EU Court rules GDPR complaints can’t be rejected based on frequency
The CJEU ruled that complaint frequency doesn’t invalidate GDPR complaints unless they are clearly vexatious or abusive, impacting data protection enforcement across the EU.
data subject rights
Netflix Fined €4.75 Million for Insufficient Transparency
The Dutch DPA fines Netflix €4.75 million for inadequate customer information on personal data handling, violating GDPR regulations.
EDPB Chooses Right to Erasure for Fourth Coordinated Enforcement Action
The EDPB will launch a coordinated enforcement action in 2025 to assess the implementation of the right to erasure under GDPR.
EDPB Issues Guidelines on Legitimate Interest for Data Processing
The EDPB has issued guidelines on legitimate interests in data processing, emphasizing strict interpretation and the necessity of balancing individual rights.
GDPR Complaint Targets Microsoft’s Xandr for Data Access Denials
A complaint supported by European privacy advocacy group, noyb, targets Microsoft-owned adtech business Xandr for GDPR violations. The complaint alleges […]
GDPR Right of Access Under EDPB’s Enforcement Spotlight in 2024
The EDPB initiates a 2024 action focusing on GDPR’s right of access to ensure compliance across the EU.
noyb files complaint against Austria’s Creditors’ association for profiting from GDPR trights
KSV1870, a creditors’ association, is accused of profiting from the right of access to personal data under the GDPR by misleading individuals, especially foreigners, into purchasing a high-priced “InfoPass” instead of obtaining a free copy of their data.
Patients have the right to first copy of medical records free of charge, CJEU rules
Judgment by the EU top court clarifies the right of individuals to access their personal data undergoing processing.
Germany Gives Google Users More Power Over Their Data
Google has committed to give its users more control over their data processing – a result of a proceeding by the Bundeskartellamt under new competition law.
Data protection office slaps debt collection agency with €750k fine
The Finnish Data Protection Ombudsman ruled that debt collection company failed to respond to customers’ requests in a timely manner and fined it 750,000 euros.
Italian Supreme Court Grants Global Delisting Order Under National Law
The Italian Supreme Court held that an Italian court or competent data protection authority has jurisdiction to issue a global delisting order.