Irish DPA Publishes 2025 Case Studies
The Irish Data Protection Commission’s 2025 case studies reveal key trends in GDPR enforcement, with fines up to €1.2 million for breaches involving access requests, security failures, and transparency issues.
data subject rights
Swedish Court Uphelds GDPR Fine on Spotify for Data Processing Failures
Court upheld Spotify AB’s 5.2 million euros fine for failing to provide clear GDPR information and safeguards for personal data processing and transfers.
EDPB Launches 2025 Action on Right to Erasure
The EDPB has initiated its 2025 Coordinated Enforcement Framework focusing on the right to erasure, involving 32 European Data Protection Authorities.
EU Court rules GDPR complaints can’t be rejected based on frequency
The CJEU ruled that complaint frequency doesn’t invalidate GDPR complaints unless they are clearly vexatious or abusive, impacting data protection enforcement across the EU.
Netflix Fined €4.75 Million for Insufficient Transparency
The Dutch DPA fines Netflix €4.75 million for inadequate customer information on personal data handling, violating GDPR regulations.
EDPB Chooses Right to Erasure for Fourth Coordinated Enforcement Action
The EDPB will launch a coordinated enforcement action in 2025 to assess the implementation of the right to erasure under GDPR.
EDPB Issues Guidelines on Legitimate Interest for Data Processing
The EDPB has issued guidelines on legitimate interests in data processing, emphasizing strict interpretation and the necessity of balancing individual rights.
GDPR Complaint Targets Microsoft’s Xandr for Data Access Denials
A complaint supported by European privacy advocacy group, noyb, targets Microsoft-owned adtech business Xandr for GDPR violations. The complaint alleges […]
GDPR Right of Access Under EDPB’s Enforcement Spotlight in 2024
The EDPB initiates a 2024 action focusing on GDPR’s right of access to ensure compliance across the EU.
noyb files complaint against Austria’s Creditors’ association for profiting from GDPR trights
KSV1870, a creditors’ association, is accused of profiting from the right of access to personal data under the GDPR by misleading individuals, especially foreigners, into purchasing a high-priced “InfoPass” instead of obtaining a free copy of their data.
Patients have the right to first copy of medical records free of charge, CJEU rules
Judgment by the EU top court clarifies the right of individuals to access their personal data undergoing processing.
Germany Gives Google Users More Power Over Their Data
Google has committed to give its users more control over their data processing – a result of a proceeding by the Bundeskartellamt under new competition law.