EU Parliament Approves Expanded Europol Biometric Data Use
The EU Parliament’s LIBE Committee approved a proposal to expand Europol’s biometric data processing, sparking privacy concerns ahead of the full plenary vote.
GDPR
EDPB Issues Opinion on EU-Brazil Data Protection Adequacy Decision
The EDPB supports the EU-Brazil data adequacy decision but requests clarifications on DPIAs, transparency, law enforcement data use, and national security definitions.
International privacy regulators target children’s apps and websites in 2025 sweep
Over 30 privacy authorities will review child-focused websites and apps Nov 3–7, 2025, checking data collection, transparency, age assurance, and privacy safeguards under data protection rules.
Latombe to appeal EU–US data transfer ruling
French MP Fabien Latombe will appeal the court ruling on the EU–US Data Privacy Framework, challenging its adequacy over US surveillance and redress shortcomings.
MEPs back new procedures for faster GDPR cross-border enforcement
New EU rules set deadlines and streamlined procedures for cross-border GDPR enforcement, strengthen complainant rights, and promote early consensus among national data protection authorities.
EDPB backs UK adequacy extension under GDPR but urges strict monitoring
EDPB supports six-year extension of UK adequacy decisions to 2031 but urges the Commission to address legal changes, monitor risks and ensure robust oversight and remedies.
EDPS Revises Generative AI Guidance for EU Institutions
EDPS updated guidance strengthens data protection rules for generative AI used by EU institutions, adding a practical compliance checklist and clearer controller/processor responsibilities.
Commission proposes changes to EU cookie consent obligations
The European Commission proposes simplifying cookie consent rules by revising the e-Privacy framework, prompting industry support and privacy-focused opposition ahead of new ad regulation.
Court of Appeal upholds GDPR fine against Grindr
Norwegian court upheld a major GDPR fine against Grindr for improper processing and sharing of sensitive and location data, stressing stricter requirements for consent, minimization and safeguards.
Dutch regulator fines Experian Netherlands €2.7M for unlawful data use
The Dutch regulator fined Experian Netherlands €2.7M for unlawfully collecting and processing personal data for credit assessments without proper transparency, lawful basis, or data subject rights.
NOYB files criminal complaint over Clearview AI’s GDPR violations
Criminal complaint in Austria seeks prosecution of Clearview AI for mass biometric data scraping after multiple EU GDPR fines and bans exposed enforcement limitations against a U.S. company.
EDPB and European Commission Publish Joint Guidelines on DMA and GDPR
EDPB and European Commission issued joint guidelines clarifying how gatekeepers must apply GDPR obligations when complying with the Digital Markets Act; public consultation open until 4 Dec 2025.