EDPB Adopts Updated Recommendations for Processor Binding Corporate Rules
The EDPB updated recommendations for Processor Binding Corporate Rules to clarify GDPR compliance and streamline intra-group data transfers outside the EEA.
GDPR
EU to Share Biometric Data with US for Visa-Free Travel
EU countries plan to grant the U.S. access to biometric data under a new framework to maintain visa-free travel, raising GDPR compliance and data protection concerns.
EU Extends UK GDPR Adequacy Decision for Six More Years
The EU extended the UK’s GDPR adequacy decision for six years, ensuring continued free and safe data transfers until 2031 with a review in four years.
EDPB Issues Recommendations on Legal Basis for User Accounts on E-commerce Sites
The EDPB recommends e-commerce sites offer guest checkout to protect user privacy, allowing mandatory accounts only for specific services under GDPR rules.
EFTA Court Judgment on GDPR Article 38(3) and DPO Dismissal Case
The EFTA Court ruled that dismissing a data protection officer without just cause is allowed under GDPR if unrelated to their duties and national law remedies unlawful dismissal.
Slovenia’s officials use GDPR to threaten investigative journalism
Slovenian investigative newsroom Oštro faces legal pressure using GDPR complaints by officials to silence scrutiny of public officials’ asset transparency.
EU Court Holds Websites Responsible for GDPR Compliance with User Content
The EU court ruled that websites hosting user content must actively protect user privacy and comply with GDPR, including for anonymous users, or face heavy fines.
EU justice chief says GDPR reforms push limits
The EU Commission proposes GDPR reforms to ease business rules and simplify cookie consent while maintaining strong privacy protections for European citizens.
EU Publishers Criticize Digital Omnibus for GDPR Consent Challenges
The EU Digital Omnibus complicates consent management for publishers, risking lower consent rates and favoring big tech with closed ecosystems.
Regulation (EU) 2025/2518 on Additional GDPR Enforcement Procedures Published
Regulation (EU) 2025/2518 sets new procedural rules to enhance cooperation and efficiency in enforcing GDPR across EU member states in cross-border cases.
Commission Investigates Irish Data Protection Commissioner Appointment
The European Commission seeks more information from Ireland on the appointment of Niamh Sweeney as Data Protection Commissioner amid concerns over independence and conflicts of interest.
Spanish Media Win 481 Million Euro Damages Against Meta over GDPR breach
A Madrid court orders Meta to pay 481 million euros for GDPR violations harming Spanish media by exploiting user data for advertising.