Spanish Data Protection Authority Issues Guidance on Agentic AI
The Spanish Data Protection Authority issues detailed GDPR guidance to help organizations manage privacy risks of autonomous agentic AI systems.
cybersecurity
LLMs Enable Large-Scale Deanonymization
LLMs make large-scale deanonymization practical by extracting identity signals from text, retrieving candidates with embeddings, and using reasoning to verify matches at high precision.
Dutch DPA Warns of OpenClaw AI Security Risks
The Dutch Data Protection Authority warns against using OpenClaw AI due to serious security risks and urges compliance with GDPR to protect personal data.
Ireland to expand police powers over encrypted data and spyware
Ireland plans new laws to expand police powers for intercepting encrypted communications and using spyware, with legal safeguards aligned to EU standards.
Court of Appeal upholds GDPR fine against Grindr
Norwegian court upheld a major GDPR fine against Grindr for improper processing and sharing of sensitive and location data, stressing stricter requirements for consent, minimization and safeguards.
EU delays Chat Control plans after member states fail to agree
EU plans to force scanning of encrypted messages were postponed after Germany opposed Chat Control; critics say it would weaken encryption, harm security and push users to risky alternatives.
Investigation reveals sale of precise phone movement data in Ireland
Undercover RTÉ reporting shows minute-by-minute smartphone location data for tens of thousands in Ireland is being sold, enabling re-identification and raising serious privacy and security concerns.
AI browsers leak personal data
Study finds major AI browser assistants transmit sensitive personal data, likely breaching GDPR and requiring stronger consent, transparency, and technical safeguards.
Ireland’s DPA Launches Toolkit to Safeguard Vulnerable Adults’ Data
New DPC Adult Safeguarding Toolkit guides organisations on GDPR-compliant collection, storage and sharing of vulnerable adults’ personal data with practical templates and sector collaboration.
German Court Restricts Police Use of Spyware
German high court restricts law enforcement use of spyware to cases with at least a three-year maximum sentence, citing severe interference with fundamental rights.
EDPB announces forthcoming unified GDPR breach reporting form
EDPB will publish an EU-wide GDPR breach notification template to standardize reporting, aid cross-border compliance, and support accompanying guidance and tools.
Microsoft Admits U.S. Access Risk to EU Citizen Data
Microsoft France admits it cannot guarantee French citizen data in EU datacenters is fully protected from U.S. government access, highlighting digital sovereignty challenges.