Irish DPA Publishes 2025 Case Studies
The Irish Data Protection Commission’s 2025 case studies reveal key trends in GDPR enforcement, with fines up to €1.2 million for breaches involving access requests, security failures, and transparency issues.
GDPR
CNIL Analysis Shows GDPR’s Economic Impact on Cybersecurity and Identity Theft Prevention
GDPR has significantly reduced cyber damages in the EU by encouraging better cybersecurity investments and lowering identity theft losses by up to €1.4 billion.
Germany’s Data Watchdog Calls for DeepSeek Ban
Germany’s data watchdog accuses DeepSeek of unlawful data transfers to China, prompting potential EU-wide app bans under GDPR rules.
New Regulation to Strengthen GDPR Enforcement and Cross-Border Cooperation
The EU’s new Draft Regulation aims to speed up GDPR enforcement by improving cooperation between data protection authorities and setting clear investigation deadlines.
Commission Officially Extends EU-UK Data Adequacy Decisions by Six Months
The EU Commission extended data adequacy decisions with the UK by six months to assess the new UK Data Bill while ensuring uninterrupted cross-border data flow.
Norway Proposes Law to Ban Social Media for Children Under 15
Norway proposes a law banning social media use for children under 15, raising GDPR consent age, and enhancing protections against online harm.
Data Protection Commission Issues €550,000 Fine Over DSP Biometric Data Use
The DPC fined the Department of Social Protection €550,000 for GDPR violations related to biometric data processing in Public Services Card registration.
Swedish Court Uphelds GDPR Fine on Spotify for Data Processing Failures
Court upheld Spotify AB’s 5.2 million euros fine for failing to provide clear GDPR information and safeguards for personal data processing and transfers.
EU Experts Warn Against Weakening Encryption in ProtectEU Plan
EU experts warn that weakening encryption under ProtectEU risks privacy, security, and human rights, urging the Commission to protect strong encryption standards.
Vodafone Faces €45 Million GDPR Fine Over Partner Fraud and Security Issues
The BfDI found Vodafone €45 million for data protection failures linked to partner fraud and security flaws, prompting the company to enhance its compliance and security measures.
Meta and Yandex Exploit Android Browsers to De-Anonymize User Data
Meta and Yandex exploit Android local ports to link browsing data with app identities, bypassing privacy protections and raising serious GDPR concerns.
Civil Society Urges EU to Revoke UK Data Adequacy
Civil society groups warn the UK’s data adequacy status with the EU is at risk due to weakening data protection laws and enforcement.