Meta’s AI Training Program Collects European Employee Data
Meta’s AI training program collects European employee data via US-based devices, raising serious GDPR compliance concerns over unauthorized data use.
Meta’s AI training program collects European employee data via US-based devices, raising serious GDPR compliance concerns over unauthorized data use.
The EDPB approved Europrivacy certification for global use, enhancing GDPR compliance and simplifying international data transfers with stronger legal safeguards.
Meta lost a legal challenge allowing the Irish Data Protection Commission to impose fines up to €430 million for GDPR violations affecting millions of Facebook users.
The Dutch Data Protection Authority fined Yango’s parent company €100 million for inadequate protection of European users’ data transferred to Russia.
Ireland’s Data Protection Commission investigates Shein over possible GDPR breaches involving customer data transfers to China.
LinkedIn faces an Austrian GDPR complaint over restricting profile viewer data to paying users, challenging the platform’s compliance with data access rights.
The EDPB has released a DPIA template to help organizations comply with GDPR by structuring and simplifying risk assessments, now open for public feedback until 9 June.
The EDPB’s 2025 Annual Report highlights increased GDPR enforcement, cross-border cooperation, guidance on new technologies, and €300 million in fines for data protection violations.
The EDPB’s 2026 Coordinated Enforcement Framework targets GDPR transparency obligations, with 25 DPAs assessing compliance and sharing findings for EU-wide improvements.
Luxembourg’s High Administrative Court annulled Amazon’s €746 million GDPR fine over targeted advertising, requiring fault and proportionality reassessment by the CNPD.
The CJEU will clarify if broad consent for data use by “partners” in direct marketing meets GDPR and ePrivacy Directive requirements.
European GDPR fines remain high at €1.2 billion in 2025, with a 22% rise in daily data breach notifications and increasing regulatory focus on data security and compensation claims.