Dutch DPA Fines Uber €824.99 Million for GDPR Violations
The Dutch data protection authority fined Uber €824.99 million for automatically deactivating drivers without human review and failing to provide adequate GDPR information.
The Dutch data protection authority fined Uber €824.99 million for automatically deactivating drivers without human review and failing to provide adequate GDPR information.
Italy fines Telecom Italia €9.5 million for illegal telemarketing using spoofed calls and mandates strict reforms under GDPR enforcement.
Meta lost a legal challenge allowing the Irish Data Protection Commission to impose fines up to €430 million for GDPR violations affecting millions of Facebook users.
The Belgian Data Protection Authority will use criminal courts to enforce GDPR rules after fines were often reduced by the Market Court.
The Dutch Data Protection Authority fined Yango’s parent company €100 million for inadequate protection of European users’ data transferred to Russia.
The EDPB’s 2025 Annual Report highlights increased GDPR enforcement, cross-border cooperation, guidance on new technologies, and €300 million in fines for data protection violations.
Luxembourg’s High Administrative Court annulled Amazon’s €746 million GDPR fine over targeted advertising, requiring fault and proportionality reassessment by the CNPD.
European GDPR fines remain high at €1.2 billion in 2025, with a 22% rise in daily data breach notifications and increasing regulatory focus on data security and compensation claims.
Spain’s data protection authority, the Agencia Española de Protección de Datos (AEPD), has imposed a €500,000 fine on Fútbol Club […]
The Court of Justice ruled WhatsApp can challenge the EDPB binding decision on GDPR violations, sending the case back for a full review.
The EU court ruled that websites hosting user content must actively protect user privacy and comply with GDPR, including for anonymous users, or face heavy fines.
Norwegian court upheld a major GDPR fine against Grindr for improper processing and sharing of sensitive and location data, stressing stricter requirements for consent, minimization and safeguards.