EDPB Issues New Guidance on GDPR Administrative Fines and the DSA
The EDPB adopted new guidance on GDPR fines, corrective powers, and the interaction between the GDPR and the Digital Services Act.
DPA
Norway Fines Microsoft-Owned Xandr Over Grindr User Data
Norway’s DPA fined Xandr €8.6 million for unlawfully processing Grindr users’ personal data and sexual-orientation data in real-time advertising without valid consent.
Spanish DPA Fines Securitas Direct €100,000 for Chargeable GDPR Hotline
The Spanish DPA fined Securitas Direct €100,000 for directing people to a chargeable phone number to exercise GDPR rights and ordered the company to replace its notices.
€2.59 Million Fine for Excessive Fingerprint Collection and Invalid Consent
The Croatian data protection authority (the Agency for the Protection of Personal Data) imposed an administrative fine of €2,590,000 on […]
Dutch DPA Fines Uber €824.99 Million for GDPR Violations
The Dutch data protection authority fined Uber €824.99 million for automatically deactivating drivers without human review and failing to provide adequate GDPR information.
Telecom Italia Fined €9.5 Million for GDPR Violations in Telemarketing Scheme
Italy fines Telecom Italia €9.5 million for illegal telemarketing using spoofed calls and mandates strict reforms under GDPR enforcement.
Ireland Sees Unprecedented Rise in GDPR Complaints
The Data Protection Commission saw a 45% rise in complaints in 2025, highlighted AI-related complexities.
CNIL Issues GDPR Guidance on Connected Vehicle and Geolocation Data
The CNIL’s new guidance clarifies GDPR compliance for connected vehicle data, focusing on geolocation, stakeholder roles, legal bases, and cybersecurity in the EU automotive sector.
EDPB demands clear legal basis for cross-regulatory GDPR information sharing
The EDPB calls for legal clarity on cross-regulatory information sharing and stronger cooperation to improve GDPR enforcement amid rising complaints and AI challenges.
EDPB orders Belgian DPA full review of cookie banner complaint under GDPR
The EDPB ruled that a GDPR complaint about cookie banners must be assessed on its merits, rejecting claims of abuse of rights by the complainant.
Luxembourg Sees Surge in GDPR Complaints
Luxembourg’s CNPD reported a 40% rise in GDPR complaints in 2025, driven by access, erasure, and lawful-processing concerns.
EDPB Launches New Initiatives to Enhance GDPR Consistency
The EDPB introduces new tools and cooperation efforts to simplify GDPR compliance, support innovation, and ensure consistent data protection enforcement across Europe.