Norway Fines Microsoft-Owned Xandr Over Grindr User Data
Norway’s DPA fined Xandr €8.6 million for unlawfully processing Grindr users’ personal data and sexual-orientation data in real-time advertising without valid consent.
technology
EDPB publishes statement on smart glasses
The EDPB explains how GDPR rules apply to smart glasses, focusing on recording, transparency, lawful processing, AI, biometric data, and privacy safeguards.
Dutch Retailers Suspend Meta Smart Glass Sales Over Privacy Concerns
Dutch retailers paused sales of Meta’s Ray-Ban smart glasses amid GDPR concerns over covert recording, while regulators and consumer groups consider possible legal action.
Connected Cars May Be Sending Driver Data to Tech Companies
Connected cars and their apps may share VINs, locations, and driver data with tech and advertising companies, raising major GDPR concerns about consent, transparency, and data control.
€2.59 Million Fine for Excessive Fingerprint Collection and Invalid Consent
The Croatian data protection authority (the Agency for the Protection of Personal Data) imposed an administrative fine of €2,590,000 on […]
Irish DPC publishes report on AI insights
The DPC’s 2021–2025 AI supervision report highlights GDPR priorities including lawful basis, transparency, data minimization, children’s protection, and early regulatory engagement.
Dutch AP Publishes GDPR Guidance for Generative AI
The Dutch DPA’s new tool helps organizations assess GDPR compliance across generative AI selection, deployment, and ongoing governance.
Ireland’s DPC Calls for Greater Transparency in AI Development
Ireland’s DPC says AI developers must improve GDPR transparency, clarify lawful training practices, and protect individuals’ rights as agentic AI expands.
OpenAI Manually Reviews ChatGPT Conversations
A report on OpenAI’s Project Lily raises GDPR questions about human review of ChatGPT conversations, anonymization, transparency, lawful processing, and user privacy.
Norway Considers Ban on Facial Recognition in Smart Glasses
Norway is considering stricter smart-glasses rules, including a possible ban on public facial recognition, amid growing GDPR and covert-recording concerns.
Dutch DPA Fines Uber €824.99 Million for GDPR Violations
The Dutch data protection authority fined Uber €824.99 million for automatically deactivating drivers without human review and failing to provide adequate GDPR information.
EDPB orders Belgian DPA full review of cookie banner complaint under GDPR
The EDPB ruled that a GDPR complaint about cookie banners must be assessed on its merits, rejecting claims of abuse of rights by the complainant.