Commission proposes changes to EU cookie consent obligations
The European Commission proposes simplifying cookie consent rules by revising the e-Privacy framework, prompting industry support and privacy-focused opposition ahead of new ad regulation.
consent
Court of Appeal upholds GDPR fine against Grindr
Norwegian court upheld a major GDPR fine against Grindr for improper processing and sharing of sensitive and location data, stressing stricter requirements for consent, minimization and safeguards.
EDPB and European Commission Publish Joint Guidelines on DMA and GDPR
EDPB and European Commission issued joint guidelines clarifying how gatekeepers must apply GDPR obligations when complying with the Digital Markets Act; public consultation open until 4 Dec 2025.
Meta asks CJEU to reinstate challenge to EDPB Opinion on valid consent
Meta appeals the General Court’s dismissal of its challenge to EDPB Opinion 08/2024, arguing procedural and legal errors on reviewability, liability, judicial protection, and reasoning.
CNIL fines Google €325 million and SHEIN €150 million for cookie non-compliance
The CNIL fined Google (€325M) and SHEIN (€150M) for cookie and ad consent breaches, stressing free, informed consent and sanctioning covert tracking and cookie-wall practices.
Austrian court: Der Standard broke GDPR with pay-or-consent model
The Austrian Federal Administrative Court confirmed that newspaper Der Standard breached the EU’s data protection rules by using a “pay […]
German court says Facebook fanpage owner not responsible for cookies on webpage
The Cologne court partially overturned the BfDI ban on the German Federal Government’s Facebook fan page, clarifying GDPR responsibilities for public authorities and Meta.
Norway Proposes Law to Ban Social Media for Children Under 15
Norway proposes a law banning social media use for children under 15, raising GDPR consent age, and enhancing protections against online harm.
Meta’s AI Data Collection Approved by Irish DPC
The Irish DPC approved Meta’s AI training data collection with safeguards, but legal challenges and privacy concerns under GDPR persist.
Belgian Court Partially Overturns APD Decision on IAB Europe’s GDPR Joint Controllership
The Belgian Market Court annulled part of the APD’s decision on IAB Europe’s TCF, limiting its joint controllership to TC Strings only, aligning with the CJEU ruling.
Meta to train AI on EU users’ data
Meta plans to train its AI models on public content in the EU to comply with GDPR and enhance privacy while avoiding legal risks.
France fines Apple €150M for tracking consent popups
The French Competition Authority criticized Apple’s App Tracking Transparency (ATT) for favoring large firms like Meta while disadvantaging smaller publishers, urging fairer consent processes.