PrivacySignal
Analysis ← Front page
GDPR / Intl

One-Stop-Shop case digest on right to object and right to erasure updated

EDPB · · EU · GDPR & International

The European Data Protection Board has released an updated case digest compiling significant One-Stop-Shop decisions related to individuals' rights to object and to erasure under GDPR, drawn from its public register and developed through its inter-DPA cooperation program.

Why this matters: Consolidated guidance on erasure and objection rights clarifies how individuals can exercise control over their personal data across borders — and how seriously regulators treat violations — strengthening practical enforceability of two foundational privacy rights.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy
Read the original at EDPB → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

GDPR / Intl
H Hunton Andrews Kurth LLP · · International

EDPB Calls for Review of EU-U.S. Data Privacy Framework After U.S. Supreme Court Decision on FTC Independence

The European Data Protection Board has called for a review of the EU-U.S. Data Privacy Framework following a U.S. Supreme Court ruling that affects the independence of the Federal Trade Commission, a key enforcement body underpinning the transatlantic data transfer agreement.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →
GDPR / Intl
Information Commissioner's Office · · UK

ICO statement on Upper Tribunal decision

I need to work carefully here — the excerpt gives almost nothing beyond the headline. I'll write only what the headline and source reasonably imply: the UK's Information Commissioner's Office issued a public statement following a ruling by the Upper Tribunal, which is an appellate body that hears ch

Who should care: Lawyers · Privacy officers · AI governance

#gdpr Read original →
GDPR / Intl
Inside Privacy (Covington) · · International

New York Publishes Final SAFE For Kids Act Rules

On July 28, 2026, the New York Office of the Attorney General released final rules (the “Rules”) implementing the Stop Addictive Feeds Exploitation (SAFE) for Kids Act, which goes into effect on January 25, 2027. The SAFE for Kids Act requires online “addictive social media platforms,” which are defined as websites, online services, and applications... Continue Reading…

Who should care: Lawyers · Privacy officers · Compliance

#state-privacy#regulation#security Read original →
GDPR / Intl
Inside Privacy (Covington) · · International

EDPB Publishes Draft Guidelines on Anonymisation

The European Data Protection Board has released draft guidelines updating its 2014 position on anonymisation, offering a more structured framework for determining when data can be treated as truly anonymous. The guidelines reflect the EDPB's cautious stance while attempting to give organisations clearer criteria for making that assessment.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →
GDPR / Intl
IAPP · · International

EDPB requests review of EU-US Data Privacy Framework following Trump v. Slaughter

The European Data Protection Board has called for a review of the EU-US Data Privacy Framework following the Trump v. Slaughter case, which relates to the dismissal of Federal Trade Commission members and raises concerns about the independence of the US enforcement body underpinning the transatlantic data transfer agreement.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →
GDPR / Intl
DataBreaches.net · · International

Cyberattack hits Liechtenstein, with 31,000 records stolen

Liechtenstein's government has confirmed a cyberattack that resulted in the theft of approximately 31,000 personal records. Given the country's population of around 41,000, the breach potentially affects the majority of its residents.

Who should care: Lawyers · Privacy officers · AI governance

#gdpr Read original →