages for Non-compliant Data Transfer
The EU court ordered the European Commission to pay damages for illegal data transfers, highlighting the importance of compliance with EU data transfer rules and potential for class actions.
EU Court rules GDPR complaints can’t be rejected based on frequency
The CJEU ruled that complaint frequency doesn’t invalidate GDPR complaints unless they are clearly vexatious or abusive, impacting data protection enforcement across the EU.
WhatsApp Appeals €225 Million GDPR Fine to EU’s Top Court
WhatsApp appeals a €225 million fine at the CJEU, challenging the EDPB’s decision over alleged GDPR violations related to user data transparency.
Estonia to limit telecommunication data retention obligation
Estonia’s Ministry of Justice faces challenges in aligning data retention policies with EU regulations while balancing privacy rights and national security.
Schrems wins another case over Meta
Schrem’s privacy case against Meta highlights GDPR violations regarding the processing of personal data on sexual orientation, impacting ad targeting practices.
DPA is not obliged to impose sanctions, CJEU rules
Supervisory authorities under GDPR can choose not to impose penalties for data breaches if the controller has already taken corrective actions.
Germany to amend federal privacy law
The Draft Law amending the German Federal Data Protection Act (BDSG) introduces significant changes to data protection regulations in Germany, including the institutionalization of the Data Protection Conference (DSK) and amendments to data subject access rights and scoring practices.
CJEU upholds ruling on fingerprints for ID cards
The European Court of Justice upheld a regulation requiring two fingerprints on identity cards in Germany to combat identity theft, despite some civil rights activists expressing disappointment.
EU Civil Groups Challenge Meta’s Privacy Workaround
Civil society groups urge the EDPB to reject Meta’s “consent or pay” model, fearing it undermines EU privacy laws.