EDPS Reviews European Commission’s Microsoft 365 Compliance
The EDPS is assessing the European Commission’s compliance with its March 2024 decision on Microsoft 365 usage, following identified data protection violations.
GDPR
Noyb Files Complaint Against BeReal Over Consent Collecton Tactics
Noyb has filed a complaint against BeReal for its data consent practices, claiming it pressures users into accepting tracking for personalized advertising.
Orange Fined €50 Million for GDPR Violations in France
CNIL fines Orange S.A. €50 million for sending unsolicited ads and misusing user consent for tracking cookies, highlighting GDPR compliance issues.
Meta Limits Advertisers’ Access to Health Data
Meta plans to restrict advertisers’ access to health-related data starting January 2025, impacting marketing strategies and data collection practices.
EDPB Publishes Guidelines on GDPR Data Transfers to Non-European Authorities
EDPB issued guidelines on GDPR Article 48 for data transfers to third country authorities and approved a new European Data Protection Seal.
noyb Gains Qualified Entity Status for GDPR Collective Redress in the EU
noyb has received Qualified Entity status in Austria and Ireland, enabling it to initiate collective redress actions for GDPR violations across the EU.
EDPB Adopts Statement on GDPR Application Report
EDPB adopts a statement on GDPR implementation, emphasizing legal clarity, educational resources, and the need for more support for data protection authorities.
Monaco’s New Law Aligns with EU GDPR
Monaco adopts new data protection laws aligning with European standards, enhancing individual rights and establishing a new authority for personal data protection.
WhatsApp Appeals €225 Million GDPR Fine to EU’s Top Court
WhatsApp appeals a €225 million fine at the CJEU, challenging the EDPB’s decision over alleged GDPR violations related to user data transparency.
Meta to Face €550 Million Lawsuit in Spain for Data Protection Violations
Meta faces a €550 million lawsuit in Spain for allegedly violating E.U. data protection laws by unlawfully collecting user data for targeted advertising.
Irish DPC Looks to EDPB for AI Act Compliance Guidance
The Irish DPC awaits EDPB guidance on its role in the AI Act, as it works to ensure GDPR compliance amid challenges from Big Tech companies.
Norway DPA publishes statement on X’s use of data for AI training
X has resumed processing EU/EEA users’ posts for AI training, requiring users to opt out to protect their personal data.