EDPB and EDPS Issue Joint Opinion on Digital Omnibus
The EDPB and EDPS provide a Joint Opinion on the Digital Omnibus Regulation, urging caution on GDPR changes while supporting simplification and stronger oversight.
GDPR
Court Confirms WhatsApp’s Right to Contest EDPB GDPR Fine Decision
The Court of Justice ruled WhatsApp can challenge the EDPB binding decision on GDPR violations, sending the case back for a full review.
Austrian DPA Finds Microsoft’s Tracking of Students Breaches GDPR
Austrian data authority ruled Microsoft illegally tracked a minor via Microsoft 365 Education cookies without consent, ordering the company to stop within four weeks.
EDPB Adopts Updated Recommendations for Processor Binding Corporate Rules
The EDPB updated recommendations for Processor Binding Corporate Rules to clarify GDPR compliance and streamline intra-group data transfers outside the EEA.
EU to Share Biometric Data with US for Visa-Free Travel
EU countries plan to grant the U.S. access to biometric data under a new framework to maintain visa-free travel, raising GDPR compliance and data protection concerns.
EU Extends UK GDPR Adequacy Decision for Six More Years
The EU extended the UK’s GDPR adequacy decision for six years, ensuring continued free and safe data transfers until 2031 with a review in four years.
EDPB Issues Recommendations on Legal Basis for User Accounts on E-commerce Sites
The EDPB recommends e-commerce sites offer guest checkout to protect user privacy, allowing mandatory accounts only for specific services under GDPR rules.
EFTA Court Judgment on GDPR Article 38(3) and DPO Dismissal Case
The EFTA Court ruled that dismissing a data protection officer without just cause is allowed under GDPR if unrelated to their duties and national law remedies unlawful dismissal.
Slovenia’s officials use GDPR to threaten investigative journalism
Slovenian investigative newsroom Oštro faces legal pressure using GDPR complaints by officials to silence scrutiny of public officials’ asset transparency.
EU Court Holds Websites Responsible for GDPR Compliance with User Content
The EU court ruled that websites hosting user content must actively protect user privacy and comply with GDPR, including for anonymous users, or face heavy fines.
EU justice chief says GDPR reforms push limits
The EU Commission proposes GDPR reforms to ease business rules and simplify cookie consent while maintaining strong privacy protections for European citizens.
EU Publishers Criticize Digital Omnibus for GDPR Consent Challenges
The EU Digital Omnibus complicates consent management for publishers, risking lower consent rates and favoring big tech with closed ecosystems.