Dutch DPA Warns of OpenClaw AI Security Risks
The Dutch Data Protection Authority warns against using OpenClaw AI due to serious security risks and urges compliance with GDPR to protect personal data.
GDPR
FC Barcelona faces €500,000 GDPR fine over biometric data processing violations
Spain’s data protection authority, the Agencia Española de Protección de Datos (AEPD), has imposed a €500,000 fine on Fútbol Club […]
EU Council Rejects Changes to GDPR Personal Data Definition
EU countries reject the Commission’s proposal to change the GDPR personal data definition, prioritizing stronger privacy protections and the EDPB’s guidance on pseudonymisation.
EDPS issues Opinion on extension of CSAM rules
The EDPS calls for improved safeguards and legal clarity in extending EU interim rules to combat child sexual abuse online, emphasizing privacy and targeted data scanning.
EDPB and EDPS Issue Joint Opinion on Digital Omnibus
The EDPB and EDPS provide a Joint Opinion on the Digital Omnibus Regulation, urging caution on GDPR changes while supporting simplification and stronger oversight.
Court Confirms WhatsApp’s Right to Contest EDPB GDPR Fine Decision
The Court of Justice ruled WhatsApp can challenge the EDPB binding decision on GDPR violations, sending the case back for a full review.
Austrian DPA Finds Microsoft’s Tracking of Students Breaches GDPR
Austrian data authority ruled Microsoft illegally tracked a minor via Microsoft 365 Education cookies without consent, ordering the company to stop within four weeks.
EDPB Adopts Updated Recommendations for Processor Binding Corporate Rules
The EDPB updated recommendations for Processor Binding Corporate Rules to clarify GDPR compliance and streamline intra-group data transfers outside the EEA.
EU to Share Biometric Data with US for Visa-Free Travel
EU countries plan to grant the U.S. access to biometric data under a new framework to maintain visa-free travel, raising GDPR compliance and data protection concerns.
EU Extends UK GDPR Adequacy Decision for Six More Years
The EU extended the UK’s GDPR adequacy decision for six years, ensuring continued free and safe data transfers until 2031 with a review in four years.
EDPB Issues Recommendations on Legal Basis for User Accounts on E-commerce Sites
The EDPB recommends e-commerce sites offer guest checkout to protect user privacy, allowing mandatory accounts only for specific services under GDPR rules.
EFTA Court Judgment on GDPR Article 38(3) and DPO Dismissal Case
The EFTA Court ruled that dismissing a data protection officer without just cause is allowed under GDPR if unrelated to their duties and national law remedies unlawful dismissal.