EDPB Issues New Guidance on GDPR Administrative Fines and the DSA
The EDPB adopted new guidance on GDPR fines, corrective powers, and the interaction between the GDPR and the Digital Services Act.
guidance
Dutch AP Publishes GDPR Guidance for Generative AI
The Dutch DPA’s new tool helps organizations assess GDPR compliance across generative AI selection, deployment, and ongoing governance.
CNIL Issues GDPR Guidance on Connected Vehicle and Geolocation Data
The CNIL’s new guidance clarifies GDPR compliance for connected vehicle data, focusing on geolocation, stakeholder roles, legal bases, and cybersecurity in the EU automotive sector.
EDPB and AMLA Plan Joint Guidance on AML Data Sharing
EDPB and AMLA will prepare guidance on GDPR-compliant AML information-sharing partnerships before Article 75 AMLR applies in July 2027.
EDPB publishes annual report 2025
The EDPB’s 2025 Annual Report highlights increased GDPR enforcement, cross-border cooperation, guidance on new technologies, and €300 million in fines for data protection violations.
EDPB Adopts Guidelines on Personal Data Processing for Scientific Research
The EDPB issued guidelines to clarify GDPR compliance for scientific research, covering consent, data subject rights, responsibilities, and technical safeguards.
Spanish Data Protection Authority Issues Guidance on Agentic AI
The Spanish Data Protection Authority issues detailed GDPR guidance to help organizations manage privacy risks of autonomous agentic AI systems.
EDPS Introduces Binding Rules to Safeguard DPO Independence in EU Bodies
The EDPS has introduced new guidance and binding rules to protect the independence and role of Data Protection Officers across all EU institutions.
EDPB Adopts Updated Recommendations for Processor Binding Corporate Rules
The EDPB updated recommendations for Processor Binding Corporate Rules to clarify GDPR compliance and streamline intra-group data transfers outside the EEA.
EDPB Issues Recommendations on Legal Basis for User Accounts on E-commerce Sites
The EDPB recommends e-commerce sites offer guest checkout to protect user privacy, allowing mandatory accounts only for specific services under GDPR rules.
EDPS Revises Generative AI Guidance for EU Institutions
EDPS updated guidance strengthens data protection rules for generative AI used by EU institutions, adding a practical compliance checklist and clearer controller/processor responsibilities.
EDPB and European Commission Publish Joint Guidelines on DMA and GDPR
EDPB and European Commission issued joint guidelines clarifying how gatekeepers must apply GDPR obligations when complying with the Digital Markets Act; public consultation open until 4 Dec 2025.