Court Confirms WhatsApp’s Right to Contest EDPB GDPR Fine Decision
The Court of Justice ruled WhatsApp can challenge the EDPB binding decision on GDPR violations, sending the case back for a full review.
DPA
Austrian DPA Finds Microsoft’s Tracking of Students Breaches GDPR
Austrian data authority ruled Microsoft illegally tracked a minor via Microsoft 365 Education cookies without consent, ordering the company to stop within four weeks.
EDPB Submits Input for Law Enforcement Directive Evaluation
The EDPB advises the European Commission on improving the Law Enforcement Directive, emphasizing legal clarity, technology compliance, and resource needs for data protection authorities.
EDPB meets with DPAs from EU adequacy countries to strengthen GDPR cooperation
The EDPB and DPAs from countries with EU adequacy decisions strengthened cooperation in data protection enforcement and advisory priorities during their second joint meeting.
Regulation (EU) 2025/2518 on Additional GDPR Enforcement Procedures Published
Regulation (EU) 2025/2518 sets new procedural rules to enhance cooperation and efficiency in enforcing GDPR across EU member states in cross-border cases.
Commission Investigates Irish Data Protection Commissioner Appointment
The European Commission seeks more information from Ireland on the appointment of Niamh Sweeney as Data Protection Commissioner amid concerns over independence and conflicts of interest.
Council Approves Regulation to Streamline Cross-Border GDPR Complaints
The Council approved new rules to speed up and harmonize cross-border GDPR complaints, with uniform criteria, clear procedures, and strict investigation deadlines.
Court of Appeal upholds GDPR fine against Grindr
Norwegian court upheld a major GDPR fine against Grindr for improper processing and sharing of sensitive and location data, stressing stricter requirements for consent, minimization and safeguards.
Dutch regulator fines Experian Netherlands €2.7M for unlawful data use
The Dutch regulator fined Experian Netherlands €2.7M for unlawfully collecting and processing personal data for credit assessments without proper transparency, lawful basis, or data subject rights.
Privacy groups criticise appointment of third Irish DPA Commissioner
Privacy groups warned that the appointment of a former Meta executive as a DPC Commissioner risks conflicts of interest and could undermine independent GDPR enforcement.
NOYB files criminal complaint over Clearview AI’s GDPR violations
Criminal complaint in Austria seeks prosecution of Clearview AI for mass biometric data scraping after multiple EU GDPR fines and bans exposed enforcement limitations against a U.S. company.
EDPB launches coordinated enforcement action on GDPR transparency obligations
The EDPB will coordinate an EU-wide enforcement action on GDPR transparency and information obligations, with national DPAs participating voluntarily and the action launching in 2026.