PrivacySignal
Enforcement

GDPR EU representative enforcement continues

iapp.org · · International · Enforcement

EU data protection authorities are continuing to enforce GDPR requirements around the designation of local representatives for non-EU companies doing business in Europe. The trend signals that regulators are treating this structural compliance obligation as a live enforcement priority, not a paper formality.

Why this matters: If your company is based outside the EU but handles data from European residents, you are legally required to appoint someone inside the EU who can be reached by regulators and individuals. That person or entity is not a technicality. They are the contact point when something goes wrong. Companies that treat this as a checkbox are learning it can become a real liability. Regulators are not waiting for a bigger violation to act. This is the kind of procedural gap that turns into a fine before the underlying data practices ever get examined.

Who should care: Lawyers · Privacy officers · Compliance · AI governance

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Related stories

Enforcement
HIPAA Journal · · US Federal

OSF Healthcare System Pays $552,250 to Settle OCR HIPAA Investigation

OSF Healthcare System has agreed to pay $552,250 to settle a HIPAA investigation by the HHS Office for Civil Rights. The settlement resolves findings related to OSF Healthcare and its affiliated covered entities, though the specific violations were not detailed in the available excerpt.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals

#enforcement#healthcare Read original →
Enforcement
T Tech Policy Press · · International

Brussels Gains New AI Act Enforcement Powers as Autonomous AI Tests Regulators

The European Union's AI Act enforcement framework is gaining new teeth in Brussels as regulators begin confronting the practical challenges posed by autonomous AI systems. The development marks a shift from the law's drafting phase toward active oversight of real-world AI deployment.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

#enforcement#ai-governance#regulation#ai Read original →
Enforcement
noyb (None of Your Business) · · EU

1,741 “informed” consents with one click?! GDPR complaint against dict.cc filed

Privacy advocacy group noyb has filed a GDPR complaint against the online dictionary dict.cc, alleging that the site's cookie consent mechanism bundles agreement with 1,741 third-party partners into a single click, making genuine informed consent effectively impossible.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy

#enforcement#gdpr#surveillance#privacy Read original →
Enforcement
The Guardian — Tech · · International

Elon Musk’s xAI sues Minnesota over law banning ‘nudification’ technology

Elon Musk's xAI has filed a federal lawsuit challenging a Minnesota law that bans nudification technology — software that generates fake nude images of real people. The law, the first of its kind in the United States, was set to take effect days after the suit was filed.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

#enforcement#ai-governance#regulation#ai Read original →
Enforcement
R reuters.com · · International

EXCLUSIVE: US FTC sues Hims & Hers for sending user health info to Meta, Snap

The U.S. Federal Trade Commission has filed suit against telehealth company Hims & Hers, alleging the company shared users' personal health information with Meta and Snap, likely for advertising purposes. The case marks a significant federal enforcement action targeting the sharing of sensitive health data with social media platforms.

Who should care: Lawyers · Privacy officers · Compliance

#enforcement Read original →
Enforcement
A ABC4 Utah · · International

Utah joins federal lawsuit against telehealth company Hims & Hers over data privacy concerns

Utah has joined an existing federal lawsuit targeting telehealth company Hims & Hers, citing data privacy concerns. The state's involvement signals growing regulatory scrutiny of how the company handles patient information.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →