German Authorities Oppose Chat Control to Protect Privacy
German data protection authorities urge the EU to stop chat control plans, citing privacy risks, technical flaws, and advocating for child safety by design.
data
Instagram Ends End-to-End Encryption for Direct Messages
Meta ends Instagram’s optional end-to-end encryption for direct messages, reverting to standard encryption that allows message access by the company.
Yango Faces €100 Million GDPR Fine for Sharing Personal Data Outside EU
The Dutch Data Protection Authority fined Yango’s parent company €100 million for inadequate protection of European users’ data transferred to Russia.
Irish DPC Investigates Shein for Potential GDPR Breaches
Ireland’s Data Protection Commission investigates Shein over possible GDPR breaches involving customer data transfers to China.
EU-US Deal Could Grant US Access to Sensitive European Police Data
The EU-US deal may grant US authorities access to sensitive European police data, raising serious privacy and data protection concerns under GDPR.
EDPB Launches DPIA Template to Enhance GDPR Consistency Across Europe
The EDPB has released a DPIA template to help organizations comply with GDPR by structuring and simplifying risk assessments, now open for public feedback until 9 June.
LLMs Enable Large-Scale Deanonymization
LLMs make large-scale deanonymization practical by extracting identity signals from text, retrieving candidates with embeddings, and using reasoning to verify matches at high precision.
EU to Share Biometric Data with US for Visa-Free Travel
EU countries plan to grant the U.S. access to biometric data under a new framework to maintain visa-free travel, raising GDPR compliance and data protection concerns.
EDPS issues Opinion on EU proposal for direct VAT data access to fight fraud
The EDPS supports limited direct access to VAT data for fraud investigations but stresses strict safeguards to protect personal data and ensure compliance with EU laws.
ECHR Finds Italy Violated Privacy Rights by Allowing Tax Access to Bank Data
The ECHR ruled Italy violated privacy rights by allowing tax authorities unchecked access to banking data without judicial oversight or effective remedies.
EU Court Holds Websites Responsible for GDPR Compliance with User Content
The EU court ruled that websites hosting user content must actively protect user privacy and comply with GDPR, including for anonymous users, or face heavy fines.
Digital Omnibus: What’s proposed and why it matters
EU’s Digital Omnibus consolidates data laws and streamlines incident reporting but proposes GDPR/ePrivacy changes that could materially lower privacy protections, drawing strong criticism.