Irish DPA Publishes 2025 Case Studies
The Irish Data Protection Commission’s 2025 case studies reveal key trends in GDPR enforcement, with fines up to €1.2 million for breaches involving access requests, security failures, and transparency issues.
data access
EDPB Releases 2024 Findings on Access Rights
The EDPB’s 2024 report highlights challenges and recommendations for controllers in implementing the right of access, with a focus on improving compliance and awareness of Guidelines 01/2022.
GDPR Complaint Targets Microsoft’s Xandr for Data Access Denials
A complaint supported by European privacy advocacy group, noyb, targets Microsoft-owned adtech business Xandr for GDPR violations. The complaint alleges […]
MEPs want to enhance customers’ control over their financial data
MEPs propose new rules for access to financial data in the EU to enhance customer control and innovation in financial services.
GDPR Right of Access Under EDPB’s Enforcement Spotlight in 2024
The EDPB initiates a 2024 action focusing on GDPR’s right of access to ensure compliance across the EU.
CNIL publishes agenda for 2024
CNIL’s 2024 focus: minors’ data, Olympic Games, access rights, and e-receipts.
Patients have the right to first copy of medical records free of charge, CJEU rules
Judgment by the EU top court clarifies the right of individuals to access their personal data undergoing processing.
Germany Gives Google Users More Power Over Their Data
Google has committed to give its users more control over their data processing – a result of a proceeding by the Bundeskartellamt under new competition law.
Belgian Government Boosts Transparency with New Data Access Initiative
Belgian citizens can now see who accessed their personal information via a government website, as part of efforts to boost transparency.
CJEU Advocate General delivers Opinion on the right of access for purposes unrelated to data protection
The AG suggested that GDPR requires companies to provide personal data copies to individuals, regardless of why it was requested.
CJEU: Right of Access Allows Data Subjects to Request the Identity of Each Data Recipient
CJEU ruled that under GDPR an individual has the right to request the identity of each entity to whom the data controller has disclosed their personal data.
Cross-Border Access to User Data by Law Enforcement: 2021 Year in Review
Law enforcement around the world is apparently getting easier access to data in other countries, thanks to the Council of Europe’s adoption of a flawed new protocol to the Budapest Convention.