Stricter Cloud Data Regulations for Healthcare in Germany
Germany’s new Section 393 SGB V establishes stricter requirements for processing health data in cloud-computing, impacting healthcare providers and medical research.
GDPR
Clearview AI Fined €30.5 Million for GDPR Violation
Clearview AI faces a €30.5 million fine from the Dutch DPA for illegal photo collection, bringing its total EU fines to €90.5 million under GDPR violations.
Uber Fined €290 Million for Transferring Driver Data to US
Uber faces a €290 million fine for transferring European drivers’ personal data to the U.S., violating GDPR regulations, and plans to appeal the decision.
noyb lodges complaints against EU Parliament over data breach
A data breach in the European Parliament’s recruitment platform, PEOPLE, compromised sensitive information of over 8,000 individuals, raising concerns about security measures and GDPR compliance.
noyb takes Swedish DPA to the Court Over GDPR Complaint Handling
The case against Sweden’s IMY raises concerns over the enforcement of data protection rights under EU law, prompting noyb to appeal for proper complaint handling.
Swedish DPA Publishes New Accreditation Standards for GDPR Certification Bodies
IMY has established accreditation requirements for certification bodies to enhance GDPR compliance and data protection in Sweden and the EEA.
X Faces Legal Action from Noyb Over User Data Misuse for AI Training
Noyb has filed complaints against X for using personal data of 60 million EU users for AI training without consent, urging compliance with GDPR regulations.
European Commission proposes enforcement instead amending GDPR
The European Commission will focus on enforcing the GDPR rather than revising it, addressing enforcement issues while navigating AI’s impact on data privacy.
Noyb Challenges Hamburg DPA Over Der Spiegel’s Pay or OK Model
Noyb is suing the Hamburg data protection authority to overturn its ruling that Der Spiegel’s “pay or OK” model is lawful, claiming the authority acted as both advisor and judge.
French Data Protection Authority (CNIL) Gains New Powers
France’s law No. 2024-449 enhances the CNIL’s enforcement powers, enabling document seizure and oversight of digital service regulations.
Regulators Challenge X’s Data Collection for AI Training
X faces scrutiny from UK and Irish regulators over default settings allowing user posts to be used for AI training without explicit consent.
First Review of EU-U.S. Data Privacy Framework
The first review of the EU-U.S. Data Privacy Framework highlights its success and ongoing commitment to data protection, with over €1 trillion in trade supported.