EDPB Issues New Guidance on GDPR Administrative Fines and the DSA
The EDPB adopted new guidance on GDPR fines, corrective powers, and the interaction between the GDPR and the Digital Services Act.
GDPR
EDPB publishes statement on smart glasses
The EDPB explains how GDPR rules apply to smart glasses, focusing on recording, transparency, lawful processing, AI, biometric data, and privacy safeguards.
Dutch Retailers Suspend Meta Smart Glass Sales Over Privacy Concerns
Dutch retailers paused sales of Meta’s Ray-Ban smart glasses amid GDPR concerns over covert recording, while regulators and consumer groups consider possible legal action.
Spanish DPA Fines Securitas Direct €100,000 for Chargeable GDPR Hotline
The Spanish DPA fined Securitas Direct €100,000 for directing people to a chargeable phone number to exercise GDPR rights and ordered the company to replace its notices.
€2.59 Million Fine for Excessive Fingerprint Collection and Invalid Consent
The Croatian data protection authority (the Agency for the Protection of Personal Data) imposed an administrative fine of €2,590,000 on […]
Irish DPC publishes report on AI insights
The DPC’s 2021–2025 AI supervision report highlights GDPR priorities including lawful basis, transparency, data minimization, children’s protection, and early regulatory engagement.
Dutch AP Publishes GDPR Guidance for Generative AI
The Dutch DPA’s new tool helps organizations assess GDPR compliance across generative AI selection, deployment, and ongoing governance.
Ireland’s DPC Calls for Greater Transparency in AI Development
Ireland’s DPC says AI developers must improve GDPR transparency, clarify lawful training practices, and protect individuals’ rights as agentic AI expands.
Irish DPC Fines Google €403 Million Over Location Tracking
Ireland’s DPC fined Google €403 million for GDPR breaches involving location data transparency, lawfulness, accountability, and retention.
OpenAI Manually Reviews ChatGPT Conversations
A report on OpenAI’s Project Lily raises GDPR questions about human review of ChatGPT conversations, anonymization, transparency, lawful processing, and user privacy.
Revolut Confirms Data Breach Through Government Email Scam
Revolut disclosed that fraudulent requests sent from a legitimate government email domain exposed sensitive customer data, including identity documents and financial information.
Noyb Targets Schufa Over Alleged Shadow Database
Noyb, the European Centre for Digital Rights, has formally challenged Schufa’s alleged retention and use of historical consumer data. The […]