The EDPB has published an update of the One-Stop-Shop (OSS) case digest on right to object and right to erasure. This project has been developed in the framework of the Support Pool of Experts programme, which aims to support cooperation...
The ruling of the US Supreme Court in the case of Trump v. Slaughter calls into question the legality of transatlantic data transfers following its decision of 29.06.2026. The U.S. Supreme Court was to rule on the legality of President Trump's firing...
France's data protection authority (CNIL) has imposed a €5 million fine on IQVIA OPERATIONS FRANCE after finding multiple GDPR and French Data Protection Act violations relating to two large health data warehouses containing...
The Dutch data protection authority, Autoriteit Persoonsgegevens, has imposed a fine of €100 million on the taxi app Yango. The reason was the unauthorized transfer of personal data belonging to European users to Russia. Although...
The French data protection authority CNIL has imposed a fine of €3.5 million on a French retail company. The reason was the unauthorised disclosure of personal customer data to a social network without a sufficient legal basis and...
The EU AI Act may have entered into force, but the regulatory framework surrounding AI is far from settled. In order to address this, the European Commission's proposed AI Act Omnibus package demonstrates that...
The Italian Supervisory Authority (Garante) has ordered Amazon Italia Logistica S.r.l. to immediately cease certain employee data processing activities affecting more than 1,800 workers, citing serious violations of the General...
In a case of non-cooperation, the Romanian data protection authority ANSPDCP imposed a fine of 2,000 euros on a dental clinic. The case began when the clinic itself reported a data breach to the authority.
A company received a data access request under GDPR Article 15. The data subject received a 15-page document labeled as a data privacy disclosure. At the same time the company confirmed that the data subject’s personal data...
