EDPB publishes statement on smart glasses
The EDPB explains how GDPR rules apply to smart glasses, focusing on recording, transparency, lawful processing, AI, biometric data, and privacy safeguards.
compliance
Dutch Retailers Suspend Meta Smart Glass Sales Over Privacy Concerns
Dutch retailers paused sales of Meta’s Ray-Ban smart glasses amid GDPR concerns over covert recording, while regulators and consumer groups consider possible legal action.
Spanish DPA Fines Securitas Direct €100,000 for Chargeable GDPR Hotline
The Spanish DPA fined Securitas Direct €100,000 for directing people to a chargeable phone number to exercise GDPR rights and ordered the company to replace its notices.
€2.59 Million Fine for Excessive Fingerprint Collection and Invalid Consent
The Croatian data protection authority (the Agency for the Protection of Personal Data) imposed an administrative fine of €2,590,000 on […]
Dutch AP Publishes GDPR Guidance for Generative AI
The Dutch DPA’s new tool helps organizations assess GDPR compliance across generative AI selection, deployment, and ongoing governance.
Ireland’s DPC Calls for Greater Transparency in AI Development
Ireland’s DPC says AI developers must improve GDPR transparency, clarify lawful training practices, and protect individuals’ rights as agentic AI expands.
OpenAI Manually Reviews ChatGPT Conversations
A report on OpenAI’s Project Lily raises GDPR questions about human review of ChatGPT conversations, anonymization, transparency, lawful processing, and user privacy.
Norway Considers Ban on Facial Recognition in Smart Glasses
Norway is considering stricter smart-glasses rules, including a possible ban on public facial recognition, amid growing GDPR and covert-recording concerns.
Dutch DPA Fines Uber €824.99 Million for GDPR Violations
The Dutch data protection authority fined Uber €824.99 million for automatically deactivating drivers without human review and failing to provide adequate GDPR information.
Data Privacy Framework Faces Scrutiny After U.S. Supreme Court Ruling on FTC Independence
The EDPB questions the impact of the U.S. Supreme Court ruling on FTC independence and the EU-U.S. Data Privacy Framework’s validity and calls for European Commission review.
Telecom Italia Fined €9.5 Million for GDPR Violations in Telemarketing Scheme
Italy fines Telecom Italia €9.5 million for illegal telemarketing using spoofed calls and mandates strict reforms under GDPR enforcement.
CNIL Issues GDPR Guidance on Connected Vehicle and Geolocation Data
The CNIL’s new guidance clarifies GDPR compliance for connected vehicle data, focusing on geolocation, stakeholder roles, legal bases, and cybersecurity in the EU automotive sector.