Commission Confirms Data Breach in Public Web Infrastructure
The European Commission suffered a cyberattack on its public websites, potentially exposing data, while investigations continue with limited details disclosed.
cybersecurity
EU Moves Forward with Single Entry Point for GDPR and Security Incident Reports
The EU plans a centralized Single Entry Point platform for security incident reporting, extending GDPR breach notification to 96 hours, to simplify compliance across multiple laws.
EDPB and EDPS Issue Joint Opinion on EU Cybersecurity Act 2 and NIS2 Amendments
The EDPB and EDPS jointly support enhanced cybersecurity laws in Europe, emphasizing coordination with data protection rules and simplifying breach notifications.
Spanish Data Protection Authority Issues Guidance on Agentic AI
The Spanish Data Protection Authority issues detailed GDPR guidance to help organizations manage privacy risks of autonomous agentic AI systems.
LLMs Enable Large-Scale Deanonymization
LLMs make large-scale deanonymization practical by extracting identity signals from text, retrieving candidates with embeddings, and using reasoning to verify matches at high precision.
Dutch DPA Warns of OpenClaw AI Security Risks
The Dutch Data Protection Authority warns against using OpenClaw AI due to serious security risks and urges compliance with GDPR to protect personal data.
Ireland to expand police powers over encrypted data and spyware
Ireland plans new laws to expand police powers for intercepting encrypted communications and using spyware, with legal safeguards aligned to EU standards.
Court of Appeal upholds GDPR fine against Grindr
Norwegian court upheld a major GDPR fine against Grindr for improper processing and sharing of sensitive and location data, stressing stricter requirements for consent, minimization and safeguards.
EU delays Chat Control plans after member states fail to agree
EU plans to force scanning of encrypted messages were postponed after Germany opposed Chat Control; critics say it would weaken encryption, harm security and push users to risky alternatives.
Investigation reveals sale of precise phone movement data in Ireland
Undercover RTÉ reporting shows minute-by-minute smartphone location data for tens of thousands in Ireland is being sold, enabling re-identification and raising serious privacy and security concerns.
AI browsers leak personal data
Study finds major AI browser assistants transmit sensitive personal data, likely breaching GDPR and requiring stronger consent, transparency, and technical safeguards.
Ireland’s DPA Launches Toolkit to Safeguard Vulnerable Adults’ Data
New DPC Adult Safeguarding Toolkit guides organisations on GDPR-compliant collection, storage and sharing of vulnerable adults’ personal data with practical templates and sector collaboration.