GDPR Fines and Data Breach Survey 2025
European GDPR fines remain high at €1.2 billion in 2025, with a 22% rise in daily data breach notifications and increasing regulatory focus on data security and compensation claims.
GDPR
EDPB and EDPS Issue Joint Opinion on the European Biotech Act Proposal
The EDPB and EDPS support the European Biotech Act proposal while urging strong data protection measures for clinical trial participants and clear legal roles under GDPR.
EDPB publishes 2025 Report on Coordinated Enforcement Action
The EDPB’s 2025 report reviews GDPR’s right to erasure, highlighting challenges and recommending best practices for effective data deletion across the EU.
Spanish Data Protection Authority Issues Guidance on Agentic AI
The Spanish Data Protection Authority issues detailed GDPR guidance to help organizations manage privacy risks of autonomous agentic AI systems.
Cisco Privacy Benchmark Study 2026
The Cisco Privacy Benchmark Study 2026 shows that GDPR-driven privacy investments strengthen trust, reduce risk, and deliver clear business value across EU organizations.
Dutch DPA Warns of OpenClaw AI Security Risks
The Dutch Data Protection Authority warns against using OpenClaw AI due to serious security risks and urges compliance with GDPR to protect personal data.
FC Barcelona faces €500,000 GDPR fine over biometric data processing violations
Spain’s data protection authority, the Agencia Española de Protección de Datos (AEPD), has imposed a €500,000 fine on Fútbol Club […]
EU Council Rejects Changes to GDPR Personal Data Definition
EU countries reject the Commission’s proposal to change the GDPR personal data definition, prioritizing stronger privacy protections and the EDPB’s guidance on pseudonymisation.
EDPS issues Opinion on extension of CSAM rules
The EDPS calls for improved safeguards and legal clarity in extending EU interim rules to combat child sexual abuse online, emphasizing privacy and targeted data scanning.
EDPB and EDPS Issue Joint Opinion on Digital Omnibus
The EDPB and EDPS provide a Joint Opinion on the Digital Omnibus Regulation, urging caution on GDPR changes while supporting simplification and stronger oversight.
Court Confirms WhatsApp’s Right to Contest EDPB GDPR Fine Decision
The Court of Justice ruled WhatsApp can challenge the EDPB binding decision on GDPR violations, sending the case back for a full review.
Austrian DPA Finds Microsoft’s Tracking of Students Breaches GDPR
Austrian data authority ruled Microsoft illegally tracked a minor via Microsoft 365 Education cookies without consent, ordering the company to stop within four weeks.