EDPB announces 2026 Coordinated Enforcement Framework on GDPR transparency
The EDPB’s 2026 Coordinated Enforcement Framework targets GDPR transparency obligations, with 25 DPAs assessing compliance and sharing findings for EU-wide improvements.
DPA
CJEU to Clarify Consent Under GDPR and ePrivacy Directive
The CJEU will clarify if broad consent for data use by “partners” in direct marketing meets GDPR and ePrivacy Directive requirements.
GDPR Fines and Data Breach Survey 2025
European GDPR fines remain high at €1.2 billion in 2025, with a 22% rise in daily data breach notifications and increasing regulatory focus on data security and compensation claims.
Spanish Data Protection Authority Issues Guidance on Agentic AI
The Spanish Data Protection Authority issues detailed GDPR guidance to help organizations manage privacy risks of autonomous agentic AI systems.
Dutch DPA Warns of OpenClaw AI Security Risks
The Dutch Data Protection Authority warns against using OpenClaw AI due to serious security risks and urges compliance with GDPR to protect personal data.
FC Barcelona faces €500,000 GDPR fine over biometric data processing violations
Spain’s data protection authority, the Agencia Española de Protección de Datos (AEPD), has imposed a €500,000 fine on Fútbol Club […]
Court Confirms WhatsApp’s Right to Contest EDPB GDPR Fine Decision
The Court of Justice ruled WhatsApp can challenge the EDPB binding decision on GDPR violations, sending the case back for a full review.
Austrian DPA Finds Microsoft’s Tracking of Students Breaches GDPR
Austrian data authority ruled Microsoft illegally tracked a minor via Microsoft 365 Education cookies without consent, ordering the company to stop within four weeks.
EDPB Submits Input for Law Enforcement Directive Evaluation
The EDPB advises the European Commission on improving the Law Enforcement Directive, emphasizing legal clarity, technology compliance, and resource needs for data protection authorities.
EDPB meets with DPAs from EU adequacy countries to strengthen GDPR cooperation
The EDPB and DPAs from countries with EU adequacy decisions strengthened cooperation in data protection enforcement and advisory priorities during their second joint meeting.
Regulation (EU) 2025/2518 on Additional GDPR Enforcement Procedures Published
Regulation (EU) 2025/2518 sets new procedural rules to enhance cooperation and efficiency in enforcing GDPR across EU member states in cross-border cases.
Commission Investigates Irish Data Protection Commissioner Appointment
The European Commission seeks more information from Ireland on the appointment of Niamh Sweeney as Data Protection Commissioner amid concerns over independence and conflicts of interest.