Regulation (EU) 2025/2518 on Additional GDPR Enforcement Procedures Published
Regulation (EU) 2025/2518 sets new procedural rules to enhance cooperation and efficiency in enforcing GDPR across EU member states in cross-border cases.
GDPR
Commission Investigates Irish Data Protection Commissioner Appointment
The European Commission seeks more information from Ireland on the appointment of Niamh Sweeney as Data Protection Commissioner amid concerns over independence and conflicts of interest.
Spanish Media Win 481 Million Euro Damages Against Meta over GDPR breach
A Madrid court orders Meta to pay 481 million euros for GDPR violations harming Spanish media by exploiting user data for advertising.
Commission publishes Digital Omnibus proposal
The EU’s new digital package simplifies AI, data, and cybersecurity rules and introduces a European Business Wallet to reduce administrative costs and boost business innovation.
EU Court Clarifies Direct Marketing and Soft Opt-In for Email Newsletters
The Court confirmed unsolicited newsletters promoting paid services fall under e-Privacy Directive’s direct marketing rules, overriding GDPR’s general lawfulness conditions.
Council Approves Regulation to Streamline Cross-Border GDPR Complaints
The Council approved new rules to speed up and harmonize cross-border GDPR complaints, with uniform criteria, clear procedures, and strict investigation deadlines.
Digital Omnibus: What’s proposed and why it matters
EU’s Digital Omnibus consolidates data laws and streamlines incident reporting but proposes GDPR/ePrivacy changes that could materially lower privacy protections, drawing strong criticism.
EDPB Seeks Feedback on GDPR Template Development
The EDPB invites public input to develop practical GDPR compliance templates, including DPIA and breach notification forms, by December 3, 2025.
EU Parliament Approves Expanded Europol Biometric Data Use
The EU Parliament’s LIBE Committee approved a proposal to expand Europol’s biometric data processing, sparking privacy concerns ahead of the full plenary vote.
EDPB Issues Opinion on EU-Brazil Data Protection Adequacy Decision
The EDPB supports the EU-Brazil data adequacy decision but requests clarifications on DPIAs, transparency, law enforcement data use, and national security definitions.
International privacy regulators target children’s apps and websites in 2025 sweep
Over 30 privacy authorities will review child-focused websites and apps Nov 3–7, 2025, checking data collection, transparency, age assurance, and privacy safeguards under data protection rules.
Latombe to appeal EU–US data transfer ruling
French MP Fabien Latombe will appeal the court ruling on the EU–US Data Privacy Framework, challenging its adequacy over US surveillance and redress shortcomings.